Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
File: NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft (raw, json)
Hash identifier: 3o9oHRvsRWv/9zEMsaJBACY6eeEhvge1i39tfHu05c8=
Subject key identifier: D6:9D:E8:E7:A0:F0:37:76:B1:B0:0C:CF:A7:60:3D:89:25:18:EB:F9
Authority key identifier: 36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0
Certificate issuer: /CN=36368aac0f4a28c8a31760f06b578dae453146f0
Certificate serial: 019F94002A0893BE10C2D2725C7F4D8CA49F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
Manifest number: 19C4
Signing time: Fri 24 Jul 2026 12:01:06 +0000
Manifest this update: Fri 24 Jul 2026 12:01:06 +0000
Manifest next update: Sat 25 Jul 2026 12:01:06 +0000
Files and hashes: 1: KqbQhkdZxzpCNnx1oWr4fisphrk.roa (hash: Wd6NpR+WA7JLVkZVqwEuj4FqkYVnQ8Ba2vJsRl6/8ck=)
2: NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl (hash: wrgrQ2lyEHr5dkan1HmcolDBe8JAkgx3q8WO7J2i7lE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:00:2a:08:93:be:10:c2:d2:72:5c:7f:4d:8c:a4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36368aac0f4a28c8a31760f06b578dae453146f0
Validity
Not Before: Jul 24 12:01:06 2026 GMT
Not After : Jul 25 12:01:06 2026 GMT
Subject: CN=d69de8e7a0f03776b1b00ccfa7603d892518ebf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:27:86:24:e6:10:0e:b3:31:d1:55:fa:7e:d5:
94:90:39:87:2c:bd:65:c4:b1:89:2f:fe:d9:40:15:
27:54:34:a2:2f:fc:05:6f:f5:2b:cc:ff:12:04:8d:
99:45:35:bf:7f:a4:34:b0:25:0a:39:42:67:b1:43:
03:89:90:ac:f9:d4:6d:b5:2a:2b:f0:56:f3:f8:a0:
e9:80:c1:cf:81:21:61:a3:4a:5e:88:0b:3e:56:79:
a2:63:be:60:d8:77:24:37:4a:74:a0:8c:5a:08:34:
de:bd:39:e7:5a:ea:8e:af:a7:b4:cf:c7:fe:e9:ae:
66:50:25:21:29:17:34:40:78:9f:34:e3:e7:48:8b:
d8:bc:cf:7e:25:e0:d3:85:e6:0b:73:88:38:b5:b2:
f0:43:d0:0f:77:7f:17:1d:64:1c:65:51:95:77:70:
b3:f8:1b:83:c4:0c:57:7d:16:63:c2:29:3b:50:6a:
b0:45:af:3a:5b:0f:68:7d:72:90:3a:2d:94:de:00:
81:0b:0e:57:ba:c9:b0:dc:61:9f:30:33:f3:90:97:
b9:4e:05:e9:96:58:a4:65:d4:26:b5:0d:bf:23:6b:
1a:af:3b:91:08:c8:fc:c5:e0:47:c1:9a:0e:80:d3:
18:09:76:23:c9:08:8b:a9:48:b0:86:cd:94:e5:e0:
cc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9D:E8:E7:A0:F0:37:76:B1:B0:0C:CF:A7:60:3D:89:25:18:EB:F9
X509v3 Authority Key Identifier:
keyid:36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ba:f0:ed:cf:0d:6a:6a:57:6a:75:d6:01:c5:3a:a4:c2:cc:
5e:d4:21:da:25:51:39:7e:a2:3b:d4:b7:5d:02:67:73:fe:d8:
6d:04:c5:4b:c0:b6:c0:a6:44:42:48:3b:96:33:7e:33:97:d6:
ba:88:21:1e:d2:bc:0d:75:d5:b7:37:dc:5b:d2:86:84:db:6f:
19:77:4f:bf:cf:92:26:fb:39:44:a3:8d:34:ad:7e:44:5d:a3:
65:a7:04:1f:1c:27:40:2b:2c:91:79:b7:b5:df:c9:bf:e4:60:
2f:77:1e:18:1d:e6:07:37:2d:e2:4f:fa:cc:42:b9:19:88:5c:
b7:9b:e3:50:80:bd:37:56:ff:6e:e5:71:38:f1:d2:af:da:f7:
79:f3:98:4b:e2:de:08:b2:61:b0:21:c9:b4:2d:5a:68:8d:d8:
cc:6d:d0:35:58:1d:4c:30:1e:97:05:f3:f4:69:d7:53:83:ef:
4b:63:a5:a5:8d:2b:fa:9c:0c:cd:22:d5:92:fc:50:f5:54:2c:
56:2f:76:2b:32:33:bf:70:c7:54:6a:6a:01:a9:77:83:44:bd:
51:7c:be:2b:6f:eb:8d:43:42:1b:56:e0:d4:6d:88:0c:23:96:
f9:2e:67:e7:80:da:ff:48:e0:0d:da:58:28:4c:b1:2f:ba:f7:
9d:5a:cc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:10:53 2026 by rpki-client