Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
File: Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft (raw, json)
Hash identifier: kgyLBrt2TXefqFD6pnNqGg5zBuDcxBy7aty0NxEg8jw=
Subject key identifier: BD:43:08:C7:0E:04:91:49:05:42:2D:BF:72:62:62:13:D2:B5:62:A9
Authority key identifier: 36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
Certificate issuer: /CN=363f09508fdf256448219b284bb09b23b2b51396
Certificate serial: 019D8491B515CB683D292E55BA1A4D226CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
Manifest number: 05CA
Signing time: Mon 13 Apr 2026 02:00:34 +0000
Manifest this update: Mon 13 Apr 2026 02:00:34 +0000
Manifest next update: Tue 14 Apr 2026 02:00:34 +0000
Files and hashes: 1: 23D13zVh0lxnV6wqT9G8OQpIzbk.roa (hash: 9tKZpVV4QTGwDjEBmfC0cE/pR6rIK/y06jjpKw6H3j4=)
2: MqPaLwzBlGzF1hD8NaRt1le-Ui8.roa (hash: FtEly9gUhctynmcfbBuFtOjyzirnIbZ/PaDH3U6VMXg=)
3: Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl (hash: XA6rtgl6RyT2fRzkgMIgzmupxHOGHXt+vmgmZ9svtLY=)
4: sB7bazw82pxn7uZCsBRtwsZkc2A.roa (hash: 7xTRvo9YJ48k8rtWT1N5PatcI2zCXtinI13rQTQnEO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Apr 2026 23:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:84:91:b5:15:cb:68:3d:29:2e:55:ba:1a:4d:22:6c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363f09508fdf256448219b284bb09b23b2b51396
Validity
Not Before: Apr 13 02:00:34 2026 GMT
Not After : Apr 14 02:00:34 2026 GMT
Subject: CN=bd4308c70e04914905422dbf72626213d2b562a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7c:34:66:38:e2:a7:38:cc:37:51:e7:fe:12:
ac:ca:3a:0c:f6:a1:ab:b1:f4:69:0e:b4:a8:1f:3a:
da:a3:ae:e8:2e:e5:18:76:dc:92:91:d6:09:30:95:
30:39:87:b4:7d:81:5c:2a:33:72:88:ca:8a:4d:d9:
a9:91:5c:bc:cc:c8:f5:d8:59:5d:b0:69:a3:57:59:
3b:35:2f:40:2a:2a:52:5d:13:5e:3d:f2:d5:a8:1a:
a4:44:1e:d5:63:f4:f6:16:98:55:7e:ef:d0:e5:2f:
de:54:6a:8e:64:52:45:72:9a:30:28:99:c4:40:ac:
8a:c7:3f:57:68:dd:6f:b0:a0:6f:a1:7d:1f:96:fe:
29:09:14:c7:cf:d0:11:03:da:aa:03:fc:b6:b5:cd:
8c:0a:8d:f4:e5:d2:83:e4:81:66:6f:71:62:9a:e8:
38:0a:42:63:b4:4a:b3:2e:4d:fa:a0:59:8a:4e:e9:
9e:f2:5c:b0:44:73:1e:84:d3:74:57:bf:27:81:ad:
12:f2:72:1f:64:c0:36:ff:40:30:04:de:be:1f:19:
94:e2:97:e0:87:62:72:14:62:08:ca:3e:e0:1e:93:
b5:04:0b:fc:b8:ba:76:c6:e1:de:6e:da:4e:49:62:
87:34:17:ce:80:5d:e9:b1:c4:2a:55:f5:e3:db:ca:
c4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:43:08:C7:0E:04:91:49:05:42:2D:BF:72:62:62:13:D2:B5:62:A9
X509v3 Authority Key Identifier:
keyid:36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:09:5b:68:ec:6e:27:84:bd:49:3c:fd:7a:9d:c4:63:8b:33:
cc:84:a2:5f:f8:82:7f:02:9d:cb:b3:b0:34:ea:be:cd:c8:88:
7b:41:06:86:65:57:70:6d:0e:3d:39:da:6b:14:30:ab:fb:db:
97:68:14:02:62:ad:43:e6:37:d9:8b:91:18:5f:43:64:1c:f8:
5c:4e:c9:9a:ba:a8:9e:dc:35:d6:01:e1:1d:e8:9b:b4:c7:66:
78:89:27:f3:a5:6c:ea:37:2c:1d:4e:c8:ec:e3:0f:e4:16:b3:
69:70:9b:0a:da:a2:c5:d4:89:d1:4e:58:fa:c2:89:ee:2a:3a:
6d:42:76:dc:92:94:18:b2:f8:65:1e:1d:cb:ae:80:ab:e0:ad:
cf:10:a7:5f:cc:98:f4:37:3c:34:11:a5:c3:1e:d6:2e:2f:b2:
7f:7a:c5:05:8c:d5:08:7b:88:5f:37:f2:7a:3b:c5:60:ed:ea:
ed:91:ad:e7:58:24:13:52:10:0e:40:6c:fb:65:dd:d8:67:90:
91:63:9a:51:6f:74:7b:e6:79:53:65:f7:72:25:fc:f1:1c:84:
a9:36:b1:ce:36:18:7c:2a:e6:01:60:2b:12:bd:2e:40:d6:49:
52:e8:2d:47:27:9f:49:2c:06:79:7d:ff:7d:43:11:6f:26:5e:
b4:44:0f:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2EkbUVy2g9KS5VuhpNImzxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2M2YwOTUwOGZkZjI1NjQ0ODIxOWIyODRiYjA5YjIzYjJi
NTEzOTYwHhcNMjYwNDEzMDIwMDM0WhcNMjYwNDE0MDIwMDM0WjAzMTEwLwYDVQQD
EyhiZDQzMDhjNzBlMDQ5MTQ5MDU0MjJkYmY3MjYyNjIxM2QyYjU2MmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnw0ZjjipzjMN1Hn/hKsyjoM9qGr
sfRpDrSoHzrao67oLuUYdtySkdYJMJUwOYe0fYFcKjNyiMqKTdmpkVy8zMj12Fld
sGmjV1k7NS9AKipSXRNePfLVqBqkRB7VY/T2FphVfu/Q5S/eVGqOZFJFcpowKJnE
QKyKxz9XaN1vsKBvoX0flv4pCRTHz9ARA9qqA/y2tc2MCo305dKD5IFmb3Fimug4
CkJjtEqzLk36oFmKTume8lywRHMehNN0V78nga0S8nIfZMA2/0AwBN6+HxmU4pfg
h2JyFGIIyj7gHpO1BAv8uLp2xuHebtpOSWKHNBfOgF3pscQqVfXj28rE3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1DCMcOBJFJBUItv3JiYhPStWKpMB8GA1UdIwQY
MBaAFDY/CVCP3yVkSCGbKEuwmyOytROWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmo4SlVJX2ZKV1JJSVpzb1M3Q2JJN0sxRTVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9hZDA1ZjItYWIzOS00MTMyLTg0OTIt
ZmQ4MTQ0NTVhODY4LzEvTmo4SlVJX2ZKV1JJSVpzb1M3Q2JJN0sxRTVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9hZDA1ZjItYWIzOS00MTMyLTg0OTItZmQ4MTQ0NTVhODY4
LzEvTmo4SlVJX2ZKV1JJSVpzb1M3Q2JJN0sxRTVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATwlbaOxu
J4S9STz9ep3EY4szzISiX/iCfwKdy7OwNOq+zciIe0EGhmVXcG0OPTnaaxQwq/vb
l2gUAmKtQ+Y32YuRGF9DZBz4XE7Jmrqontw11gHhHeibtMdmeIkn86Vs6jcsHU7I
7OMP5BazaXCbCtqixdSJ0U5Y+sKJ7io6bUJ23JKUGLL4ZR4dy66Aq+CtzxCnX8yY
9Dc8NBGlwx7WLi+yf3rFBYzVCHuIXzfyejvFYO3q7ZGt51gkE1IQDkBs+2Xd2GeQ
kWOaUW90e+Z5U2X3ciX88RyEqTaxzjYYfCrmAWArEr0uQNZJUugtRyefSSwGeX3/
fUMRbyZetEQPuA==
-----END CERTIFICATE-----
Generated at Mon Apr 13 08:07:34 2026 by rpki-client