Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
File: NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft (raw, json)
Hash identifier: dnCCjsx1zvYa15EZEDYoS5EodZjHKlHiWSQiRmouCaQ=
Subject key identifier: 91:82:EA:F3:04:D5:15:09:40:3A:18:54:44:81:0D:DF:A0:F7:F1:0D
Authority key identifier: 36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3
Certificate issuer: /CN=363548ed4628966248204c2fe69065f0d7b527a3
Certificate serial: 019D25B9FFF1FF1A05DC0A4732C500BEC573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 16:00:39 +0000
Manifest this update: Wed 25 Mar 2026 16:00:39 +0000
Manifest next update: Thu 26 Mar 2026 16:00:39 +0000
Files and hashes: 1: A0lWNibRMfUCrh86hnAg4xQznRU.roa (hash: HCNRAq/OezVNw2n68MqddUBXhIeXxlx+IY4XAxiswJQ=)
2: NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl (hash: a99TA5PWGjwUUavD87B0kBz2u3oELIAIXBW8fVFQX7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:b9:ff:f1:ff:1a:05:dc:0a:47:32:c5:00:be:c5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363548ed4628966248204c2fe69065f0d7b527a3
Validity
Not Before: Mar 25 16:00:39 2026 GMT
Not After : Mar 26 16:00:39 2026 GMT
Subject: CN=9182eaf304d51509403a185444810ddfa0f7f10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:35:a0:d7:4e:21:e2:c6:7f:de:b2:28:7f:b2:
5f:26:31:f3:ed:83:04:f3:ba:60:a2:d5:1b:60:09:
6c:38:a2:8b:ee:c4:6c:e1:b7:9f:e7:ee:86:20:8b:
d1:2d:e1:dc:68:82:65:5a:95:31:c4:cf:10:55:05:
da:8f:b4:3f:36:4d:75:5c:d0:85:cb:82:db:a2:70:
1b:6e:3a:1e:0f:63:b0:aa:f7:b3:05:65:35:5d:8c:
03:28:8a:85:67:c5:3a:08:1d:be:4b:d6:33:8e:3c:
bf:81:e1:06:88:87:b0:64:96:55:c1:e9:0e:94:1c:
ff:38:37:f8:8b:93:ce:f4:dc:58:3f:ab:d1:54:f3:
6e:d4:59:7a:6a:4f:ca:17:42:2d:00:d0:ce:78:ec:
25:75:c4:57:df:8c:ab:3e:39:48:1b:25:5e:02:fb:
55:24:12:53:63:12:80:cb:4a:46:dc:10:59:62:e2:
6f:5b:83:7f:bd:a4:fd:88:72:77:29:99:a1:6c:9f:
29:b7:df:68:e8:e4:98:3d:4a:1e:3d:fe:20:05:17:
73:9c:88:0f:ed:73:ff:49:0a:8c:09:3f:69:09:84:
7d:09:3a:72:a0:3c:d6:9f:f7:86:b5:d9:31:37:ae:
14:a0:f2:a6:2d:99:e0:df:fb:c2:3d:0b:3e:aa:50:
ed:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:82:EA:F3:04:D5:15:09:40:3A:18:54:44:81:0D:DF:A0:F7:F1:0D
X509v3 Authority Key Identifier:
keyid:36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:44:2d:d3:a9:03:75:2a:ce:9c:e9:f6:1d:02:ef:57:7f:bb:
da:8e:21:1d:45:a5:3c:a6:7e:fd:a9:bf:10:48:0b:b0:aa:8c:
71:02:a8:f8:79:b5:d5:03:d8:9e:e4:47:47:4b:19:f7:99:b3:
ee:ee:0b:e6:00:1f:0e:34:07:48:a6:28:73:37:1a:95:eb:02:
04:c5:2e:7f:e3:32:be:9a:67:ba:f8:ea:20:bb:7c:01:cc:4d:
4a:1f:b1:aa:a2:12:17:5e:01:7b:f6:31:78:17:4a:9c:10:bc:
ae:82:3b:d6:83:cc:ff:02:ae:81:83:18:b5:fc:db:6b:19:0c:
44:4d:34:9a:a6:8c:78:f4:7b:48:79:c9:5b:31:83:4a:0f:82:
3b:9c:42:8c:c9:19:ba:61:df:76:18:00:46:5b:cc:39:58:de:
fa:f0:8e:06:c5:c5:09:cf:04:95:d6:60:bd:d7:b6:72:da:df:
ca:09:d1:5e:3a:2f:9c:d0:98:45:1e:39:62:71:11:96:86:f8:
75:25:b0:0d:ac:c5:d0:85:31:b3:6d:50:e2:96:ef:16:b7:3f:
22:2a:eb:d3:4a:65:75:97:e7:97:13:ae:8c:da:5c:e2:fa:86:
61:0e:cc:76:a4:22:3d:8c:b0:8f:b7:33:49:eb:59:bb:ed:49:
71:64:cc:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0luf/x/xoF3ApHMsUAvsVzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MzU0OGVkNDYyODk2NjI0ODIwNGMyZmU2OTA2NWYwZDdi
NTI3YTMwHhcNMjYwMzI1MTYwMDM5WhcNMjYwMzI2MTYwMDM5WjAzMTEwLwYDVQQD
Eyg5MTgyZWFmMzA0ZDUxNTA5NDAzYTE4NTQ0NDgxMGRkZmEwZjdmMTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjWg104h4sZ/3rIof7JfJjHz7YME
87pgotUbYAlsOKKL7sRs4bef5+6GIIvRLeHcaIJlWpUxxM8QVQXaj7Q/Nk11XNCF
y4LbonAbbjoeD2OwqvezBWU1XYwDKIqFZ8U6CB2+S9Yzjjy/geEGiIewZJZVwekO
lBz/ODf4i5PO9NxYP6vRVPNu1Fl6ak/KF0ItANDOeOwldcRX34yrPjlIGyVeAvtV
JBJTYxKAy0pG3BBZYuJvW4N/vaT9iHJ3KZmhbJ8pt99o6OSYPUoePf4gBRdznIgP
7XP/SQqMCT9pCYR9CTpyoDzWn/eGtdkxN64UoPKmLZng3/vCPQs+qlDthQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGC6vME1RUJQDoYVESBDd+g9/ENMB8GA1UdIwQY
MBaAFDY1SO1GKJZiSCBML+aQZfDXtSejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmpWSTdVWW9sbUpJSUV3djVwQmw4TmUxSjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81NWRjODMtMjcwNy00OTE3LWI2M2Yt
OTVjNGU5NGFkMGE5LzEvTmpWSTdVWW9sbUpJSUV3djVwQmw4TmUxSjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi81NWRjODMtMjcwNy00OTE3LWI2M2YtOTVjNGU5NGFkMGE5
LzEvTmpWSTdVWW9sbUpJSUV3djVwQmw4TmUxSjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkQt06kD
dSrOnOn2HQLvV3+72o4hHUWlPKZ+/am/EEgLsKqMcQKo+Hm11QPYnuRHR0sZ95mz
7u4L5gAfDjQHSKYoczcalesCBMUuf+MyvppnuvjqILt8AcxNSh+xqqISF14Be/Yx
eBdKnBC8roI71oPM/wKugYMYtfzbaxkMRE00mqaMePR7SHnJWzGDSg+CO5xCjMkZ
umHfdhgARlvMOVje+vCOBsXFCc8EldZgvde2ctrfygnRXjovnNCYRR45YnERlob4
dSWwDazF0IUxs21Q4pbvFrc/Iirr00pldZfnlxOujNpc4vqGYQ7MdqQiPYywj7cz
SetZu+1JcWTM6A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:30 2026 by rpki-client