Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/f1ed9e-e3dd-4949-ad95-25f06c52fef1/1/NjOS8byM36C-OSjE9VgwM1iE1I8.mft
File: NjOS8byM36C-OSjE9VgwM1iE1I8.mft (raw, json)
Hash identifier: 0a2aKWexAA9HZEyn+IRmFdUyADp6fNg70tFNa3D0uQE=
Subject key identifier: 20:78:12:2C:7F:1F:DD:B2:96:C3:86:1D:13:78:D8:53:14:42:A8:DE
Authority key identifier: 36:33:92:F1:BC:8C:DF:A0:BE:39:28:C4:F5:58:30:33:58:84:D4:8F
Certificate issuer: /CN=363392f1bc8cdfa0be3928c4f55830335884d48f
Certificate serial: 01A1DF4C244A933D6152D3B619871E223124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjOS8byM36C-OSjE9VgwM1iE1I8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f1ed9e-e3dd-4949-ad95-25f06c52fef1/1/NjOS8byM36C-OSjE9VgwM1iE1I8.mft
Manifest number: 58
Signing time: Sun 15 Nov 2026 13:01:11 +0000
Manifest this update: Sun 15 Nov 2026 13:01:11 +0000
Manifest next update: Mon 16 Nov 2026 13:01:11 +0000
Files and hashes: 1: HK_qFKd2hY8FMrPVBlrUtU3ZNRc.roa (hash: s6ds8Bxas84dKP57kCmFlJVUTacHzm8AN1LOMw8xcRk=)
2: NjOS8byM36C-OSjE9VgwM1iE1I8.crl (hash: d6wVVTjaXPlSdKwgLEmcolCC7uvkPpUmIriWSsfF6+4=)
3: fTI9Kr_X-q7GVSb94RfE4OUGJio.asa (hash: PM+EJsAUxq4fWbhAYq9E15rCz2qdVWrWMXyNbShJWOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f1ed9e-e3dd-4949-ad95-25f06c52fef1/1/NjOS8byM36C-OSjE9VgwM1iE1I8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/f1ed9e-e3dd-4949-ad95-25f06c52fef1/1/NjOS8byM36C-OSjE9VgwM1iE1I8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjOS8byM36C-OSjE9VgwM1iE1I8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:24:4a:93:3d:61:52:d3:b6:19:87:1e:22:31:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363392f1bc8cdfa0be3928c4f55830335884d48f
Validity
Not Before: Nov 15 13:01:11 2026 GMT
Not After : Nov 16 13:01:11 2026 GMT
Subject: CN=2078122c7f1fddb296c3861d1378d8531442a8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2c:a8:3b:bf:1b:33:69:02:61:60:e4:eb:d8:
fd:0c:f9:6d:ba:b9:f1:13:58:3a:1c:65:fe:3d:dc:
61:f3:02:5d:d7:ad:7b:a0:4d:1c:08:d8:d5:a6:c8:
c1:0f:c2:0f:35:f9:2a:eb:72:32:51:97:86:41:c1:
1f:89:51:80:04:58:d2:9b:37:ef:29:76:6b:34:b2:
5a:3a:95:6d:b2:92:6d:11:54:78:f0:7e:c7:92:db:
cd:d4:fe:24:33:43:c7:14:4e:b7:fc:ad:41:ba:a7:
ff:c5:c7:a9:45:c0:6a:53:0d:21:9b:c9:cb:37:7a:
00:9a:cd:0d:5b:ec:52:3d:0f:47:b0:29:3a:e2:52:
2c:1f:7a:17:fa:d2:96:52:5c:95:4e:21:53:e1:1b:
3b:e3:a1:f9:6f:b6:87:46:89:a8:4a:ce:85:3e:7f:
5e:89:c9:02:af:f6:c9:00:04:f7:1f:41:31:47:4e:
95:ba:d6:c6:c9:a6:77:2d:7e:01:00:45:e4:df:03:
88:a4:38:1f:b9:7c:75:b8:23:af:6e:59:80:8a:b2:
6c:87:7f:d2:ea:8b:c4:8f:49:0e:15:21:f0:16:e8:
3e:36:6e:f0:71:4b:c3:50:06:5c:41:14:d7:ff:5a:
74:ad:ce:6a:1f:9a:68:c0:a5:a3:3c:3f:d8:c4:8c:
7d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:78:12:2C:7F:1F:DD:B2:96:C3:86:1D:13:78:D8:53:14:42:A8:DE
X509v3 Authority Key Identifier:
keyid:36:33:92:F1:BC:8C:DF:A0:BE:39:28:C4:F5:58:30:33:58:84:D4:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjOS8byM36C-OSjE9VgwM1iE1I8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f1ed9e-e3dd-4949-ad95-25f06c52fef1/1/NjOS8byM36C-OSjE9VgwM1iE1I8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f1ed9e-e3dd-4949-ad95-25f06c52fef1/1/NjOS8byM36C-OSjE9VgwM1iE1I8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:09:52:4d:5e:e9:72:a0:c1:96:f1:42:b5:37:5a:0c:d0:6b:
d8:39:a7:06:c3:e4:fb:55:fa:ec:75:a6:a4:20:9e:03:b4:44:
f6:92:c6:71:30:92:18:f4:2c:02:40:a2:82:fd:a7:dc:4e:65:
e2:8e:3c:ac:a1:8d:c1:43:b8:3c:d7:1d:5f:b7:aa:ea:4d:11:
9e:53:79:d0:29:81:b5:c7:20:b6:d6:c4:c7:8e:4f:2f:91:23:
03:23:74:13:8b:a7:51:5d:5c:44:c9:34:67:88:dd:5f:2a:d5:
54:8b:38:69:af:39:6e:e7:a4:90:fd:f2:18:f1:99:1e:e9:70:
e2:0f:32:ed:47:99:a5:df:ad:b5:c1:b9:58:0c:fe:f5:24:d1:
c4:b3:d0:b9:fc:41:d8:ed:e0:69:0c:b5:88:f2:1a:4b:60:b5:
4d:eb:02:e4:41:1b:cb:4e:06:25:77:b3:fd:62:7d:99:2e:ca:
16:f6:0a:04:53:43:28:63:b5:d6:40:3b:8b:5f:2d:fb:17:af:
d4:03:f0:28:15:9d:45:46:f3:2b:d7:73:b5:2c:9b:d3:1f:41:
49:e7:38:aa:7f:83:75:cf:7a:68:e0:17:b0:cf:bd:8f:0b:4c:
75:f6:fd:45:e2:73:52:83:04:c0:50:c2:c5:a8:17:2c:2b:1d:
ef:a3:10:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:20:54 2026 by rpki-client