Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
File: njlEmOR5hynOmVC-NLRZqe8p9eg.mft (raw, json)
Hash identifier: t2VQMTQmzcMMNJwY49hJjzSSLDZEIeqqiRxYqMBUqZA=
Subject key identifier: EA:5C:8E:95:CB:9A:82:7A:0E:FA:64:99:66:9F:5F:1A:50:E2:73:52
Authority key identifier: 9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
Certificate issuer: /CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Certificate serial: 01A10580C8373A5C962BB89B4A75C405EB66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
Manifest number: 139F
Signing time: Sun 04 Oct 2026 06:01:28 +0000
Manifest this update: Sun 04 Oct 2026 06:01:28 +0000
Manifest next update: Mon 05 Oct 2026 06:01:28 +0000
Files and hashes: 1: njlEmOR5hynOmVC-NLRZqe8p9eg.crl (hash: 2CzZOiSBmBvm3FzzZFXfhJshQ5qiBNUkffqQnfTa7kY=)
2: qNw9AQGKv7ZPwZbLGtS3SURNtOU.roa (hash: 2+VxvFzEn6OTXuPf/Khi8sLwDBnZtcyQctbFQn2v60g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:80:c8:37:3a:5c:96:2b:b8:9b:4a:75:c4:05:eb:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Validity
Not Before: Oct 4 06:01:28 2026 GMT
Not After : Oct 5 06:01:28 2026 GMT
Subject: CN=ea5c8e95cb9a827a0efa6499669f5f1a50e27352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:95:a0:b1:76:c1:fb:17:01:87:c8:7c:3d:75:
69:c2:d9:ee:f9:e3:2e:3b:09:2b:3f:ab:ab:00:8c:
a3:98:55:de:9a:0e:f0:e6:3d:ed:14:98:d0:be:10:
3c:6d:b8:65:91:01:98:4a:9a:d4:e6:3d:5e:aa:89:
d6:92:b1:21:48:12:2a:9c:5c:e9:8c:04:61:33:8b:
dc:91:36:46:66:5d:d5:84:fc:17:0d:b2:c6:ec:4f:
16:c0:a2:be:9b:16:9a:ae:a9:66:30:e5:13:3d:95:
79:1f:29:f0:6a:84:e6:d8:31:9e:2c:e5:c7:5b:e0:
ce:2b:8b:0c:a4:5c:3f:24:11:88:43:42:b7:8f:3e:
38:c9:63:8b:69:d1:9d:e1:97:a9:01:89:7f:b5:b9:
1e:c4:a4:18:56:62:b3:00:f5:d6:8b:53:ec:d3:68:
04:9a:86:61:ae:43:c7:2a:be:4a:25:18:15:dc:88:
86:3f:30:a6:42:fc:e2:5b:0f:43:ad:3e:05:8b:96:
63:5a:31:68:38:1f:2b:c3:a1:8f:30:98:5f:f1:2b:
9b:a0:a4:48:57:67:26:e3:55:52:7b:37:e0:9e:79:
3a:53:65:95:f1:12:dd:61:f5:f1:60:3e:66:b2:2e:
60:45:00:f4:c0:21:0d:c9:93:f1:c9:d3:aa:c7:f7:
93:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5C:8E:95:CB:9A:82:7A:0E:FA:64:99:66:9F:5F:1A:50:E2:73:52
X509v3 Authority Key Identifier:
keyid:9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:94:e0:0e:58:bb:85:d5:c3:26:9b:f0:2d:70:a7:af:e5:d6:
21:5d:b4:90:3d:fb:66:28:d6:a6:eb:b6:95:3e:41:ea:e9:d1:
6d:f6:cc:5c:b1:ed:61:e3:57:3e:b7:a1:45:62:b0:1c:6a:3b:
0c:6d:ac:81:a3:f4:86:9f:c6:a7:f3:08:ed:4f:55:29:c0:0e:
d9:e8:ce:70:3f:53:7d:9a:8f:ce:01:ad:a1:1b:7f:06:5a:5a:
0e:eb:dc:0c:f6:52:ca:61:e4:0d:24:a7:55:1f:b5:b2:cb:07:
33:df:96:56:23:44:21:82:49:3c:c1:7e:e4:9e:5d:eb:7c:fb:
d7:cf:c9:6e:9c:93:3a:d4:3f:15:db:47:c6:02:c4:1f:d7:8f:
2a:30:2c:25:5f:88:9d:0f:be:e1:7b:32:34:e5:36:49:9a:ca:
2f:07:72:c6:04:fe:b1:01:f6:f2:b3:fb:9d:33:67:eb:26:9e:
62:ea:93:2d:95:4f:a4:8e:59:12:d8:57:d7:4e:dc:42:67:a4:
98:c6:82:ab:9c:c8:3a:92:14:a3:0c:98:cb:cb:7d:22:d5:94:
a5:12:88:69:cd:cf:8c:f3:4e:dd:ec:d1:4d:07:3b:e9:e2:4c:
3d:3f:81:78:85:a2:9d:3f:c2:eb:10:80:8a:ec:91:a5:1e:47:
13:bb:71:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:01:26 2026 by rpki-client