Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
File: NJYux3ZGK3bmOugVW7J7nYx-f94.mft (raw, json)
Hash identifier: H0AM2kf3dmM2f4ZyRMvoALlBI6dY+qambprlgq2U6MA=
Subject key identifier: E7:BE:15:8D:22:57:BE:A8:35:45:BB:9A:50:A0:4D:51:5C:F3:66:7A
Authority key identifier: 34:96:2E:C7:76:46:2B:76:E6:3A:E8:15:5B:B2:7B:9D:8C:7E:7F:DE
Certificate issuer: /CN=34962ec776462b76e63ae8155bb27b9d8c7e7fde
Certificate serial: 019D2DAAACE4FEA739449BB3A1CD9F02941E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
Manifest number: 11F9
Signing time: Fri 27 Mar 2026 05:00:52 +0000
Manifest this update: Fri 27 Mar 2026 05:00:52 +0000
Manifest next update: Sat 28 Mar 2026 05:00:52 +0000
Files and hashes: 1: Ib2uqCIrQSh2ts48ce02RX5CMhU.roa (hash: NgpeuR8zzzmtvoK82Zgr0BVcCMWZazX1o9VXxJ6Tpcc=)
2: NJYux3ZGK3bmOugVW7J7nYx-f94.crl (hash: kDl1Sh+yEJC3X6Sc2QUT/HE/g7nTi5lMTud3Z6y71og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2d:aa:ac:e4:fe:a7:39:44:9b:b3:a1:cd:9f:02:94:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34962ec776462b76e63ae8155bb27b9d8c7e7fde
Validity
Not Before: Mar 27 05:00:52 2026 GMT
Not After : Mar 28 05:00:52 2026 GMT
Subject: CN=e7be158d2257bea83545bb9a50a04d515cf3667a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:45:0d:e0:5d:2e:69:d5:44:1b:1b:18:a0:33:
74:93:86:a9:8c:4e:6d:0d:64:99:a9:cd:e0:7e:40:
e9:48:6d:43:a3:46:74:c9:a3:75:05:66:f8:2d:79:
56:2c:9b:7d:51:72:d5:62:b7:78:f7:c3:87:ac:97:
e9:2b:39:5e:9c:40:ce:4c:55:4a:82:59:ab:8f:05:
31:31:ed:e3:ea:a6:c8:bb:9c:68:cc:06:a4:f8:44:
2f:50:aa:bc:80:1c:09:53:60:5f:1b:c2:dd:9a:6f:
49:7f:d2:01:ca:16:af:a6:11:71:65:c7:3d:cf:df:
b3:aa:9f:d4:d9:f2:ca:3f:71:a7:92:70:c4:2e:99:
fa:02:21:8b:0f:e1:75:a9:0b:fb:91:ba:33:c8:31:
ef:e1:02:32:3a:76:ef:99:f9:1b:63:01:c9:f4:9e:
6c:a9:1c:aa:dc:b4:87:54:15:f0:5d:43:ae:26:0a:
0c:2f:10:3c:23:d9:37:fc:45:07:cd:b7:fe:1e:08:
15:b3:2c:40:03:63:8e:2f:9f:17:1f:0a:9d:f0:24:
ce:8c:53:a3:0b:ed:ee:93:f0:f8:82:c7:35:b0:18:
5e:f6:c7:81:7e:e1:10:57:00:cc:b2:aa:90:f1:6f:
14:a5:cf:79:38:61:5d:83:0f:a3:18:7c:9f:8b:7c:
f9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BE:15:8D:22:57:BE:A8:35:45:BB:9A:50:A0:4D:51:5C:F3:66:7A
X509v3 Authority Key Identifier:
keyid:34:96:2E:C7:76:46:2B:76:E6:3A:E8:15:5B:B2:7B:9D:8C:7E:7F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:60:4c:25:4c:ab:5f:e3:51:26:09:39:ff:80:d0:94:d1:c7:
92:00:d8:1d:ac:ed:0b:a7:97:13:79:fa:01:1f:12:25:94:4d:
ef:cc:27:f5:12:b1:89:e4:1a:dd:d7:b2:1e:d0:cf:54:40:d7:
eb:45:d1:3e:9d:a6:53:d2:95:d0:a2:55:5b:1b:0d:8e:76:26:
4c:89:6d:6f:aa:62:35:85:1c:a0:18:a4:04:ff:fb:8a:27:37:
d8:fc:3c:99:cc:87:dd:ad:fe:77:7f:c4:3a:ec:ac:fe:af:9f:
1c:a1:e6:0d:a6:a8:ad:5b:80:aa:1d:82:b3:c6:12:11:3d:6b:
da:b5:ba:03:15:1f:0d:7b:a2:a2:47:fa:26:8b:5b:cb:7b:0b:
1c:f1:94:18:da:0f:22:05:c7:12:45:98:53:2d:fb:73:5e:bc:
e6:b3:bb:f3:c3:0c:a3:7e:aa:04:cd:8c:0c:7b:e6:47:09:a4:
76:ab:bc:ce:5a:41:c2:15:bc:0e:11:62:1c:f7:7b:33:90:3c:
de:6e:1a:25:40:5f:68:c0:65:1a:79:cc:9c:12:11:4a:c8:89:
37:c4:fb:e0:85:b5:e5:9b:38:ba:ad:ab:95:1d:26:94:77:a2:
b1:f9:87:f8:86:79:1c:70:94:03:9f:2c:aa:1c:3c:6f:95:b4:
85:31:fe:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 11:23:46 2026 by rpki-client