Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
File: Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft (raw, json)
Hash identifier: ueB6sYy8YpJpzKex5ysYOCkJnfriiA4mhZRlxr4e5pE=
Subject key identifier: 4B:4D:4B:12:49:F7:39:22:18:11:46:4A:DE:90:92:87:70:57:91:8D
Authority key identifier: 36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
Certificate issuer: /CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Certificate serial: 019D37893BB29A602A223C9E48C06DEE89CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
Manifest number: 0502
Signing time: Sun 29 Mar 2026 03:00:33 +0000
Manifest this update: Sun 29 Mar 2026 03:00:33 +0000
Manifest next update: Mon 30 Mar 2026 03:00:33 +0000
Files and hashes: 1: Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl (hash: I+BMiOiNBHeQOt6bwlimbE8PjiVgnH7Nw5FSFsXLXCA=)
2: gk4gJNf4bMjSvDxRHQogZ5qtP6Q.asa (hash: vTTViFNR0vhqhAgeAJUXn5K4HSHa6hjasS8Zb1BM/mE=)
3: zHfDyMse-vNJufyI9SCct6ZccBc.roa (hash: 3exCGyL+KSp4BS9S3DhRHLN2Z0aDggGK5DfZIwZFGko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:3b:b2:9a:60:2a:22:3c:9e:48:c0:6d:ee:89:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Validity
Not Before: Mar 29 03:00:33 2026 GMT
Not After : Mar 30 03:00:33 2026 GMT
Subject: CN=4b4d4b1249f739221811464ade9092877057918d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3d:88:c6:ff:a9:c5:9e:4d:bc:81:f3:0a:20:
65:0e:f3:89:83:60:19:da:e1:4a:2f:f8:fd:07:fd:
92:41:75:98:23:73:f2:b6:b1:9a:fb:61:93:04:3c:
f6:a0:c9:9c:85:a7:fb:ed:b9:5a:fe:e6:76:02:84:
04:b8:f1:e1:19:c3:2c:8e:ec:e7:85:d0:b7:ef:62:
f9:5c:67:fe:3f:18:a0:71:54:ed:ca:40:ba:a3:c2:
c4:da:c7:b0:c2:6d:28:ce:3d:03:39:17:0f:bf:fa:
e1:5a:10:16:b8:53:50:4e:a1:ee:53:39:66:dc:69:
87:81:e4:2d:b7:57:79:2d:f1:f5:69:25:73:2d:d2:
ed:62:5e:d2:e1:59:60:4c:c5:dc:bc:9b:16:a4:90:
e8:2b:05:9d:c0:c1:a6:4f:66:0b:2e:f5:3e:f2:93:
da:d9:61:22:c8:33:b6:c2:49:61:6b:cd:ce:02:b6:
eb:23:48:21:85:02:34:89:a5:d1:7c:8b:99:b9:cf:
16:af:02:db:53:a1:bd:63:88:e7:64:a4:1c:ee:6a:
18:dc:f7:2b:f5:3c:0e:26:6b:12:10:c6:ac:7e:41:
eb:e1:8a:71:6b:52:77:15:af:bd:ae:7e:80:6e:8b:
9f:88:1b:ea:35:79:a7:bd:dd:77:64:9b:f1:ac:53:
26:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4D:4B:12:49:F7:39:22:18:11:46:4A:DE:90:92:87:70:57:91:8D
X509v3 Authority Key Identifier:
keyid:36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:48:39:5b:8f:27:d6:fc:4a:22:28:a2:09:b6:06:e6:ec:6b:
d1:78:43:2a:bf:1a:cb:72:70:1b:93:ed:71:0f:34:59:c4:3f:
59:95:24:b4:e0:6d:0e:ab:20:e3:42:d1:5e:ec:ed:f0:4a:92:
a8:4f:b9:1f:c0:79:89:73:8e:2d:a3:84:fb:d6:a0:a8:3d:9e:
71:8d:6e:a5:85:99:ce:0b:22:42:b9:29:6a:14:86:fb:ae:71:
d9:9e:05:c0:e9:14:dc:96:a8:40:58:94:fb:a4:ad:00:98:57:
3c:8c:5f:6b:a9:ba:c4:3e:22:d2:a2:66:66:0f:2e:15:fa:e6:
1e:90:66:4e:2b:c0:8f:66:51:a1:44:4e:fc:71:f9:e8:ad:32:
c0:38:fd:ae:72:3f:97:c0:f1:c6:16:35:24:a1:d4:70:18:6d:
b0:b1:a4:2a:16:b4:33:ce:90:8d:74:48:56:d7:90:87:07:a0:
2e:62:5f:03:45:2d:cf:6c:a8:fe:53:ee:f4:5d:3f:83:54:6d:
6c:58:f1:55:8d:18:ba:3c:84:bb:43:1a:63:bf:7c:3d:45:7f:
27:25:23:04:a9:e7:95:f5:0f:17:39:d9:00:2d:3b:f8:13:83:
4e:50:0a:48:17:bd:83:64:fb:ee:ac:f0:4c:26:60:8c:a7:b5:
88:3d:c3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:38 2026 by rpki-client