Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
File: njlEmOR5hynOmVC-NLRZqe8p9eg.mft (raw, json)
Hash identifier: r6MAmDk/Sui9T3kuudLkFXykw9Lipvef6a6vDvW+E5o=
Subject key identifier: DC:67:5C:CA:56:3A:30:87:CE:D8:A9:0D:EA:A0:B1:1B:86:F1:3F:52
Authority key identifier: 9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
Certificate issuer: /CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Certificate serial: 01A17F2AA75FD455FBF506F19A3D47F7D03C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
Manifest number: 13DE
Signing time: Tue 27 Oct 2026 21:01:04 +0000
Manifest this update: Tue 27 Oct 2026 21:01:04 +0000
Manifest next update: Wed 28 Oct 2026 21:01:04 +0000
Files and hashes: 1: njlEmOR5hynOmVC-NLRZqe8p9eg.crl (hash: VlLjYbxCzurZykPwUTwCRjIU7TTZLxRW1MoZySWW9+A=)
2: qNw9AQGKv7ZPwZbLGtS3SURNtOU.roa (hash: 2+VxvFzEn6OTXuPf/Khi8sLwDBnZtcyQctbFQn2v60g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:2a:a7:5f:d4:55:fb:f5:06:f1:9a:3d:47:f7:d0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Validity
Not Before: Oct 27 21:01:04 2026 GMT
Not After : Oct 28 21:01:04 2026 GMT
Subject: CN=dc675cca563a3087ced8a90deaa0b11b86f13f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3e:80:1e:03:64:8f:d2:2a:13:ef:5a:c0:29:
e0:24:9f:e6:2d:5f:46:79:b1:10:62:a4:a7:09:10:
cb:a0:00:cd:ee:74:19:78:33:4c:2f:41:25:fe:9c:
fb:96:2c:46:8b:74:41:39:6f:67:ff:02:34:59:79:
88:00:e3:40:e2:06:dc:5e:90:52:f0:5d:07:25:63:
99:40:65:da:d0:aa:f6:3e:e7:02:9e:1f:e2:99:c2:
0e:fb:7d:2d:a8:64:fb:ba:55:c8:61:89:75:8a:c9:
99:9e:e5:ab:b5:49:90:83:9c:d9:48:cf:92:96:bc:
71:4a:74:35:25:c7:bf:98:12:6b:9d:7c:11:da:93:
2f:8e:e1:de:c2:40:0d:6b:6f:22:84:37:c1:b6:6f:
ff:bb:81:bc:41:5a:84:3c:c9:37:83:89:18:84:d9:
70:78:4f:6c:5c:ba:76:d0:b0:b5:fe:07:c3:81:66:
c9:39:4f:db:9d:c7:ba:ea:42:27:5c:5f:06:05:71:
0f:ad:67:a2:ec:78:b9:04:2a:d0:10:94:80:30:04:
74:36:97:91:df:e8:c2:98:e8:39:93:32:44:c1:11:
eb:11:47:f9:a1:f5:74:4b:41:e3:4a:b7:bc:1a:91:
e7:ac:b2:7c:53:2b:6b:6b:19:c1:6c:6b:91:e4:33:
b4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:67:5C:CA:56:3A:30:87:CE:D8:A9:0D:EA:A0:B1:1B:86:F1:3F:52
X509v3 Authority Key Identifier:
keyid:9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:dd:01:d0:3e:59:dd:06:22:63:eb:12:29:2e:05:04:39:a8:
57:29:9e:92:fa:f8:26:e5:36:72:af:3f:b0:92:67:0e:14:c9:
a9:dc:01:a2:5d:5b:89:cc:13:ef:8f:bc:b7:0a:93:cf:a7:74:
b2:34:58:53:1e:cb:3e:e7:7a:97:18:a6:d2:09:2a:0b:1e:06:
7e:bb:c0:60:d3:60:7a:39:43:a7:56:a2:bc:84:c7:dd:44:83:
98:c8:08:e0:59:b8:10:36:22:5b:fa:9d:4f:f0:53:e3:6f:ee:
6a:8f:33:ec:71:97:d5:03:12:2a:19:ab:03:64:68:8e:ae:cc:
cf:79:98:10:1c:1e:f5:06:b7:ff:ec:7d:6b:fa:59:a8:34:39:
e9:db:30:8b:4e:b9:07:6d:b4:98:1c:79:7e:27:68:42:ac:25:
b1:03:c2:33:cd:10:84:56:cf:ab:93:bf:2e:32:c9:9f:a0:b6:
ac:10:da:3e:e5:0b:fb:9a:7d:f4:e6:8b:05:be:c9:c3:a1:ee:
4a:d5:3b:b5:60:86:6d:ce:a5:40:08:82:46:a7:16:60:0e:51:
69:e5:d2:71:aa:28:1e:8b:85:3e:5a:f3:85:52:f0:09:80:d9:
bb:b6:08:df:f9:d1:13:7f:24:1b:88:10:cd:64:1b:c6:9f:0e:
c3:4e:2d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:28:50 2026 by rpki-client