
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
File: Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft (raw, json)
Hash identifier: y3aK9VLg2Xw8xesRG3QnlnOsKWtBCfGFZw2t24P7mNI=
Subject key identifier: 8C:A3:07:94:E3:6E:95:A1:CB:24:C3:AF:CE:A4:4F:0B:EE:F8:51:F3
Authority key identifier: 36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
Certificate issuer: /CN=363f09508fdf256448219b284bb09b23b2b51396
Certificate serial: 01A1DF832ED1985C54325E0D26491B93AB52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
Manifest number: 080D
Signing time: Sun 15 Nov 2026 14:01:18 +0000
Manifest this update: Sun 15 Nov 2026 14:01:18 +0000
Manifest next update: Mon 16 Nov 2026 14:01:18 +0000
Files and hashes: 1: 23D13zVh0lxnV6wqT9G8OQpIzbk.roa (hash: 9tKZpVV4QTGwDjEBmfC0cE/pR6rIK/y06jjpKw6H3j4=)
2: Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl (hash: wk+QMeKM8YRcCdmSCqDzufjeNNyRAzsjYL9dVttHU24=)
3: gozbr4UgB-08kovMPY3uAOal00w.roa (hash: umdkp9hNx8UQiddB43dZmA/rvSexrPQ2jrWdEUV0vYw=)
4: kUsgoDKvC6Zrkrt39ZK5TGpttts.roa (hash: R6EIMwTV2AxtRVnvEeq/MoHnOuREjc1rKOmJmpjIgRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:2e:d1:98:5c:54:32:5e:0d:26:49:1b:93:ab:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363f09508fdf256448219b284bb09b23b2b51396
Validity
Not Before: Nov 15 14:01:18 2026 GMT
Not After : Nov 16 14:01:18 2026 GMT
Subject: CN=8ca30794e36e95a1cb24c3afcea44f0beef851f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:21:b8:97:68:03:c3:86:08:01:5c:48:28:c4:
10:c9:b4:c4:1e:06:30:41:7c:26:20:45:5b:da:0b:
be:0e:0c:35:4c:20:24:d2:d0:a5:81:78:f0:a5:1c:
a8:fa:1c:92:51:5e:df:04:bd:05:98:47:65:b0:e6:
ee:4c:b8:3b:c2:29:30:a3:8f:6b:e1:8e:0f:ba:a7:
e0:78:2c:2b:13:1f:5e:43:02:ad:8e:0a:a0:5b:55:
46:d1:ac:e5:e3:22:4c:22:a7:75:92:30:27:04:64:
82:0b:2a:03:dd:7b:6f:74:d9:57:89:c0:f5:ca:9e:
22:d7:9f:0b:71:2e:9e:3f:4d:7a:67:ab:c9:ff:f1:
8a:71:54:24:13:1d:f1:a5:ea:58:79:40:bc:7d:65:
b9:d8:d3:ee:73:3c:53:3a:82:dd:75:fc:37:7e:e7:
58:03:ae:e8:1d:5c:83:47:1a:54:89:81:ce:59:f0:
13:f4:8e:17:43:a1:91:8d:bf:4b:ff:55:34:5d:8e:
f5:2b:87:36:0c:9c:7c:41:a7:f9:91:0f:08:e5:43:
91:3a:82:e2:cc:67:3e:d6:1d:7e:0f:97:d5:1b:82:
21:3a:23:6d:eb:1b:ae:61:68:26:ab:d3:53:99:de:
25:27:e7:34:7e:fe:b7:32:17:a8:97:d5:c5:8a:f1:
22:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A3:07:94:E3:6E:95:A1:CB:24:C3:AF:CE:A4:4F:0B:EE:F8:51:F3
X509v3 Authority Key Identifier:
keyid:36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:42:17:a8:35:71:2a:f7:8c:00:90:a0:02:17:95:94:6b:a1:
09:52:55:c4:31:60:b2:cd:37:e4:ef:7f:6e:03:15:05:1d:aa:
d6:4b:63:7c:33:35:12:96:16:1e:7d:62:e8:c2:29:8a:88:4b:
b9:c2:78:92:3e:81:80:cd:b7:f9:47:50:dc:ff:9c:fe:4b:12:
d4:1d:42:a0:83:90:a5:be:d9:e0:b7:b5:e4:3a:07:71:c9:e7:
81:25:52:de:b4:4c:4e:1a:20:f0:70:a8:a8:40:92:57:e6:51:
2d:d7:d7:6c:67:f9:73:0a:e1:3e:aa:c3:87:e1:a0:cc:12:c1:
02:f9:1f:11:a0:64:73:cb:f8:9d:73:88:2d:23:fd:67:28:47:
d3:be:97:18:b8:24:4f:56:80:8b:93:22:49:c5:58:40:d2:2b:
11:57:37:24:5b:9a:a5:2a:91:79:d7:43:04:a5:64:d5:6b:d3:
8a:1d:b6:f7:b4:4f:44:2c:ac:e9:0a:25:cb:54:8d:6c:98:54:
c2:04:fc:a8:11:e4:f6:49:36:84:8c:0d:8f:f6:64:26:ca:b1:
89:df:b8:e8:a1:2d:9f:37:f8:4d:e4:58:f3:cd:2d:40:41:5b:
2a:53:07:0d:82:a7:f7:b7:b3:f6:1f:fa:34:eb:08:45:df:13:
4f:72:66:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:14:32 2026 by rpki-client