Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
File: njlEmOR5hynOmVC-NLRZqe8p9eg.mft (raw, json)
Hash identifier: G70aDSheUhF0scGScDVhjVcA3RGoGJgFKaBaXaWdow4=
Subject key identifier: 0A:53:2C:E4:DA:03:E1:CE:B1:68:B3:BB:97:58:EE:37:69:54:90:D0
Authority key identifier: 9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
Certificate issuer: /CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Certificate serial: 019EB87C53EA4EEF3E3C827F0963C801F2BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
Manifest number: 126E
Signing time: Thu 11 Jun 2026 21:00:16 +0000
Manifest this update: Thu 11 Jun 2026 21:00:16 +0000
Manifest next update: Fri 12 Jun 2026 21:00:16 +0000
Files and hashes: 1: njlEmOR5hynOmVC-NLRZqe8p9eg.crl (hash: 9SbnHPapKQhzQ977IrYQpeXbU95DkMgbT0iWRT6NKRo=)
2: qNw9AQGKv7ZPwZbLGtS3SURNtOU.roa (hash: 2+VxvFzEn6OTXuPf/Khi8sLwDBnZtcyQctbFQn2v60g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:53:ea:4e:ef:3e:3c:82:7f:09:63:c8:01:f2:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Validity
Not Before: Jun 11 21:00:16 2026 GMT
Not After : Jun 12 21:00:16 2026 GMT
Subject: CN=0a532ce4da03e1ceb168b3bb9758ee37695490d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:26:33:8c:24:3e:51:e8:63:95:2b:68:ca:a3:
bc:23:47:58:7a:23:f3:85:72:0a:9e:ab:16:b9:de:
30:ec:4e:4e:fd:22:e4:1d:27:f7:71:53:8d:f0:83:
62:02:44:6b:0f:a5:51:fb:ba:65:c9:0e:25:67:03:
67:b3:97:d7:30:e8:41:88:3a:bf:10:34:2f:b0:f7:
5f:c4:cf:d8:88:37:2f:bd:22:4b:8d:c1:8d:e4:8d:
6f:6a:80:b5:23:ad:27:e3:80:1a:62:46:b7:ed:96:
0b:35:b0:79:08:81:6d:a6:ce:3d:e2:4e:9f:7e:d5:
25:86:1a:1e:2a:b8:74:72:77:8b:e9:b9:e5:06:81:
7b:0f:b4:55:f8:2a:ed:19:da:3b:bf:21:f5:bb:21:
f2:c9:17:ad:d5:f8:ab:10:0d:70:2b:98:0f:80:fa:
26:dc:68:4f:5b:f4:b7:49:b8:65:cc:57:2b:7b:5b:
01:20:d4:dd:81:fc:76:9a:14:a1:5e:02:7d:76:b8:
56:e6:ed:75:67:a8:05:36:e5:c0:ea:26:e4:1e:52:
a9:ae:8a:80:90:cc:36:ab:c0:0d:58:fe:08:00:f6:
d9:0c:5d:b9:3c:34:4a:f5:16:34:80:74:d6:7d:62:
58:24:16:74:1e:5e:62:0f:99:79:f6:68:ed:03:6d:
8a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:53:2C:E4:DA:03:E1:CE:B1:68:B3:BB:97:58:EE:37:69:54:90:D0
X509v3 Authority Key Identifier:
keyid:9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:fa:cb:5d:6d:a9:6b:e2:27:90:8a:7c:60:47:7b:da:38:50:
2e:2c:37:5f:b5:3c:0c:86:96:c6:f6:15:f6:99:47:9a:da:94:
ea:e7:f4:1a:46:e1:d0:2d:13:bc:b9:39:c8:34:10:15:3b:ba:
f4:24:f3:6e:23:42:34:ea:60:0b:05:39:84:14:db:d1:47:28:
82:38:32:80:47:23:4e:d4:ac:e3:30:8e:3e:cd:7b:bc:61:fb:
5c:5e:db:05:d5:02:b8:f2:03:29:70:89:e3:81:68:18:6d:70:
0a:39:d2:5e:02:dc:01:96:55:6f:b5:0b:3e:db:e1:ab:e4:03:
8b:31:c1:37:d8:6c:cc:d0:de:bd:4b:d1:25:59:8b:bb:bc:d0:
de:02:b0:7f:c4:db:2f:c0:57:41:5c:aa:14:6a:38:ae:d8:06:
17:ba:f8:f1:23:f4:09:a8:55:66:5c:6b:71:d7:dd:2f:39:6b:
1a:d5:18:a0:ec:6a:af:69:ef:19:79:be:c8:4d:cd:db:c0:f4:
29:eb:0f:0d:18:98:f9:7f:7f:e2:1a:34:31:b9:4d:3c:79:39:
d1:92:6d:03:07:69:77:6b:94:48:2b:46:b1:96:bb:44:a2:c9:
91:d0:a8:d0:b7:30:d9:48:c5:0c:4a:b4:4c:b8:3c:d8:56:6f:
89:08:29:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:09:37 2026 by rpki-client