Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/175bf7-6147-4389-8afc-69108f7e6771/1/NJHAkpom6NmRn0lXz3p2RPaA3So.mft
File: NJHAkpom6NmRn0lXz3p2RPaA3So.mft (raw, json)
Hash identifier: sKhXZdg2iK+SdK0/8HxiordPwuZNU1nmr07hV6gDxwI=
Subject key identifier: 1F:F7:7E:E5:AE:35:67:8F:B1:2E:33:0F:DC:D7:49:75:44:B6:67:73
Authority key identifier: 34:91:C0:92:9A:26:E8:D9:91:9F:49:57:CF:7A:76:44:F6:80:DD:2A
Certificate issuer: /CN=3491c0929a26e8d9919f4957cf7a7644f680dd2a
Certificate serial: 019D273A84BC04F758B4AA61838810340002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJHAkpom6NmRn0lXz3p2RPaA3So.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/175bf7-6147-4389-8afc-69108f7e6771/1/NJHAkpom6NmRn0lXz3p2RPaA3So.mft
Manifest number: 0164
Signing time: Wed 25 Mar 2026 23:00:39 +0000
Manifest this update: Wed 25 Mar 2026 23:00:39 +0000
Manifest next update: Thu 26 Mar 2026 23:00:39 +0000
Files and hashes: 1: NJHAkpom6NmRn0lXz3p2RPaA3So.crl (hash: 3gcUVYPIsJ/jNhmLXrobGJliUjCNxTPqCxhj93mf6bk=)
2: V9-Z8E1IQV9_tH2htia-ec8O5Gk.roa (hash: pXEBrNZstZMPvOQ8nOcN1BqbNN7mgSlBT6dfG8b4hPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/175bf7-6147-4389-8afc-69108f7e6771/1/NJHAkpom6NmRn0lXz3p2RPaA3So.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/175bf7-6147-4389-8afc-69108f7e6771/1/NJHAkpom6NmRn0lXz3p2RPaA3So.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJHAkpom6NmRn0lXz3p2RPaA3So.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:84:bc:04:f7:58:b4:aa:61:83:88:10:34:00:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3491c0929a26e8d9919f4957cf7a7644f680dd2a
Validity
Not Before: Mar 25 23:00:39 2026 GMT
Not After : Mar 26 23:00:39 2026 GMT
Subject: CN=1ff77ee5ae35678fb12e330fdcd7497544b66773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:da:6c:2b:1f:e0:f6:ee:46:ae:a1:cd:80:bb:
fb:82:5d:8c:50:58:86:02:0b:aa:e8:ce:68:91:83:
cb:e3:d1:32:11:a0:56:4c:e2:6d:c8:9e:c2:40:fb:
82:c0:73:d5:15:9e:c7:35:81:94:66:86:cc:2a:c1:
3b:aa:fb:07:81:13:84:c7:b3:cb:b5:e3:bf:e2:dd:
b7:52:80:0f:9e:e4:57:4e:63:e3:3f:27:2a:e9:a0:
35:88:b4:d8:70:f9:d3:f2:8b:7c:ec:a2:25:54:ae:
63:94:e9:34:cc:01:3b:79:7f:49:bc:89:f2:08:5f:
47:36:6f:b8:db:0a:aa:b9:f2:d5:81:8c:4a:67:6b:
7f:2b:12:02:79:45:a5:1c:35:2a:7f:1e:7c:33:35:
64:36:be:0b:e3:3f:41:d5:f2:9e:68:ed:44:d0:3b:
b2:dd:24:f7:44:cb:db:ba:d4:e9:b2:56:bc:06:4f:
7c:95:2a:f0:77:10:ae:2f:e3:25:d2:ae:3d:95:ce:
2e:4d:6b:ca:a3:7e:f8:d3:0c:32:5f:6f:9f:a7:b9:
16:9c:cb:23:67:36:26:d0:95:25:b4:27:e0:6e:3e:
e4:73:9a:d2:f9:50:b2:85:4a:b8:26:71:73:99:13:
b2:5e:8a:1b:0d:4e:7b:2f:e5:17:07:5f:d6:53:38:
87:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F7:7E:E5:AE:35:67:8F:B1:2E:33:0F:DC:D7:49:75:44:B6:67:73
X509v3 Authority Key Identifier:
keyid:34:91:C0:92:9A:26:E8:D9:91:9F:49:57:CF:7A:76:44:F6:80:DD:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJHAkpom6NmRn0lXz3p2RPaA3So.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/175bf7-6147-4389-8afc-69108f7e6771/1/NJHAkpom6NmRn0lXz3p2RPaA3So.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/175bf7-6147-4389-8afc-69108f7e6771/1/NJHAkpom6NmRn0lXz3p2RPaA3So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:40:38:91:ad:93:84:93:a1:a0:ab:09:4d:53:a4:74:20:d5:
6d:4f:8f:16:15:08:19:28:c6:59:58:1f:4e:ba:0d:24:b0:14:
7f:4d:1f:e8:29:62:e7:d0:e7:5a:4f:b7:04:ef:29:e1:24:e7:
dc:71:7c:50:7f:66:68:bd:8d:df:17:12:37:d4:64:0c:ef:e9:
41:04:e6:cd:2d:02:50:86:43:62:27:51:db:30:8e:76:0f:d2:
2e:7b:b6:eb:30:34:82:14:4f:17:2c:a3:66:36:df:d5:02:fd:
2b:75:d0:97:29:c8:7d:6a:7e:a6:73:dc:7d:9a:b6:40:cb:a0:
2f:be:23:73:b3:4d:9e:2c:41:a0:ca:c6:09:0a:7c:2b:e9:0e:
6a:da:25:3b:c3:c8:d8:a0:25:b9:61:f8:db:e3:9e:75:0a:e1:
86:b2:ed:3a:69:a5:b8:97:64:96:d0:0b:c5:db:6b:9b:91:98:
37:14:15:4d:6b:2b:e5:3e:6b:33:4c:01:a3:2d:69:ad:04:62:
56:0b:99:d6:a2:de:41:dc:f4:f9:08:4d:dd:f4:9d:7c:ad:8d:
b7:5f:df:2a:59:de:0a:28:e2:cf:9d:e2:a5:07:1c:a5:29:b1:
4c:42:f1:0b:69:c1:a3:5c:1e:9f:20:97:ee:ce:6e:c4:5a:7c:
1a:fb:da:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:46 2026 by rpki-client