Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/175bf7-6147-4389-8afc-69108f7e6771/1/NJHAkpom6NmRn0lXz3p2RPaA3So.mft
File: NJHAkpom6NmRn0lXz3p2RPaA3So.mft (raw, json)
Hash identifier: PJ+U8HO9+9+yQ5PmuI0sY79/lBSZoDkdByNH6YQqb98=
Subject key identifier: A1:91:ED:B1:E3:3D:94:8F:1B:C7:4C:8D:B6:E7:A6:4F:45:31:17:1D
Authority key identifier: 34:91:C0:92:9A:26:E8:D9:91:9F:49:57:CF:7A:76:44:F6:80:DD:2A
Certificate issuer: /CN=3491c0929a26e8d9919f4957cf7a7644f680dd2a
Certificate serial: 019D389BC521F2EBCF1749EFF6D3DE0654CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJHAkpom6NmRn0lXz3p2RPaA3So.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/175bf7-6147-4389-8afc-69108f7e6771/1/NJHAkpom6NmRn0lXz3p2RPaA3So.mft
Manifest number: 016D
Signing time: Sun 29 Mar 2026 08:00:25 +0000
Manifest this update: Sun 29 Mar 2026 08:00:25 +0000
Manifest next update: Mon 30 Mar 2026 08:00:25 +0000
Files and hashes: 1: NJHAkpom6NmRn0lXz3p2RPaA3So.crl (hash: 6EwW42uuIYcHsIuPfgaaLuC1asc593XKkyoxARbGThI=)
2: V9-Z8E1IQV9_tH2htia-ec8O5Gk.roa (hash: pXEBrNZstZMPvOQ8nOcN1BqbNN7mgSlBT6dfG8b4hPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/175bf7-6147-4389-8afc-69108f7e6771/1/NJHAkpom6NmRn0lXz3p2RPaA3So.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/175bf7-6147-4389-8afc-69108f7e6771/1/NJHAkpom6NmRn0lXz3p2RPaA3So.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJHAkpom6NmRn0lXz3p2RPaA3So.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:c5:21:f2:eb:cf:17:49:ef:f6:d3:de:06:54:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3491c0929a26e8d9919f4957cf7a7644f680dd2a
Validity
Not Before: Mar 29 08:00:25 2026 GMT
Not After : Mar 30 08:00:25 2026 GMT
Subject: CN=a191edb1e33d948f1bc74c8db6e7a64f4531171d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4f:e7:ca:b2:be:f3:f8:1e:da:eb:50:a8:72:
71:81:ca:b1:e3:70:65:be:2f:f4:e1:24:a5:bc:f3:
4d:5f:b9:63:ec:eb:fe:b5:8d:50:08:de:68:2a:ca:
c7:2b:83:83:70:ae:88:64:17:79:57:54:8c:01:10:
4b:49:0a:52:f3:bb:eb:07:e6:24:f3:e9:cc:bc:4a:
21:25:27:16:d8:9c:8c:ae:d0:2b:97:19:6b:51:91:
cb:c3:96:4c:c9:a4:5b:fe:73:73:b7:0f:d4:89:78:
00:5f:3a:d0:de:ee:d8:ce:94:fa:0c:17:6b:f1:31:
38:53:e0:71:3a:e8:ad:a0:62:ba:c2:0b:7f:5e:27:
af:d6:28:67:71:5c:c2:be:aa:0a:57:19:22:c9:87:
02:54:0d:f3:dd:ff:4d:e4:dc:b1:4f:62:58:aa:39:
d2:99:ec:1e:51:83:7a:58:f6:4d:24:57:be:34:79:
07:b0:cf:a3:4b:f3:3e:76:62:6f:78:5c:39:08:0a:
d8:b6:80:3b:71:08:bb:76:47:95:2e:55:fd:ca:e3:
ba:8c:04:29:f4:86:b0:40:6c:a8:c4:3d:89:0a:3d:
7e:dd:01:ff:56:e1:08:c3:a2:6e:0f:e6:da:2d:09:
f6:1b:75:8a:bd:8a:4a:4a:10:1d:2b:46:a2:11:fa:
be:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:91:ED:B1:E3:3D:94:8F:1B:C7:4C:8D:B6:E7:A6:4F:45:31:17:1D
X509v3 Authority Key Identifier:
keyid:34:91:C0:92:9A:26:E8:D9:91:9F:49:57:CF:7A:76:44:F6:80:DD:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJHAkpom6NmRn0lXz3p2RPaA3So.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/175bf7-6147-4389-8afc-69108f7e6771/1/NJHAkpom6NmRn0lXz3p2RPaA3So.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/175bf7-6147-4389-8afc-69108f7e6771/1/NJHAkpom6NmRn0lXz3p2RPaA3So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a8:57:36:0f:3e:fa:69:44:bf:dd:88:cb:b7:c8:d5:16:ac:
1c:95:bb:66:f8:99:bf:76:51:c5:04:ff:1f:82:73:8e:9e:5f:
12:c0:61:04:52:a4:1c:6d:84:22:f7:62:48:48:be:62:96:32:
ca:13:52:a6:0a:d7:d5:d2:2e:df:3a:25:3c:a4:0b:8f:88:2f:
64:26:03:7b:7c:0f:1e:b0:08:c0:dc:dc:8a:63:00:b8:44:9a:
95:af:69:29:0c:5a:ec:7a:40:6d:cd:7f:1e:55:8c:24:7a:6d:
87:35:6e:06:d9:c5:05:69:65:72:73:11:af:c5:2b:85:04:20:
32:b1:13:0a:0a:2d:06:33:ba:aa:f0:b1:b0:4e:49:4d:69:a3:
12:16:b1:51:61:21:27:9e:f1:68:21:2c:83:2c:55:f6:f8:0e:
a0:6b:b2:01:38:c5:52:e2:0c:77:28:71:ef:89:cc:ac:bd:8f:
c6:4c:28:8b:f6:00:31:de:9e:64:37:39:a8:72:9d:fd:6f:25:
57:9e:6a:41:7f:5e:47:07:ef:66:a2:80:75:a2:c0:cc:fa:a8:
0e:e3:06:bb:0c:97:e9:88:1e:e7:32:29:3a:68:53:01:12:06:
71:09:3e:f6:b4:e4:3f:54:93:69:06:d2:cc:85:3e:8d:e1:55:
8b:0d:c7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:12 2026 by rpki-client