Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
File: NJYux3ZGK3bmOugVW7J7nYx-f94.mft (raw, json)
Hash identifier: pxgzmMvj/Ws/JozRCCvpobF7B6uaSPp/pSrrks+aXGM=
Subject key identifier: 16:59:EC:3F:7D:53:0E:58:A4:5D:10:B3:62:87:80:A9:44:D9:B2:D3
Authority key identifier: 34:96:2E:C7:76:46:2B:76:E6:3A:E8:15:5B:B2:7B:9D:8C:7E:7F:DE
Certificate issuer: /CN=34962ec776462b76e63ae8155bb27b9d8c7e7fde
Certificate serial: 019F93C8DA1B067E167458D3B488BCCF72E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
Manifest number: 1337
Signing time: Fri 24 Jul 2026 11:00:41 +0000
Manifest this update: Fri 24 Jul 2026 11:00:41 +0000
Manifest next update: Sat 25 Jul 2026 11:00:41 +0000
Files and hashes: 1: Ib2uqCIrQSh2ts48ce02RX5CMhU.roa (hash: NgpeuR8zzzmtvoK82Zgr0BVcCMWZazX1o9VXxJ6Tpcc=)
2: NJYux3ZGK3bmOugVW7J7nYx-f94.crl (hash: PVMnJ3W/ZAJkHOTGUN0fhuytbnaA005RNPbZSmqFXwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:da:1b:06:7e:16:74:58:d3:b4:88:bc:cf:72:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34962ec776462b76e63ae8155bb27b9d8c7e7fde
Validity
Not Before: Jul 24 11:00:41 2026 GMT
Not After : Jul 25 11:00:41 2026 GMT
Subject: CN=1659ec3f7d530e58a45d10b3628780a944d9b2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:de:cf:19:23:f3:e8:de:71:89:78:2a:c4:2c:
f7:14:8a:e8:70:46:da:5b:86:a0:85:2f:7c:12:ce:
df:04:17:a0:9b:c8:65:77:6b:4d:bf:41:24:48:91:
67:fb:a8:76:d8:fd:76:37:49:44:1f:1d:de:02:88:
6e:6b:b7:3a:11:b4:1b:01:2d:47:4f:28:d5:9b:02:
bf:af:5d:b8:5b:32:f4:29:3c:20:31:8b:dd:36:85:
b3:d9:86:28:39:59:5d:0b:01:bc:ae:9f:af:c3:47:
b7:16:4d:6a:5f:de:38:f9:92:3d:ad:29:73:b4:bf:
f5:01:e2:91:3b:46:43:03:9d:8f:8d:fe:bf:9a:23:
0a:1d:47:df:3b:e6:c4:85:4b:21:43:48:02:31:3f:
f2:ff:23:1a:56:4f:22:d3:4d:61:dd:5f:4c:20:28:
0e:8c:5d:03:8a:f6:1f:1d:2e:b7:fa:9d:3a:62:93:
97:d9:e4:99:6f:f2:44:4d:d5:e2:a9:75:68:c7:ac:
df:5c:0d:09:0f:29:97:72:15:42:27:b1:44:1e:38:
32:76:6a:60:6e:c3:ff:07:a2:8a:e4:69:db:0f:a9:
a9:93:57:77:05:56:98:e8:64:c0:57:a2:9c:73:cf:
49:e1:3b:ed:7c:91:ef:9b:16:9e:f2:09:ca:98:35:
c4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:59:EC:3F:7D:53:0E:58:A4:5D:10:B3:62:87:80:A9:44:D9:B2:D3
X509v3 Authority Key Identifier:
keyid:34:96:2E:C7:76:46:2B:76:E6:3A:E8:15:5B:B2:7B:9D:8C:7E:7F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:9c:55:c7:e1:03:7c:dd:12:26:a4:d2:91:53:4b:96:3e:40:
0c:06:c8:b3:31:49:48:15:88:9f:7a:c0:73:f2:11:0e:d6:73:
5b:1b:5c:bd:a4:89:12:64:c4:22:24:f2:cb:72:08:74:c4:43:
0f:85:bd:b0:0e:af:9c:74:42:85:8a:75:8c:c5:b7:ac:8a:cf:
2d:eb:b7:a6:42:47:29:3b:04:09:5a:c1:53:a1:62:35:ac:49:
b6:89:ba:c1:2b:58:35:4e:56:d4:60:41:5c:d3:0e:45:78:ed:
30:55:e5:15:fa:dc:67:6e:7f:57:ac:cc:0a:c7:97:b1:18:50:
07:e5:37:2b:63:08:bf:5b:22:1d:4a:bf:6e:2e:99:15:0f:df:
3a:4a:88:70:16:dd:8f:d5:c0:b2:27:d3:e4:65:fc:b3:61:dd:
8f:55:ae:2f:08:1c:5c:02:9c:38:b1:c1:68:a6:99:41:a4:e5:
ac:e5:b5:81:6e:cd:ef:53:09:48:6f:7d:9b:d0:d1:e7:6d:c4:
2b:fa:a6:b4:e5:3f:0c:c6:7b:67:b5:5f:21:0c:ba:8f:e1:8a:
15:14:21:9e:14:83:8d:53:67:3e:92:0b:da:7b:dd:c8:04:7e:
d4:df:17:eb:28:1c:bf:81:7d:5a:fe:db:04:93:95:e2:db:63:
d6:10:ec:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:10:52 2026 by rpki-client