Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
File: Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft (raw, json)
Hash identifier: 6u+oXLEztdpfC0JTcnT9pl9Ixd4ovmij3LsDWS6C5AQ=
Subject key identifier: 3B:E4:D9:53:87:04:AF:45:A4:CC:B3:CA:66:50:08:11:75:F7:18:C0
Authority key identifier: 36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
Certificate issuer: /CN=363f09508fdf256448219b284bb09b23b2b51396
Certificate serial: 019D29CE4606380D8E01D2A6466A4CC64F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
Manifest number: 059B
Signing time: Thu 26 Mar 2026 11:01:17 +0000
Manifest this update: Thu 26 Mar 2026 11:01:17 +0000
Manifest next update: Fri 27 Mar 2026 11:01:17 +0000
Files and hashes: 1: 23D13zVh0lxnV6wqT9G8OQpIzbk.roa (hash: 9tKZpVV4QTGwDjEBmfC0cE/pR6rIK/y06jjpKw6H3j4=)
2: MqPaLwzBlGzF1hD8NaRt1le-Ui8.roa (hash: FtEly9gUhctynmcfbBuFtOjyzirnIbZ/PaDH3U6VMXg=)
3: Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl (hash: J2IL4e5zFmSIyHbZRXImVADaLt/SWm1q1d0FQ0Bl4NY=)
4: sB7bazw82pxn7uZCsBRtwsZkc2A.roa (hash: 7xTRvo9YJ48k8rtWT1N5PatcI2zCXtinI13rQTQnEO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:46:06:38:0d:8e:01:d2:a6:46:6a:4c:c6:4f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363f09508fdf256448219b284bb09b23b2b51396
Validity
Not Before: Mar 26 11:01:17 2026 GMT
Not After : Mar 27 11:01:17 2026 GMT
Subject: CN=3be4d9538704af45a4ccb3ca6650081175f718c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:80:8a:38:24:8b:ea:bc:70:5e:94:b2:e9:f3:
fb:cc:08:4b:4e:41:b5:fd:c6:a6:ba:c6:8b:4f:a4:
79:fc:87:bc:ab:62:4f:e5:a9:41:ab:41:d7:54:74:
b2:97:fe:13:93:dc:13:1e:b0:e0:fd:22:d4:7d:01:
6c:50:02:f2:b5:eb:09:e3:c8:3e:d4:69:bb:d0:e0:
61:55:0b:d2:c8:dd:53:ef:c7:99:8b:8c:c4:50:12:
c6:1a:f8:88:ca:ae:26:fb:e7:ef:47:2d:d2:04:4b:
d3:bd:46:9a:2e:48:8c:f7:49:b1:74:c3:84:10:f6:
9d:62:df:24:a7:7d:26:13:a5:55:7e:df:48:3e:85:
ff:41:50:43:c2:32:f7:73:c8:70:b8:4a:0e:16:b7:
53:d1:c4:45:ac:9c:7b:5e:99:58:6d:a8:47:7b:8c:
03:55:3c:4b:2b:06:26:4e:cc:3a:56:f1:c8:f0:b8:
64:4e:6b:c9:07:6e:48:67:ab:37:78:0d:97:1b:99:
37:1b:c2:e7:cc:c8:0f:ec:ac:96:be:25:8c:de:e0:
6d:c8:06:6c:55:83:0f:17:d2:5d:00:32:c3:4c:cc:
a2:f8:b1:a3:e4:27:05:1d:6b:cd:29:46:87:d1:89:
ed:82:ed:89:47:2c:ca:a6:54:5f:04:44:a9:d8:c2:
60:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E4:D9:53:87:04:AF:45:A4:CC:B3:CA:66:50:08:11:75:F7:18:C0
X509v3 Authority Key Identifier:
keyid:36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bb:ba:8e:ee:45:74:f4:cf:7d:fa:95:e2:e2:7f:bf:ea:ca:
75:79:2c:00:11:b8:2f:b6:cb:95:4e:59:ca:e1:4b:89:3b:8d:
e4:19:4e:89:cc:e6:06:22:3f:f7:23:12:92:00:85:a5:17:3a:
1d:b0:65:1c:1b:06:9f:ee:ab:21:b3:24:97:6a:41:9b:36:dd:
ec:60:49:09:50:52:c9:1b:46:4e:fd:d7:ea:0c:e5:0c:8c:86:
56:4e:bf:7a:45:d3:32:6a:65:b7:7f:25:50:60:29:c5:ad:f2:
9b:1d:b4:7a:0a:04:22:ac:3d:e3:f5:56:62:ad:9f:19:34:9c:
5e:ad:be:74:f8:26:19:7b:b0:90:ec:d0:a0:73:53:66:12:7a:
46:d9:10:a7:f8:48:29:49:66:20:65:9d:a8:25:73:80:56:fa:
40:9d:6a:47:9a:1f:72:c9:e5:34:98:4f:04:f8:7d:e0:fd:bc:
4a:7f:d8:6d:a0:a1:d8:5c:0a:f3:f4:a3:b8:c1:57:38:e9:74:
b2:06:c4:c3:2c:18:fb:43:01:b8:4e:31:8c:e4:1e:d6:a0:21:
1f:65:81:3a:a2:e1:28:64:49:3d:99:33:2c:da:6d:be:8b:fa:
bb:74:73:73:eb:21:90:b7:10:a8:20:7f:9d:a2:f1:89:6f:a1:
70:73:c3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:31:57 2026 by rpki-client