
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
File: njQ_BMJ9FUVaqlzapFadN6iJUNc.mft (raw, json)
Hash identifier: A9GgZnCeF35IhyQDvBlCn+ACBCWqusZOONCa6HiPiXc=
Subject key identifier: AE:E6:BC:DD:4F:2D:DD:1F:17:74:71:40:87:B9:57:3D:76:52:37:33
Authority key identifier: 9E:34:3F:04:C2:7D:15:45:5A:AA:5C:DA:A4:56:9D:37:A8:89:50:D7
Certificate issuer: /CN=9e343f04c27d15455aaa5cdaa4569d37a88950d7
Certificate serial: 019D2816812EB610E95D252506F8A17835B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
Manifest number: 15B6
Signing time: Thu 26 Mar 2026 03:00:56 +0000
Manifest this update: Thu 26 Mar 2026 03:00:56 +0000
Manifest next update: Fri 27 Mar 2026 03:00:56 +0000
Files and hashes: 1: 0FuI4jXPlGiIZ-ddNz8iKnotnD4.roa (hash: beaJtiDKPtUSwXk+AviyFjSlb5rouGEE3c4ysA/M+Yw=)
2: njQ_BMJ9FUVaqlzapFadN6iJUNc.crl (hash: W/T8ufNV426i6yaaMtw+2DEZYIiKlTkKEggZjlLnle4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:81:2e:b6:10:e9:5d:25:25:06:f8:a1:78:35:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e343f04c27d15455aaa5cdaa4569d37a88950d7
Validity
Not Before: Mar 26 03:00:56 2026 GMT
Not After : Mar 27 03:00:56 2026 GMT
Subject: CN=aee6bcdd4f2ddd1f1774714087b9573d76523733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:30:8b:29:c0:49:0c:df:9d:d7:b7:7c:c0:40:
b4:56:0d:91:1c:fe:d8:42:53:5f:f1:d6:f4:75:34:
39:51:3d:1e:89:f3:ed:c6:6d:6e:ac:86:d5:32:30:
a6:d9:05:ab:f9:25:42:fe:34:1e:0f:28:a4:84:d6:
53:f0:3f:7f:e1:c0:22:33:99:70:c5:09:e6:b1:e8:
dd:51:57:0e:fb:44:60:82:24:57:3c:5c:6c:1b:fb:
62:a2:a1:67:2e:a1:b7:2f:ff:d9:18:59:2e:06:9f:
89:42:6f:41:14:7f:94:e1:99:17:fd:1a:5b:15:66:
84:57:26:bf:fe:1f:c6:af:20:cf:e9:63:0b:14:68:
41:55:00:bc:69:59:67:17:f4:58:93:82:fe:41:cf:
46:5d:9b:18:f0:6c:b2:97:41:00:88:55:6c:09:3c:
32:17:93:eb:69:d9:24:2c:3f:72:4b:15:fa:36:cb:
b7:f0:d9:01:59:0f:7f:1c:e9:6b:8b:f1:19:8c:79:
77:c6:ae:22:7d:cf:7c:35:ab:33:13:a8:3b:d0:20:
d7:a3:45:2e:0d:b3:65:0c:82:f0:47:59:52:a6:19:
5e:28:4e:e5:df:59:a4:89:0f:4d:a0:e4:32:4f:ae:
b1:b1:2b:a6:a1:77:d4:66:b6:f5:35:1c:4b:ff:ce:
7b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E6:BC:DD:4F:2D:DD:1F:17:74:71:40:87:B9:57:3D:76:52:37:33
X509v3 Authority Key Identifier:
keyid:9E:34:3F:04:C2:7D:15:45:5A:AA:5C:DA:A4:56:9D:37:A8:89:50:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:8e:91:83:65:7e:9d:ee:0a:c7:f3:9b:05:7e:b6:51:ff:d6:
77:64:cc:68:35:fb:c2:41:d7:22:f9:42:54:27:ef:69:9e:0c:
83:df:04:65:92:d8:5f:03:8f:d4:08:5a:0d:e5:5d:b2:7c:f3:
0b:a1:35:b2:80:37:84:f8:e8:bf:6f:78:da:7a:6c:d6:0a:68:
1b:55:e4:c8:12:61:9e:07:3b:d5:cd:58:dd:0a:cd:4e:98:7d:
49:5b:08:ae:1b:c3:cb:91:ed:26:03:24:34:32:de:aa:fb:98:
f1:4f:cf:9c:c6:3c:24:58:f9:81:98:bc:75:0a:32:f3:f8:82:
f5:b9:8f:ea:38:5d:82:e5:e6:e0:d8:af:e5:f3:a8:09:92:63:
ec:0b:9c:f0:45:26:ac:70:f0:40:15:47:54:5f:67:2b:2f:cd:
ca:a9:1b:90:ba:3d:da:e9:d4:b8:56:df:f5:45:4d:ce:7a:eb:
a8:12:f5:07:cc:cb:a4:4e:6a:e4:85:23:e2:f5:a2:35:bd:45:
dc:f6:5a:fd:5d:79:e3:2f:e8:36:1d:bf:96:ae:19:89:a2:35:
f0:58:be:79:36:a9:73:56:33:38:58:5a:da:ba:c3:e0:f7:70:
27:b1:88:16:71:89:88:e1:1b:ab:86:61:36:5c:a4:fc:36:d6:
23:89:31:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:44 2026 by rpki-client