Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
File: NjSXIAQAsPGq56h_yjbwd-DtYs4.mft (raw, json)
Hash identifier: PAA7VyD+OxCRYW5V7WnfGLWbkJySXmPXTZUioki0QNI=
Subject key identifier: 18:EE:91:30:DE:B8:16:6F:D8:AB:D2:97:1E:7D:5B:25:90:0B:AD:0C
Authority key identifier: 36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE
Certificate issuer: /CN=363497200400b0f1aae7a87fca36f077e0ed62ce
Certificate serial: 019D2703DB26EAF585241A2E2A27D1DB1C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
Manifest number: 11FB
Signing time: Wed 25 Mar 2026 22:00:57 +0000
Manifest this update: Wed 25 Mar 2026 22:00:57 +0000
Manifest next update: Thu 26 Mar 2026 22:00:57 +0000
Files and hashes: 1: 1cYADgyS9xUjbMqbTO8dbbS_ut0.roa (hash: sfBNeCmh7Arfh1u7KBOZ5cOLU6qwGNu6Ll6DwZYAXsQ=)
2: NjSXIAQAsPGq56h_yjbwd-DtYs4.crl (hash: p3aCQID7S13wRoQWYtCqv61rpBfR27eVG2hCP0D6Zac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:db:26:ea:f5:85:24:1a:2e:2a:27:d1:db:1c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363497200400b0f1aae7a87fca36f077e0ed62ce
Validity
Not Before: Mar 25 22:00:57 2026 GMT
Not After : Mar 26 22:00:57 2026 GMT
Subject: CN=18ee9130deb8166fd8abd2971e7d5b25900bad0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:55:13:e3:33:28:8e:76:b3:4f:73:f1:5e:21:
de:b5:d0:74:e4:2d:01:1e:e1:1a:10:4d:b9:df:f4:
c8:05:86:69:94:92:23:0d:35:ce:0b:ef:52:4e:8f:
99:2f:e7:e1:35:ff:0e:54:da:0a:82:8a:de:c2:56:
bd:a1:01:ae:32:d9:b7:91:22:19:e2:a8:f7:82:37:
5c:78:cb:41:d0:8e:d6:3a:d7:47:1d:0d:7f:5a:1e:
85:d1:f9:29:9e:5b:a3:85:7d:1c:00:0f:64:43:d1:
8d:56:77:7e:62:5a:2f:97:c1:28:5c:fd:fd:33:e0:
a8:5c:8d:e0:4f:84:e5:26:ed:eb:4e:3f:dc:a1:93:
16:f3:27:76:94:19:26:51:40:61:bf:48:ca:01:35:
3c:e0:48:ae:d1:57:db:24:d2:41:36:3d:8b:2f:04:
94:0b:fb:87:b6:25:0c:2b:24:fa:40:e8:55:73:9a:
9e:68:e0:2e:b9:52:af:23:3c:81:84:45:14:0e:de:
ca:05:4f:a1:0a:c4:dc:3d:6d:62:9e:89:a7:77:b0:
f5:68:9d:f0:0d:83:8a:85:bd:75:da:de:d1:54:57:
58:a6:05:2e:90:81:f4:8f:8a:a3:6e:52:18:84:d3:
a6:0e:55:0b:55:b5:66:d9:d5:fc:89:63:39:eb:3a:
c5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EE:91:30:DE:B8:16:6F:D8:AB:D2:97:1E:7D:5B:25:90:0B:AD:0C
X509v3 Authority Key Identifier:
keyid:36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a4:1d:d1:c2:0c:20:ab:aa:5b:55:24:9b:5a:8c:ee:39:52:
62:55:72:fc:48:71:bd:b1:4e:a4:79:a1:c5:62:f3:62:d7:d9:
24:f9:22:8c:f6:70:be:02:64:29:c0:06:12:ab:81:e3:78:82:
12:29:8b:cf:c2:e4:c7:5f:c6:02:25:d2:69:18:04:18:eb:ef:
52:f3:16:90:4d:c7:f8:f5:8b:2a:d1:f8:1a:c9:c4:9b:af:39:
6a:3f:1c:47:7a:81:14:cd:ee:d5:48:5f:96:b3:44:d9:36:95:
06:e2:3c:c3:79:fa:7e:b2:57:03:a7:65:3f:a9:ac:63:39:b5:
67:3f:20:30:e0:27:9a:a5:41:86:9a:4c:10:d1:ba:20:c6:08:
2d:f0:08:2a:18:d3:dd:7c:61:9c:89:30:0a:64:84:92:d2:de:
af:14:70:72:67:bc:f6:38:36:0c:f9:1b:f7:4e:f3:f6:6e:27:
8c:5e:20:f0:a3:63:20:d2:ee:49:8e:11:f2:19:39:17:c3:bb:
a2:a4:22:63:3c:c1:f7:2f:24:c0:d0:27:25:76:c4:58:6b:36:
12:6a:e9:64:50:94:a0:f3:78:56:5a:98:ec:9c:02:3b:6c:93:
a6:04:66:10:a5:39:1f:36:c1:9d:38:73:97:6d:c1:05:eb:30:
6c:0a:bf:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:47:08 2026 by rpki-client