Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
File: njSxhiccy4nF5Ysw5wvXQQnMKEo.mft (raw, json)
Hash identifier: p4yZORKH6VVsBNKWUrAS7HShEKoKwPGiIU/T2ko/Ico=
Subject key identifier: A7:33:32:30:5F:36:F2:74:22:A4:5C:C5:05:06:A0:EF:62:EE:90:87
Authority key identifier: 9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A
Certificate issuer: /CN=9e34b186271ccb89c5e58b30e70bd74109cc284a
Certificate serial: 019D3977E607B68EB4BBC4689F5C53CD7F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
Manifest number: 0A88
Signing time: Sun 29 Mar 2026 12:00:52 +0000
Manifest this update: Sun 29 Mar 2026 12:00:52 +0000
Manifest next update: Mon 30 Mar 2026 12:00:52 +0000
Files and hashes: 1: OZYu8TXfUk-kbxX_bRvIgQ0oovM.roa (hash: Ny452KM+a4Sd+vTRDWLyo6c+SHTZU1CTK6tileQUJVE=)
2: njSxhiccy4nF5Ysw5wvXQQnMKEo.crl (hash: ZpPeNdmazJ2GKw48J9fThJfkxMaumKD4uT1qee/teXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:e6:07:b6:8e:b4:bb:c4:68:9f:5c:53:cd:7f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e34b186271ccb89c5e58b30e70bd74109cc284a
Validity
Not Before: Mar 29 12:00:52 2026 GMT
Not After : Mar 30 12:00:52 2026 GMT
Subject: CN=a73332305f36f27422a45cc50506a0ef62ee9087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8a:64:61:e3:3c:98:f8:2e:83:5d:29:f2:5e:
73:14:3d:46:98:46:72:18:ef:64:6f:24:a2:ca:8a:
88:85:1a:eb:ce:59:7c:75:6b:ca:1a:c9:eb:42:02:
6d:5d:b7:b4:5d:3f:b4:27:49:7d:6f:05:2c:82:e7:
31:61:30:8d:47:a1:0c:6e:d6:32:d8:47:15:c3:ef:
cf:fe:e2:27:0f:22:fd:f5:41:df:12:a5:de:a2:f1:
76:2b:88:bd:7e:f8:ac:d7:44:a1:ba:d5:92:5f:c3:
89:12:36:f9:ef:4b:f5:40:3f:2b:d8:35:e3:3f:05:
87:4d:af:e9:49:21:05:9e:4a:f6:fb:9f:52:f2:13:
e6:ba:db:4c:b5:af:35:a9:2c:a6:77:51:a9:7c:c8:
88:2e:63:91:40:4e:45:2b:dd:ec:d9:84:87:6c:74:
3a:be:34:fa:b3:01:db:d8:6a:2d:99:9c:9a:62:5f:
21:e5:38:18:07:b5:40:4e:af:61:70:e2:72:23:ba:
8a:6f:19:4a:de:cb:e7:e6:ad:8d:d3:b2:2a:0e:ed:
67:60:4b:a0:50:d4:57:33:fe:01:81:ec:b3:64:da:
df:f8:cb:df:85:ec:bc:62:dc:0a:68:e8:08:bc:d8:
1b:17:bb:64:42:18:d7:53:c6:82:77:91:bd:b7:dd:
42:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:33:32:30:5F:36:F2:74:22:A4:5C:C5:05:06:A0:EF:62:EE:90:87
X509v3 Authority Key Identifier:
keyid:9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b8:d3:9f:4e:4a:1f:43:ea:cc:d1:e4:ee:28:76:55:26:08:
89:82:f1:1c:77:76:7a:63:3b:31:c6:27:56:99:74:d4:93:b6:
ca:79:52:19:5b:fb:a2:9e:18:0a:6a:1b:5d:c1:12:f3:58:e8:
72:7a:68:9d:ca:b5:a7:6f:0c:09:f1:bd:67:06:7d:59:ed:c4:
1e:51:8b:2e:99:66:57:03:7b:70:47:32:59:3b:68:ce:02:44:
5a:06:96:75:2e:7a:f5:05:00:d2:c1:8e:7f:ea:e6:0a:9d:93:
40:23:b8:64:48:bc:09:e9:4d:cf:76:e6:e3:e0:d2:f4:33:cd:
37:40:c5:d7:96:5e:2c:2b:47:fe:0e:33:ec:e7:f9:0b:2a:c5:
4d:62:ff:21:5f:47:cc:92:87:96:32:cb:5d:a1:ce:48:52:03:
c9:67:f9:f8:b3:9e:77:d0:d2:e7:58:a8:1f:0e:ec:b4:cb:29:
0f:4b:04:30:fd:5a:7a:8e:d0:31:7a:0b:9c:cb:3c:30:42:02:
34:f2:02:bf:b1:88:7f:d0:4f:3f:7a:7e:6c:90:83:57:00:2d:
6a:48:6b:dd:18:b7:6a:d8:17:97:fa:d5:2a:ea:c6:6e:14:d1:
0e:85:84:88:20:4d:41:1a:2e:83:0b:e2:10:6f:d8:c3:1a:80:
96:71:c3:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d+YHto60u8Ron1xTzX9dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMzRiMTg2MjcxY2NiODljNWU1OGIzMGU3MGJkNzQxMDlj
YzI4NGEwHhcNMjYwMzI5MTIwMDUyWhcNMjYwMzMwMTIwMDUyWjAzMTEwLwYDVQQD
EyhhNzMzMzIzMDVmMzZmMjc0MjJhNDVjYzUwNTA2YTBlZjYyZWU5MDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0opkYeM8mPgug10p8l5zFD1GmEZy
GO9kbySiyoqIhRrrzll8dWvKGsnrQgJtXbe0XT+0J0l9bwUsgucxYTCNR6EMbtYy
2EcVw+/P/uInDyL99UHfEqXeovF2K4i9fvis10ShutWSX8OJEjb570v1QD8r2DXj
PwWHTa/pSSEFnkr2+59S8hPmuttMta81qSymd1GpfMiILmORQE5FK93s2YSHbHQ6
vjT6swHb2GotmZyaYl8h5TgYB7VATq9hcOJyI7qKbxlK3svn5q2N07IqDu1nYEug
UNRXM/4BgeyzZNrf+Mvfhey8YtwKaOgIvNgbF7tkQhjXU8aCd5G9t91C7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKczMjBfNvJ0IqRcxQUGoO9i7pCHMB8GA1UdIwQY
MBaAFJ40sYYnHMuJxeWLMOcL10EJzChKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmpTeGhpY2N5NG5GNVlzdzV3dlhRUW5NS0VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wYzM3YzMtOTk5MC00NTk2LTk5ZTkt
ZGQ1ZmZkNTMxNTcxLzEvbmpTeGhpY2N5NG5GNVlzdzV3dlhRUW5NS0VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8wYzM3YzMtOTk5MC00NTk2LTk5ZTktZGQ1ZmZkNTMxNTcx
LzEvbmpTeGhpY2N5NG5GNVlzdzV3dlhRUW5NS0VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZbjTn05K
H0PqzNHk7ih2VSYIiYLxHHd2emM7McYnVpl01JO2ynlSGVv7op4YCmobXcES81jo
cnponcq1p28MCfG9ZwZ9We3EHlGLLplmVwN7cEcyWTtozgJEWgaWdS569QUA0sGO
f+rmCp2TQCO4ZEi8CelNz3bm4+DS9DPNN0DF15ZeLCtH/g4z7Of5CyrFTWL/IV9H
zJKHljLLXaHOSFIDyWf5+LOed9DS51ioHw7stMspD0sEMP1aeo7QMXoLnMs8MEIC
NPICv7GIf9BPP3p+bJCDVwAtakhr3Ri3atgXl/rVKurGbhTRDoWEiCBNQRougwvi
EG/YwxqAlnHDGw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:35 2026 by rpki-client