
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
File: Njdp-GRKWnGK5isFjdH7YstaPCA.mft (raw, json)
Hash identifier: C6B3ViyHZaBljuzZgaHbjT318oFF4XRsdU7Mkhbcgmw=
Subject key identifier: C5:6C:DB:A9:9B:61:BA:CE:41:9B:D1:E6:3E:75:B6:7D:50:3E:C5:46
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial: 019CDFFD57360AA2E04B7838632C23AC86F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
Manifest number: 14B7
Signing time: Thu 12 Mar 2026 03:00:47 +0000
Manifest this update: Thu 12 Mar 2026 03:00:47 +0000
Manifest next update: Fri 13 Mar 2026 03:00:47 +0000
Files and hashes: 1: 1Tp5jbagpbP3bBosGJzl-vHNwTQ.roa (hash: i9HeQV78oqCuZb5raO//KiH1IAj0HTvvTkgPI31BqfQ=)
2: Cmua0yPNEROUYE9gWO0boVFBqqI.roa (hash: QtNaoAAFNyuhV0lOAnmbW4QSviWCbgXg1PPnGvF92BA=)
3: Gd4dGKjLUsVU7VozTNgX24oGjDQ.roa (hash: wJKyMf9dQCbz6ez7Pqptgxmy4B0HOw9mW+eIDY2Cw3U=)
4: LivM5lzLDSqnTiCIS8JQUOg-kPY.roa (hash: vHdlRvY+/RNvoYO8n7qGZrjxG/8e8ox6/YqQnek6wG4=)
5: Njdp-GRKWnGK5isFjdH7YstaPCA.crl (hash: rx60c4DJ2UqHU/smmL4POpUUIk2L36DqGOotYLYBI/w=)
6: O5osv3DjuzH13zfgVnDH1QiAYBs.roa (hash: g4/oo0ufVfbT9VkbjHiy8bTeHsZgO5XCr3NOXd63NBY=)
7: Sq2F_2MHygjFpi07suhBUa1R_68.roa (hash: ZG5062dDlxQJwdav6+4ilTyJp7ZFq4AHU9MeUnd4pII=)
8: TTCwApiEQAeKWTc5BiOUMPL6Ik0.roa (hash: fI6BVqo8RniHbiOVWZbTUBpJZ0C+Wx1WVAjNDB9Eti8=)
9: Udbfecd9OCCIBZn1ZpoY9Waxspc.roa (hash: xbUJKuEDdKtNd3Br7CaZ0f5SjgbV6Mekx30bWNFgp2Q=)
10: VHn5fbgK9TT163CBWJTv5V844m4.roa (hash: TPUdDfw5uVSRkDAl0XMbSNV4hlR+3H658TMXtO+hKqQ=)
11: c4YRVrrYx--dsVjGMZzmOagHjlw.roa (hash: hrL5enlq2a1V/HselJlnzGeZ8x6quh8vP1eKrV5uojA=)
12: eUOZgV76QaRXLmPL7aDDL3sUxZk.roa (hash: kGucB56GSQLPJJxVequzzGvYl0NeOQ53k+5PEv+Z9RM=)
13: fYaeUMWEkAvz96xxBdazFB21sEA.roa (hash: L6NiwK6X5YK9VisN8/EtYmbWZywh9IQ9ZUBfOb02fSY=)
14: fhyLY9yJmwIhlgdl0r_eC4s6raM.roa (hash: oTh1Q6WnZkhhrxgjEjjzthbMNdzSpywy2PEB3YpQ5UM=)
15: igwMdaPVeZq3u3a2W5jJS_b0L5M.roa (hash: C9ttpwY5RPzDqWX4XDQVwla5pbbO0G/VsUYqR1jcOSI=)
16: p6jyfQcKh_7urtZCXFFZHxQLNAU.roa (hash: 17hXAcCpVFiA3XxPVxSAF84J11pXBVVEl5UnV5vUWt0=)
17: piiqlTI956md5esUYEMv2zHnNtM.roa (hash: Nk456LdgPEgcZyErXy4N8gG+NYFmzf8zfElBf1LUQWo=)
18: rK5QYt727S_N217kOz5a7i6vJ3I.roa (hash: oTY6skhXO9LqbfVvKq/PNI/5wPYntdfhba8E6tbWr80=)
19: v-byi7__tAGSfpc0KLzrbUQNmHM.roa (hash: LsA0lCodRUKqd0B/Z87PBzTIKKAf5j4kKwJmm6jdV3o=)
20: yHA0HvBqPYWnWTRkB4ImgxFstEw.roa (hash: xadPdgKWj0tNuPjFa+N1kM0Efwyv535SVC0Xmv8Ej3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:df:fd:57:36:0a:a2:e0:4b:78:38:63:2c:23:ac:86:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Validity
Not Before: Mar 12 03:00:47 2026 GMT
Not After : Mar 13 03:00:47 2026 GMT
Subject: CN=c56cdba99b61bace419bd1e63e75b67d503ec546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d0:33:5b:5b:64:93:cf:40:98:00:92:bd:5d:
66:75:b4:42:17:a3:d0:59:0a:db:61:fb:05:7a:84:
4c:aa:ad:fc:75:07:f6:9e:f5:b3:98:78:2f:91:9d:
7a:a0:be:55:e0:59:5c:0c:d8:16:3d:0c:fd:e6:00:
e9:93:59:c2:75:67:db:ea:3f:0f:f7:df:a4:fd:24:
41:37:02:70:07:d1:dc:02:05:36:c6:5b:25:46:9e:
3e:78:5b:5e:47:ac:2b:95:3e:83:4b:0c:33:7a:98:
0a:33:50:f8:42:b2:66:fb:6b:12:0a:a2:56:92:99:
2b:d7:63:f5:3e:21:ca:1c:72:e9:ac:21:46:6e:5f:
2c:de:25:07:c6:02:df:01:3d:f4:98:e6:92:24:bb:
14:71:18:b3:52:c1:40:23:ad:86:4d:ae:56:ca:ba:
41:37:40:c7:43:f0:a3:9c:9a:65:87:05:ee:4d:44:
26:9a:ee:66:91:9d:07:76:03:af:4a:17:d3:73:31:
c7:e6:90:8a:ad:70:d7:6f:8c:9c:90:2e:54:3d:a4:
34:a4:ee:db:ce:64:62:e5:dd:08:e8:e1:5a:39:ab:
ac:51:b6:5f:85:55:71:f3:93:4b:99:5d:6d:93:bd:
89:17:15:79:12:d8:3c:8d:bd:3b:40:82:91:f2:5f:
4a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6C:DB:A9:9B:61:BA:CE:41:9B:D1:E6:3E:75:B6:7D:50:3E:C5:46
X509v3 Authority Key Identifier:
keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:1d:27:21:bb:5f:3a:ca:59:61:73:3c:1e:67:e2:43:ab:f2:
87:8d:0c:91:17:ea:fd:a0:66:19:da:f4:fa:42:24:a5:20:60:
aa:84:f8:4b:a8:b7:98:ce:8a:3d:9a:a5:e4:54:14:2f:69:3f:
d1:0d:a9:1d:6b:46:10:60:a0:b9:89:1b:57:50:c0:24:e7:d3:
ed:94:06:24:f1:df:6a:6f:2f:5c:ad:90:34:2f:90:7a:67:a4:
2d:ad:a4:99:84:65:5d:a5:5e:de:65:ae:1c:04:21:4b:9a:36:
93:0f:a2:d0:bc:5f:ef:92:db:b5:85:eb:f9:20:60:00:ab:e9:
ca:69:35:d0:ab:5d:a1:d2:23:02:7f:60:f7:2a:ad:0e:ad:30:
81:71:65:22:0d:cf:39:3e:16:50:6f:aa:35:dc:71:ab:17:b5:
10:a2:c7:dd:32:ae:cd:0c:6d:d5:77:23:4c:e5:91:44:28:70:
79:fa:56:a0:27:da:2c:50:74:97:7c:86:3a:db:25:4c:7f:6f:
36:31:78:ae:d0:2b:46:57:52:6a:7d:da:6d:f7:50:a0:2b:88:
98:b3:82:14:54:b0:4f:5c:70:bd:56:aa:29:2c:4d:60:b8:23:
e8:7c:d9:39:5d:d0:af:5a:9b:41:18:c7:97:38:00:35:ed:cf:
89:40:75:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 09:01:20 2026 by rpki-client