Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
File: njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft (raw, json)
Hash identifier: 2oboLM1g3+DcwyqjpuOHXA4Z0/5Sr85RJSs9w15Sn6o=
Subject key identifier: 95:7D:96:E1:C7:D6:47:46:31:3A:95:66:AA:7F:FD:83:7F:46:82:BD
Authority key identifier: 9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B
Certificate issuer: /CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b
Certificate serial: 019D265FC62D9CBB29466658F9B3B87B4006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 19:01:43 +0000
Manifest this update: Wed 25 Mar 2026 19:01:43 +0000
Manifest next update: Thu 26 Mar 2026 19:01:43 +0000
Files and hashes: 1: NwZcawZ1oZBEXy6-sJcGtKyEswU.roa (hash: x1R0gYS1QjDk3Ur01AxDc0zqZ0ZOyidsMEhtEgHTQM0=)
2: njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl (hash: y9nVgkNOxOIPxpN0HoLPHuzmHzqNHAe55s7aS7Ca8G0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:c6:2d:9c:bb:29:46:66:58:f9:b3:b8:7b:40:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b
Validity
Not Before: Mar 25 19:01:43 2026 GMT
Not After : Mar 26 19:01:43 2026 GMT
Subject: CN=957d96e1c7d64746313a9566aa7ffd837f4682bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4c:ed:4d:45:3b:7d:4c:d3:06:8a:1d:88:bb:
3a:cf:73:6a:2e:85:c1:fa:a6:1e:50:77:2d:25:dc:
f3:5f:d3:c0:ab:2a:af:36:34:aa:1e:a9:75:c1:03:
62:36:c5:45:18:a6:2f:c4:15:d1:cf:38:c3:1b:04:
34:af:ab:69:66:25:50:aa:2a:62:d4:12:66:e7:66:
a4:d6:8c:dd:2f:37:79:82:1f:e6:ba:c9:8d:29:7e:
a8:4f:ef:e2:44:3a:bf:a5:7b:32:e6:0d:4d:1c:4c:
fa:91:09:be:b8:cd:23:8e:80:14:e6:58:20:bd:c2:
60:b2:08:75:fd:91:89:5d:6a:61:53:33:19:76:d8:
b6:ac:c0:70:f7:a5:29:c3:5a:17:55:a8:ba:f3:96:
e6:f8:0b:21:bf:3d:7c:ad:39:7b:2c:eb:04:08:ca:
39:7c:b1:83:5b:62:c5:67:cd:92:10:5e:34:68:6b:
a0:81:8d:80:35:19:63:3b:96:ba:bf:8f:9f:14:86:
10:52:73:3f:aa:b6:84:f3:fc:8a:66:ae:18:39:86:
6a:5c:e7:b4:3c:d7:39:a8:27:7a:06:bd:39:c0:e7:
55:e5:06:50:8d:66:6f:bf:c2:22:11:e3:9b:62:a2:
c3:13:d5:d4:2c:20:da:48:ff:8a:a3:65:27:84:6b:
97:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7D:96:E1:C7:D6:47:46:31:3A:95:66:AA:7F:FD:83:7F:46:82:BD
X509v3 Authority Key Identifier:
keyid:9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:f6:f2:45:d1:27:bd:ad:59:32:83:3e:9b:13:e7:06:76:f6:
54:81:de:df:95:71:ef:ea:c4:ef:f2:14:df:fa:26:95:65:b0:
38:79:56:c3:e9:ce:56:ad:38:17:9d:b9:94:54:46:2d:25:76:
ef:6e:1d:78:c6:12:78:ed:7d:11:a5:4f:29:07:38:9a:f6:ae:
3f:64:45:95:ba:ff:f8:db:72:46:15:09:0a:a3:8c:67:cf:b0:
28:16:0f:f4:30:2d:e6:b8:94:c9:61:37:30:f8:c1:98:1d:f0:
70:c8:ec:a7:77:de:7c:d1:d8:41:41:0b:f9:40:1f:ed:1d:89:
57:c4:cc:7f:af:bb:2d:8a:55:bd:00:34:9a:bc:7e:50:61:e3:
88:25:f6:fa:b7:90:98:e5:c7:14:d1:5f:e3:74:73:79:be:4f:
c3:52:b2:0a:f9:e7:8f:1f:ec:dd:a7:a4:57:2a:68:f4:d1:8c:
57:a9:c0:03:b7:a4:68:66:a4:d2:f7:76:10:e1:6d:06:8a:63:
4c:0a:1d:ef:d8:4c:dd:89:39:d9:a9:62:23:fe:e4:b0:cf:55:
18:ad:02:ff:bd:01:59:8d:02:67:69:f2:59:4b:23:2c:a9:94:
91:ec:6f:25:ba:5a:a7:41:55:bf:0f:38:5e:fe:ef:c8:8f:d3:
19:b3:1b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:37 2026 by rpki-client