Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
File: NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft (raw, json)
Hash identifier: CiXvlhfmAT+N8W50PVOsAC4Qt4tZxQj8JGRDPI2eYro=
Subject key identifier: 5C:1A:8D:BD:67:4B:17:38:8C:12:B8:D3:E0:4B:21:34:27:4A:AA:DD
Authority key identifier: 36:31:0A:95:94:89:D1:AC:5B:87:96:AF:62:6E:07:C3:F1:C1:71:F3
Certificate issuer: /CN=36310a959489d1ac5b8796af626e07c3f1c171f3
Certificate serial: 019D3A53D1156B3B244C6AB9A1FA69B50485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
Manifest number: 1820
Signing time: Sun 29 Mar 2026 16:01:04 +0000
Manifest this update: Sun 29 Mar 2026 16:01:04 +0000
Manifest next update: Mon 30 Mar 2026 16:01:04 +0000
Files and hashes: 1: NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl (hash: qpPqARzNzSnlGDJq/H8oInqIXUmm9aUdffQiHiExHps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:d1:15:6b:3b:24:4c:6a:b9:a1:fa:69:b5:04:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36310a959489d1ac5b8796af626e07c3f1c171f3
Validity
Not Before: Mar 29 16:01:04 2026 GMT
Not After : Mar 30 16:01:04 2026 GMT
Subject: CN=5c1a8dbd674b17388c12b8d3e04b2134274aaadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:07:0a:98:32:56:51:25:34:37:48:07:57:
db:4b:9f:e1:52:c3:b4:79:8a:69:33:a5:e2:16:aa:
fa:6a:b8:0d:05:4b:6c:41:92:14:bd:b4:1b:3c:01:
22:c6:cf:c8:3d:c6:29:35:f6:cb:0e:bb:6d:77:98:
0d:71:01:e3:0c:05:f3:d5:60:62:19:eb:a5:b1:11:
3b:e8:53:1d:39:d0:d1:fb:f4:b1:58:f7:c5:70:d8:
87:59:84:64:31:ac:9c:9b:7a:3d:eb:0f:67:ba:de:
b2:0b:c4:50:ce:51:d0:b9:4c:8b:8d:85:26:6e:20:
3c:29:f1:13:b3:13:f3:45:ac:e7:61:15:8b:a5:8e:
98:be:a9:5f:fb:b0:aa:ff:30:9f:a0:9c:1a:2b:8d:
21:76:4d:86:af:fc:16:0a:94:51:80:1e:8c:3c:49:
f9:63:5b:51:a2:0f:db:7b:3a:5e:3e:dc:46:a5:47:
17:d4:a5:72:0b:3e:66:53:77:9a:6c:f1:d2:f9:89:
70:b3:5d:4a:70:a1:b7:9b:ab:fe:c9:c6:18:eb:29:
fe:2f:60:6f:80:fc:22:12:db:04:af:01:0f:5e:8f:
1f:b5:83:31:63:30:b8:99:7c:69:e9:b7:8d:54:25:
ed:2e:1a:4f:29:4f:80:e5:16:b3:16:84:de:82:c7:
54:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1A:8D:BD:67:4B:17:38:8C:12:B8:D3:E0:4B:21:34:27:4A:AA:DD
X509v3 Authority Key Identifier:
keyid:36:31:0A:95:94:89:D1:AC:5B:87:96:AF:62:6E:07:C3:F1:C1:71:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:30:70:ff:a6:25:90:98:de:4c:fd:05:fd:0e:3a:39:8f:c3:
b5:90:0f:08:65:5c:b4:08:c8:55:f6:19:3e:1f:df:ab:df:96:
e6:6f:c5:37:e8:0b:6c:82:51:65:c8:35:8a:f0:ca:3a:2a:53:
f9:8b:60:a4:3c:fe:d0:99:ff:fd:74:14:be:02:28:85:56:47:
2e:44:4b:8b:4a:2f:6d:09:53:1c:90:a3:70:22:05:58:83:50:
d8:1d:da:91:ac:68:cf:3d:79:d2:cf:f9:65:52:f9:93:5c:de:
42:f4:8e:e2:5f:f2:5c:10:3d:4e:ff:3a:46:36:30:1a:df:fb:
6c:43:82:9c:ad:21:0a:e5:59:c2:2c:a9:5b:38:7b:d2:8a:c3:
b3:10:34:b3:a6:b7:ce:b4:5c:0b:d2:93:80:47:e9:fe:b0:4d:
45:01:1c:6a:39:f2:fc:6a:b0:0e:1c:4c:dc:06:aa:48:70:65:
27:b5:1c:ed:ad:e7:7c:f8:eb:ba:6d:ee:03:2d:e2:00:c6:92:
5d:f6:92:22:e8:03:a7:d4:c9:fa:09:51:99:17:a2:bf:52:8f:
da:0b:43:7e:9b:0d:cb:20:0d:26:8d:e9:d9:fb:44:63:0f:e6:
98:9c:8b:3f:23:a9:e0:36:ae:fc:ea:f0:f9:ad:41:6e:5e:22:
31:33:9c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:57 2026 by rpki-client