Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft
File: NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft (raw, json)
Hash identifier: Gy9z4v8LuBpPRsI+Szag7fusYLzJegZF/0BWNRnLgLg=
Subject key identifier: 94:42:8E:5D:E1:C5:30:83:F6:4F:00:EF:6E:AC:96:A5:1B:93:6E:10
Authority key identifier: 36:31:9B:CD:47:47:ED:5B:20:2B:B5:78:AC:B3:90:D1:6F:C4:11:A5
Certificate issuer: /CN=36319bcd4747ed5b202bb578acb390d16fc411a5
Certificate serial: 019D39777CF5D1FED1C4B215D86075301244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft
Manifest number: 1523
Signing time: Sun 29 Mar 2026 12:00:25 +0000
Manifest this update: Sun 29 Mar 2026 12:00:25 +0000
Manifest next update: Mon 30 Mar 2026 12:00:25 +0000
Files and hashes: 1: NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl (hash: Win/bos7yLu/axzgr457BBQl3ArsOSr3+XQdzszkdgg=)
2: QWziBGJKT97GaU5TsJ0WTnA3UaQ.roa (hash: cg/5v5qKfRj2142sZSNTSinM09isCzKzLrAye6kCxYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:7c:f5:d1:fe:d1:c4:b2:15:d8:60:75:30:12:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36319bcd4747ed5b202bb578acb390d16fc411a5
Validity
Not Before: Mar 29 12:00:25 2026 GMT
Not After : Mar 30 12:00:25 2026 GMT
Subject: CN=94428e5de1c53083f64f00ef6eac96a51b936e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:78:a2:b2:59:91:21:e8:85:aa:6c:f8:fe:78:
3d:da:1f:19:ed:c4:67:9b:a8:fa:8e:05:6d:28:29:
c4:45:6a:07:a2:50:6f:f2:15:5d:e6:61:50:3c:16:
1e:3f:d6:79:e2:84:f2:a8:aa:17:9a:7f:68:63:3e:
91:4b:12:13:b0:52:e2:df:f5:a0:ce:68:87:5e:10:
07:4f:de:cb:54:4d:de:3d:54:5b:69:94:ef:44:72:
5e:6e:0e:47:28:6b:dd:ec:d2:d0:37:87:bd:97:1f:
b6:0e:d9:50:0d:cd:bc:90:21:bf:36:f2:42:e6:18:
6b:73:db:9d:d6:ae:96:48:67:76:ae:6e:28:bf:69:
7c:c8:1f:91:a1:46:ff:70:85:cb:39:03:97:fd:f6:
87:1a:3b:cf:26:2a:bb:54:ed:ad:9b:04:ec:a4:5e:
82:09:db:e8:af:b6:95:fe:f2:1d:4c:3f:6c:af:b3:
b7:a4:6f:28:f4:76:7d:94:f0:b9:94:7b:1f:94:5b:
04:90:51:3c:11:20:44:64:db:db:9f:aa:f1:bd:e8:
ef:37:c6:1e:4f:38:68:3b:6a:cf:3b:03:d2:91:40:
ca:b4:da:5d:eb:de:05:7c:fa:28:12:a6:6c:68:27:
68:c8:b4:37:6c:74:f0:e4:dc:2a:a1:dd:10:9f:af:
cc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:42:8E:5D:E1:C5:30:83:F6:4F:00:EF:6E:AC:96:A5:1B:93:6E:10
X509v3 Authority Key Identifier:
keyid:36:31:9B:CD:47:47:ED:5B:20:2B:B5:78:AC:B3:90:D1:6F:C4:11:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5e:d2:f9:b0:6f:ce:77:05:5d:e0:c6:ee:67:d8:b8:03:dd:
6d:ad:04:a9:29:01:0e:b9:eb:9b:75:8f:1c:59:e6:3e:ff:7d:
67:8c:f0:d7:69:f8:2a:34:64:59:27:e9:5d:1f:c9:7c:4d:47:
94:6f:f3:f4:62:0e:fe:61:e2:67:86:5b:f3:ab:9f:84:5b:e9:
16:d3:2f:12:51:f7:e8:45:8a:c4:65:2e:8d:52:f5:5e:24:48:
08:aa:61:5b:9a:86:f6:d4:63:d5:62:5d:4b:01:9b:f3:ae:26:
bc:66:58:1e:37:b4:61:5a:94:8f:39:c0:5b:77:30:25:95:4c:
15:27:40:44:d7:df:78:84:43:28:e1:63:b5:de:2c:99:e4:c0:
69:d9:00:ee:d0:4a:c0:31:19:5c:b2:8c:ae:f2:97:f7:4d:01:
c9:0f:c8:bb:f7:73:47:3a:92:6c:0e:87:30:08:54:17:08:c1:
b4:4a:d3:a2:65:22:b9:83:9a:56:fe:cc:04:05:90:ed:d1:d2:
a4:9d:69:f7:aa:97:a7:14:14:3c:55:65:35:1a:17:db:4a:d4:
25:37:81:49:2f:bd:bb:63:f9:f2:ec:00:2a:29:37:d8:92:b0:
9f:38:a1:e4:6b:cf:1a:c7:1f:91:d3:aa:99:39:c0:e3:9d:23:
6c:7c:cc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:54 2026 by rpki-client