Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
File: njlEmOR5hynOmVC-NLRZqe8p9eg.mft (raw, json)
Hash identifier: NfvyAW08xg9yw8h2rzLDHoIxuc/emtTyY7XXqRsh80o=
Subject key identifier: 3C:CD:89:00:2A:81:E8:61:89:A1:38:A1:1C:AD:F0:85:F7:60:5A:BA
Authority key identifier: 9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
Certificate issuer: /CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Certificate serial: 019E1FECA85DCAEE5AB6E3C209E0B28FA818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
Manifest number: 121F
Signing time: Wed 13 May 2026 06:01:03 +0000
Manifest this update: Wed 13 May 2026 06:01:03 +0000
Manifest next update: Thu 14 May 2026 06:01:03 +0000
Files and hashes: 1: njlEmOR5hynOmVC-NLRZqe8p9eg.crl (hash: JUP6Z4DENXniZhSAIhMUhAHMJH9jBf88KsU4NHLHQzs=)
2: qNw9AQGKv7ZPwZbLGtS3SURNtOU.roa (hash: 2+VxvFzEn6OTXuPf/Khi8sLwDBnZtcyQctbFQn2v60g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:a8:5d:ca:ee:5a:b6:e3:c2:09:e0:b2:8f:a8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Validity
Not Before: May 13 06:01:03 2026 GMT
Not After : May 14 06:01:03 2026 GMT
Subject: CN=3ccd89002a81e86189a138a11cadf085f7605aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:87:8a:24:4c:22:f0:bb:2e:45:25:20:9f:61:
77:19:0e:ec:a5:07:be:23:51:44:11:c9:d8:90:72:
d0:70:e4:bf:d6:9e:0c:4c:94:57:14:ab:2b:a9:55:
e2:c2:90:dc:80:74:99:10:4b:76:d4:5f:76:1d:91:
b7:85:98:5b:e4:6c:b2:70:1a:66:8b:38:13:df:cc:
9b:cb:71:5b:8a:a0:c1:50:44:ae:0f:47:3a:a0:3c:
47:15:6a:00:18:e4:2e:44:cd:a0:68:d6:9a:17:ba:
41:af:01:65:6c:73:2e:b7:db:ac:ca:e1:e4:9d:5e:
09:0f:b7:a6:69:dd:f4:05:52:c2:18:ca:a3:e1:56:
e7:95:f9:79:5e:7d:2e:4c:89:f0:40:de:e5:c0:15:
f0:2b:6a:17:26:2f:b1:55:38:2f:99:fe:ba:df:79:
d6:0f:2e:c7:95:8f:4c:cf:2a:9a:4e:24:29:aa:d2:
20:00:38:b3:bd:a9:61:53:d1:52:80:46:93:65:d1:
f8:50:1d:f3:6c:58:ce:a6:a1:7d:ee:36:d7:e5:fc:
c2:6f:48:ba:df:ec:a5:7d:5d:4a:ba:57:46:97:b8:
87:39:7e:1c:c8:dd:fc:50:3b:1e:f4:95:38:bf:67:
5a:e3:c4:99:4d:2c:67:40:ca:2d:77:c1:ba:e3:f2:
9e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CD:89:00:2A:81:E8:61:89:A1:38:A1:1C:AD:F0:85:F7:60:5A:BA
X509v3 Authority Key Identifier:
keyid:9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:3d:5d:38:34:0b:59:07:d8:77:2d:d9:30:c5:5a:08:13:54:
ff:ed:da:2a:c9:e7:0f:b2:24:c4:c6:3b:ce:3e:d9:61:45:b5:
45:23:23:fe:b5:3f:33:3b:d1:8c:fc:db:34:13:54:9c:6a:18:
5d:2f:03:77:fd:90:50:6f:4a:7f:95:0b:96:eb:18:34:b4:b4:
b5:0c:8f:2e:16:24:ba:1b:f8:82:fd:25:c0:1b:8c:ff:f1:84:
13:3e:a8:5d:ac:c9:4d:1e:a8:b0:06:08:87:21:30:4f:de:1a:
69:8f:ef:7c:27:d8:81:70:4c:a6:b9:f6:d2:39:77:46:27:ec:
35:a9:e9:7a:32:0a:77:f3:bc:cd:13:e6:85:20:c7:65:4d:6b:
83:7d:15:45:07:22:63:f4:f1:54:fb:4f:df:cc:79:54:33:f1:
24:9f:ad:5b:40:10:7b:0e:55:f5:3f:92:0e:1d:0d:da:14:9e:
ec:8e:b4:aa:b1:3e:98:49:e0:77:94:d1:f4:51:ac:71:51:f1:
ae:59:03:e4:d2:9c:1c:21:07:0e:41:ab:b1:43:24:c1:62:76:
0e:3d:df:ad:a4:15:20:e8:77:5c:45:cc:35:8d:2d:aa:bb:6c:
d7:59:62:8d:b8:86:b5:67:6c:a2:b1:a6:b3:cd:ed:64:f4:b0:
39:64:1e:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4f7Khdyu5atuPCCeCyj6gYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMzk0NDk4ZTQ3OTg3MjljZTk5NTBiZTM0YjQ1OWE5ZWYy
OWY1ZTgwHhcNMjYwNTEzMDYwMTAzWhcNMjYwNTE0MDYwMTAzWjAzMTEwLwYDVQQD
EygzY2NkODkwMDJhODFlODYxODlhMTM4YTExY2FkZjA4NWY3NjA1YWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oeKJEwi8LsuRSUgn2F3GQ7spQe+
I1FEEcnYkHLQcOS/1p4MTJRXFKsrqVXiwpDcgHSZEEt21F92HZG3hZhb5GyycBpm
izgT38yby3FbiqDBUESuD0c6oDxHFWoAGOQuRM2gaNaaF7pBrwFlbHMut9usyuHk
nV4JD7emad30BVLCGMqj4Vbnlfl5Xn0uTInwQN7lwBXwK2oXJi+xVTgvmf6633nW
Dy7HlY9MzyqaTiQpqtIgADizvalhU9FSgEaTZdH4UB3zbFjOpqF97jbX5fzCb0i6
3+ylfV1KuldGl7iHOX4cyN38UDse9JU4v2da48SZTSxnQMotd8G64/KeAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzNiQAqgehhiaE4oRyt8IX3YFq6MB8GA1UdIwQY
MBaAFJ45RJjkeYcpzplQvjS0WanvKfXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmpsRW1PUjVoeW5PbVZDLU5MUlpxZThwOWVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8yNTE2ZTItOWUyMi00ZTA2LThhNDQt
ZmE1ZWY0ZjUzZmJiLzEvbmpsRW1PUjVoeW5PbVZDLU5MUlpxZThwOWVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8yNTE2ZTItOWUyMi00ZTA2LThhNDQtZmE1ZWY0ZjUzZmJi
LzEvbmpsRW1PUjVoeW5PbVZDLU5MUlpxZThwOWVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARD1dODQL
WQfYdy3ZMMVaCBNU/+3aKsnnD7IkxMY7zj7ZYUW1RSMj/rU/MzvRjPzbNBNUnGoY
XS8Dd/2QUG9Kf5ULlusYNLS0tQyPLhYkuhv4gv0lwBuM//GEEz6oXazJTR6osAYI
hyEwT94aaY/vfCfYgXBMprn20jl3RifsNanpejIKd/O8zRPmhSDHZU1rg30VRQci
Y/TxVPtP38x5VDPxJJ+tW0AQew5V9T+SDh0N2hSe7I60qrE+mEngd5TR9FGscVHx
rlkD5NKcHCEHDkGrsUMkwWJ2Dj3fraQVIOh3XEXMNY0tqrts11lijbiGtWdsorGm
s83tZPSwOWQelg==
-----END CERTIFICATE-----
Generated at Wed May 13 12:32:24 2026 by rpki-client