Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
File: njlEmOR5hynOmVC-NLRZqe8p9eg.mft (raw, json)
Hash identifier: 1yfKf9yHql56HB6mutEFF50WXaF9e/a805NNkZRJFiY=
Subject key identifier: 5D:5B:1F:D3:5E:E2:42:62:5C:3F:4F:E2:AE:49:9E:40:64:33:3B:66
Authority key identifier: 9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
Certificate issuer: /CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Certificate serial: 019D382E49DD30E08AF69E8336819F0B2AD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
Manifest number: 11A7
Signing time: Sun 29 Mar 2026 06:00:50 +0000
Manifest this update: Sun 29 Mar 2026 06:00:50 +0000
Manifest next update: Mon 30 Mar 2026 06:00:50 +0000
Files and hashes: 1: njlEmOR5hynOmVC-NLRZqe8p9eg.crl (hash: C3p3Jy9NgZq63km+b8EGedgE8x0QLmFtehdoVJxHV1c=)
2: qNw9AQGKv7ZPwZbLGtS3SURNtOU.roa (hash: 2+VxvFzEn6OTXuPf/Khi8sLwDBnZtcyQctbFQn2v60g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:49:dd:30:e0:8a:f6:9e:83:36:81:9f:0b:2a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Validity
Not Before: Mar 29 06:00:50 2026 GMT
Not After : Mar 30 06:00:50 2026 GMT
Subject: CN=5d5b1fd35ee242625c3f4fe2ae499e4064333b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b6:57:6c:2a:1c:26:87:d5:c3:8b:91:12:a5:
2a:38:26:a5:3d:f4:fa:b3:2c:a7:9e:94:44:2f:c0:
0c:fd:f0:7e:c5:cb:8f:71:65:ad:89:77:06:8d:23:
65:11:02:ca:da:39:2c:8d:34:32:47:e9:23:0a:57:
ee:99:34:c3:8c:da:64:e0:79:fa:0f:0d:9e:fa:cf:
2a:ea:99:07:d0:88:e2:76:bc:8f:2f:4b:5a:3e:ea:
42:ce:33:29:db:c9:15:dd:72:c6:ca:20:25:7f:18:
1c:ad:d3:34:4c:b9:1a:c7:c3:50:dc:29:be:fa:d8:
eb:a4:a3:40:e8:e2:2e:7c:28:e0:b8:a8:97:c3:16:
ec:f1:d1:5d:bc:47:f9:5d:20:00:57:f8:b7:d0:ff:
f7:78:08:55:27:ee:4f:94:d1:30:c7:ee:e1:7b:37:
04:33:52:a6:79:72:b5:e7:d2:17:94:b4:74:55:18:
0d:b0:4c:f3:8a:8b:67:46:4a:71:37:f5:b6:e6:bd:
90:a1:71:e3:62:bb:24:d5:1e:f4:05:46:72:26:f1:
cf:84:38:d7:f3:6e:34:e2:11:b2:8e:22:cc:19:ef:
9f:52:20:a3:c5:6c:36:50:e9:ce:2f:2e:c7:22:86:
45:03:b6:a1:9f:72:d8:78:8c:a9:9b:15:b2:3d:b2:
25:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5B:1F:D3:5E:E2:42:62:5C:3F:4F:E2:AE:49:9E:40:64:33:3B:66
X509v3 Authority Key Identifier:
keyid:9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a3:f5:78:77:0d:7b:1f:d7:07:18:6b:34:ea:ea:f7:4a:b9:
77:99:bd:82:56:1a:e3:bd:06:e7:20:c5:f1:8f:79:ee:07:65:
95:de:d2:6c:89:88:f6:55:9b:a9:d2:a3:c3:ba:59:74:13:f9:
38:f4:ac:fb:1b:84:46:12:00:8c:39:bc:40:52:0c:81:c6:44:
0e:c4:7f:4f:c1:f9:1e:11:cc:19:b4:73:97:95:b7:f8:9f:fc:
54:20:81:a2:ff:11:b9:89:b1:43:89:95:5a:34:cb:05:fb:69:
4b:1e:d3:03:f7:27:2c:60:55:cf:32:7f:03:ac:9e:19:da:43:
74:35:4d:20:42:10:fc:3a:a0:f5:4c:ba:22:4f:24:88:19:84:
11:63:8b:fc:b1:36:d7:a9:8e:08:57:f4:72:d6:17:bb:0e:e2:
79:cc:16:77:5f:42:36:18:2f:b3:0c:d2:b4:92:23:0f:3c:50:
83:65:c1:d5:9a:8d:e8:93:7f:36:ef:c6:ce:7e:99:0f:c9:13:
66:36:e4:0e:40:09:27:9d:a6:1c:9c:d0:1e:83:f7:52:39:65:
13:1b:c7:01:26:b7:b2:db:f1:2c:eb:f2:16:6e:98:27:94:1e:
ed:45:8a:c9:aa:6a:ba:ba:04:05:75:69:5d:17:ec:d7:cf:d4:
f5:9e:b3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:18:29 2026 by rpki-client