Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
File: NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft (raw, json)
Hash identifier: gpNY21kYufcK+zkAjmuWyWqDQVJ+5nc03qoUSE2fsp8=
Subject key identifier: D8:3F:12:68:3C:9B:6E:31:D0:AB:28:C4:60:3E:71:CD:5B:98:28:AA
Authority key identifier: 36:3B:D1:B2:9C:89:ED:B9:44:E2:87:10:D1:93:87:4C:94:32:3E:AA
Certificate issuer: /CN=363bd1b29c89edb944e28710d193874c94323eaa
Certificate serial: 019D28F2E89E3BE74941F94A3BA359CADBBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
Manifest number: 056A
Signing time: Thu 26 Mar 2026 07:01:40 +0000
Manifest this update: Thu 26 Mar 2026 07:01:40 +0000
Manifest next update: Fri 27 Mar 2026 07:01:40 +0000
Files and hashes: 1: NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl (hash: c1jUlhgSXU1Q23QHIkfxv0eRwASZpMh0JrG0GZN/cKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:e8:9e:3b:e7:49:41:f9:4a:3b:a3:59:ca:db:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363bd1b29c89edb944e28710d193874c94323eaa
Validity
Not Before: Mar 26 07:01:40 2026 GMT
Not After : Mar 27 07:01:40 2026 GMT
Subject: CN=d83f12683c9b6e31d0ab28c4603e71cd5b9828aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:af:21:73:d2:f5:4d:2b:9d:74:eb:f6:51:f8:
70:7c:9e:03:be:dc:a6:44:33:60:8a:0b:0e:e0:71:
19:de:a0:8e:05:b7:fb:81:21:f8:a8:42:28:1f:ed:
34:30:9d:46:15:3c:3e:10:9a:3b:9d:95:8d:ef:51:
52:0d:75:2c:50:61:4e:99:2e:6c:e8:64:2e:a1:e8:
3a:08:47:d2:19:70:5d:90:8f:1f:6a:3b:d1:f3:d9:
70:45:e4:e0:b8:c8:92:35:9d:1a:0b:3f:a7:d0:6f:
05:93:57:6c:86:f8:c9:66:c5:93:b5:75:01:09:ea:
fc:0a:78:40:71:44:12:e9:09:24:d3:5e:09:3b:51:
f0:ef:40:72:3d:44:26:be:11:f2:b9:0d:ce:9e:22:
bd:87:03:b2:74:15:7c:37:53:ab:e4:ae:f9:78:5a:
0d:16:9c:0b:b5:a4:8e:19:72:b7:ca:58:24:5e:78:
34:f9:7f:a2:13:ac:22:89:4d:81:53:d4:69:10:76:
5d:f3:ff:2f:7c:64:58:0f:f8:57:7d:32:85:96:22:
d5:33:c1:9e:c7:ad:10:b5:93:19:9d:eb:98:69:17:
33:44:7b:d0:fb:c5:77:e7:1d:bf:14:cc:97:5d:b7:
98:47:8b:78:1c:44:1d:66:91:36:fe:dd:68:8b:fd:
84:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3F:12:68:3C:9B:6E:31:D0:AB:28:C4:60:3E:71:CD:5B:98:28:AA
X509v3 Authority Key Identifier:
keyid:36:3B:D1:B2:9C:89:ED:B9:44:E2:87:10:D1:93:87:4C:94:32:3E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c8:99:08:b7:fc:de:14:81:6b:7f:d9:1c:8e:96:c8:a0:fd:
77:58:d7:37:46:16:bd:0a:db:d3:61:e4:3a:88:e4:95:46:6d:
90:a7:49:40:b9:7c:4a:ec:c6:2e:2a:aa:03:92:eb:c7:29:a2:
e6:5c:0f:ea:c1:17:5d:57:46:9c:b5:09:75:d0:ac:bf:93:42:
03:f6:ef:c4:29:62:41:b7:f4:af:84:ab:82:5a:b7:a3:8f:f6:
12:ba:d5:ca:b1:42:19:93:be:9a:da:a8:af:91:34:5f:ee:e8:
f7:d4:5a:9e:b0:98:63:6d:be:03:8d:a9:60:21:9c:ba:60:7b:
ce:dd:f0:83:54:d0:09:c6:53:24:f8:81:0d:88:9d:cf:61:c5:
ae:f2:d0:e0:16:fe:97:dc:0b:bc:0d:76:df:d6:da:33:a5:2c:
0c:60:bc:30:bb:f0:f3:c6:3a:33:fd:8e:a7:05:78:84:af:8b:
9c:89:5a:ae:74:0a:9d:99:b0:7b:04:7b:9d:80:84:5c:c8:9d:
3d:ef:c3:5b:58:37:d7:b5:c8:be:da:13:43:37:f8:47:95:84:
ab:0e:a1:be:80:9b:e2:1a:07:07:f0:23:5f:9f:9e:9f:8a:01:
a4:30:06:21:4a:28:b4:69:19:12:af:02:d2:e7:93:97:9f:ea:
57:2e:51:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:00 2026 by rpki-client