Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
File: njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft (raw, json)
Hash identifier: bHZisMTvkxuypFsWg3HZ7s/KnnMiAbv2irDuw346KaI=
Subject key identifier: CF:51:8F:46:70:14:89:32:D2:97:08:A6:8B:A0:62:AF:FE:05:EF:8C
Authority key identifier: 9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B
Certificate issuer: /CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b
Certificate serial: 019D37C126F9BA3B1AE1230BF112E20653CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 04:01:38 +0000
Manifest this update: Sun 29 Mar 2026 04:01:38 +0000
Manifest next update: Mon 30 Mar 2026 04:01:38 +0000
Files and hashes: 1: NwZcawZ1oZBEXy6-sJcGtKyEswU.roa (hash: x1R0gYS1QjDk3Ur01AxDc0zqZ0ZOyidsMEhtEgHTQM0=)
2: njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl (hash: lfuhPmmLqcZpS6kDZKPUMeKIpCp5dH5uioQBuRf0cp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:26:f9:ba:3b:1a:e1:23:0b:f1:12:e2:06:53:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b
Validity
Not Before: Mar 29 04:01:38 2026 GMT
Not After : Mar 30 04:01:38 2026 GMT
Subject: CN=cf518f4670148932d29708a68ba062affe05ef8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:76:5a:db:86:c8:e8:ff:fd:a1:01:13:d2:93:
63:26:32:9b:f1:38:fd:77:52:4b:9e:ae:3a:74:05:
77:53:68:2e:94:e4:ae:5f:a4:d2:f8:1f:8a:d1:11:
d2:41:3b:57:3a:79:2b:9f:e2:a7:4c:fc:b2:7f:35:
2a:a0:68:ef:d8:fc:7e:dd:f7:9e:e7:15:8a:ae:90:
e7:99:8c:86:93:50:bf:92:55:fe:4a:fb:4c:09:55:
51:72:5d:7e:96:23:43:ae:25:04:1a:cc:10:c0:4e:
05:5d:1a:13:42:10:ea:15:f6:fc:a7:fa:83:01:c8:
cd:31:f0:d1:b0:7e:91:14:e0:7e:a6:bf:cd:32:d5:
cc:af:1f:cf:e8:e1:f6:fc:81:b3:88:58:fc:0b:8e:
c2:31:60:27:d2:cf:a0:5f:cf:45:6f:cc:85:c7:d2:
7c:e9:13:9c:c8:bb:e2:eb:32:7a:77:f0:cc:ef:8f:
ff:6d:85:0a:49:69:09:6a:7d:4a:24:68:1c:c4:ed:
59:80:ff:ec:a3:a7:5e:6d:d2:c5:0b:d7:9d:68:88:
fd:18:14:12:23:0f:a8:07:b5:de:04:6c:e4:7e:4f:
32:e8:05:fd:d3:7e:48:2e:41:ac:e3:1d:66:34:75:
7e:3c:13:77:90:6f:69:dd:d2:43:06:58:c9:3c:24:
7d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:51:8F:46:70:14:89:32:D2:97:08:A6:8B:A0:62:AF:FE:05:EF:8C
X509v3 Authority Key Identifier:
keyid:9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:6e:de:c3:77:b2:0f:82:bf:2b:88:64:a3:1a:66:2d:c3:5e:
55:21:4d:b7:24:84:17:01:60:70:f6:04:41:2b:84:24:c5:37:
ae:0c:25:1d:1b:3d:2a:41:ba:cf:db:0d:78:21:6d:20:21:07:
fe:7b:50:98:b9:86:ad:8a:4b:a7:c5:92:5b:8d:e6:fa:fd:85:
3e:78:bc:09:b3:89:6e:76:cc:a3:da:6a:b0:c7:d5:c8:b4:20:
f8:c0:cf:d6:ce:06:9f:a2:7b:75:8e:6b:20:94:68:1e:33:b7:
69:69:d9:1b:d8:1d:6b:25:78:df:5e:cb:88:55:eb:fd:b3:45:
64:5b:33:e3:22:9e:25:ba:20:46:52:4e:e7:3c:87:04:fd:67:
5c:84:b9:28:97:07:f1:9a:69:f6:7c:ee:b3:d1:94:77:cc:c5:
49:30:3a:21:40:a5:d1:a9:0a:45:3e:a3:c9:d2:a4:9b:66:e5:
e1:45:3a:50:0e:67:f6:de:40:0c:91:1c:b0:bd:8a:ce:e6:ae:
08:92:f2:7b:91:86:e0:b1:0a:85:bc:96:1c:35:fc:a8:29:05:
bf:61:71:5a:46:c3:df:a6:83:05:69:38:c0:a2:77:fe:ce:a3:
ef:36:b6:7d:5d:96:66:a8:f6:70:7e:38:12:87:71:35:c8:bc:
04:54:ce:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:50:56 2026 by rpki-client