Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
File: njlEmOR5hynOmVC-NLRZqe8p9eg.mft (raw, json)
Hash identifier: CNygLHfNzWVpkxXsfTY+g2sDHT+4wdPQ+xJZBbPLOgM=
Subject key identifier: F8:B9:03:04:E0:BB:4A:5A:EB:47:53:24:F1:71:A6:04:64:25:AE:37
Authority key identifier: 9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
Certificate issuer: /CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Certificate serial: 019D26CD63D473349CBFA8B2F572CF15134A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
Manifest number: 119E
Signing time: Wed 25 Mar 2026 21:01:27 +0000
Manifest this update: Wed 25 Mar 2026 21:01:27 +0000
Manifest next update: Thu 26 Mar 2026 21:01:27 +0000
Files and hashes: 1: njlEmOR5hynOmVC-NLRZqe8p9eg.crl (hash: TmAbHJdoFW7MeJXl/vqXrgi+6IvO58M1RkydaFCTGrE=)
2: qNw9AQGKv7ZPwZbLGtS3SURNtOU.roa (hash: 2+VxvFzEn6OTXuPf/Khi8sLwDBnZtcyQctbFQn2v60g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:63:d4:73:34:9c:bf:a8:b2:f5:72:cf:15:13:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Validity
Not Before: Mar 25 21:01:27 2026 GMT
Not After : Mar 26 21:01:27 2026 GMT
Subject: CN=f8b90304e0bb4a5aeb475324f171a6046425ae37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e7:f7:46:0e:1d:a2:a2:7c:47:d4:4e:28:3f:
37:a8:f1:12:73:9b:bb:cd:35:46:22:8f:ca:40:db:
44:61:7e:47:01:1b:b0:1b:89:50:8c:9a:92:23:7f:
79:9a:63:1e:c7:47:20:9d:22:f1:44:71:90:50:7f:
63:b7:46:46:cc:79:8f:5a:2f:a6:9c:30:15:31:bd:
47:75:88:8a:2f:ab:98:0d:ea:f2:ad:9b:cf:02:d8:
3f:9d:b0:0d:0b:13:bb:44:31:2f:bf:48:48:23:57:
5d:a9:2a:d0:70:2b:4c:bb:3b:fe:00:ab:00:17:b2:
54:c6:70:bb:56:68:23:2c:ea:99:97:16:6f:d9:ef:
f1:a3:f0:80:52:95:75:e3:28:57:c9:dd:77:58:a2:
6c:83:4c:14:3b:32:eb:13:b8:f5:b9:f6:bd:6d:8f:
da:48:c2:59:10:d6:70:63:c3:4a:66:2b:16:9f:34:
de:26:e7:20:2a:96:fb:8f:65:b0:77:f3:24:15:c7:
e7:5e:6d:b2:2f:fc:d2:65:03:d1:65:56:5b:7b:20:
1b:74:1d:bf:b4:ff:6c:a5:1f:ce:d5:38:e0:ad:7b:
b9:28:11:fb:d3:15:fa:dd:3f:d7:17:9b:82:60:45:
4d:45:55:12:50:bf:bd:9e:42:20:24:b7:26:25:fb:
25:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B9:03:04:E0:BB:4A:5A:EB:47:53:24:F1:71:A6:04:64:25:AE:37
X509v3 Authority Key Identifier:
keyid:9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f0:6e:5a:29:1e:60:15:cf:9b:37:d1:09:92:6b:12:1c:30:
ff:65:43:d1:05:74:c0:d6:9d:3f:9e:60:72:8f:77:36:5a:6f:
89:4a:18:52:b9:26:de:54:2a:55:b1:44:07:b4:ae:04:ee:8b:
97:5d:c6:21:49:82:dd:22:b0:fe:b6:1d:f3:80:f4:96:4c:2c:
c5:aa:5a:11:2b:00:5e:6d:00:9e:b1:c9:a5:01:1c:49:47:08:
05:30:00:71:4a:ce:d0:23:5b:f6:76:93:96:af:3f:b9:1d:92:
00:ff:44:65:fc:c9:b1:e1:56:24:1e:44:e6:e5:01:9c:c3:5b:
b4:aa:58:7f:c3:4a:23:88:e4:40:15:e5:e9:d3:6f:54:0b:5b:
49:20:d5:dd:31:37:ab:97:4b:8d:f3:3a:95:31:95:4c:98:25:
53:40:23:ff:f2:81:da:ec:72:38:0e:59:d9:cc:91:06:0e:64:
b9:09:21:dd:95:c5:42:90:b0:6e:ee:7e:10:ab:e0:d5:97:65:
d9:43:99:c2:38:56:e5:da:c1:b8:6f:68:8f:24:d3:6e:3e:96:
4c:6e:fe:91:fd:f8:f0:ca:2a:7d:02:3e:ed:33:02:01:cb:1f:
df:0a:3f:ad:db:ac:1a:d2:e0:a2:cc:ea:c5:f6:94:4e:eb:c3:
ab:a6:c6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:54:23 2026 by rpki-client