Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
File: njSxhiccy4nF5Ysw5wvXQQnMKEo.mft (raw, json)
Hash identifier: 5MTpYBur5Fj0Qs8UpvYhP7Dhl8v2p6YJZfv3xuH2vuQ=
Subject key identifier: 8F:C7:B7:7D:2B:47:93:C9:94:F8:2B:97:FE:6D:E4:B3:3F:4C:4F:6E
Authority key identifier: 9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A
Certificate issuer: /CN=9e34b186271ccb89c5e58b30e70bd74109cc284a
Certificate serial: 019CB05B2D6BCF2443804575A30E85DF39A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
Manifest number: 0A41
Signing time: Mon 02 Mar 2026 21:01:31 +0000
Manifest this update: Mon 02 Mar 2026 21:01:31 +0000
Manifest next update: Tue 03 Mar 2026 21:01:31 +0000
Files and hashes: 1: OZYu8TXfUk-kbxX_bRvIgQ0oovM.roa (hash: Ny452KM+a4Sd+vTRDWLyo6c+SHTZU1CTK6tileQUJVE=)
2: njSxhiccy4nF5Ysw5wvXQQnMKEo.crl (hash: esQgvL5h4oeq3mTuiPXmbTooKG1kmRQ7aBV+s4XzsNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:5b:2d:6b:cf:24:43:80:45:75:a3:0e:85:df:39:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e34b186271ccb89c5e58b30e70bd74109cc284a
Validity
Not Before: Mar 2 21:01:31 2026 GMT
Not After : Mar 3 21:01:31 2026 GMT
Subject: CN=8fc7b77d2b4793c994f82b97fe6de4b33f4c4f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:14:77:52:e0:dd:48:4f:64:49:4d:dd:b2:cf:
e4:ee:7a:33:af:48:f8:8c:a5:13:d3:61:ba:96:5a:
06:4d:08:38:2b:4e:02:4c:70:29:2d:b9:9a:7f:2d:
df:2f:64:98:b6:cf:88:81:14:c0:1f:53:36:f7:cf:
47:f0:f6:ef:b9:17:a7:74:5b:c5:ef:10:4f:ca:fa:
e9:ad:2d:f3:32:8d:a3:f0:ec:0e:f5:c2:95:09:37:
e7:6c:f9:4c:95:78:ca:bc:ca:9d:a5:71:b0:a3:38:
65:eb:cd:8b:70:40:bc:8b:3f:f3:60:33:91:45:90:
2a:23:21:e8:d3:e3:25:58:25:41:47:34:41:d6:80:
ef:62:c7:75:fc:e4:7e:8e:e3:d7:07:5d:64:6f:bc:
2f:8b:79:ee:40:74:fd:9d:8e:a4:7d:8a:23:53:f4:
2c:75:9a:c6:d2:1b:8b:28:90:c2:21:6c:a9:f0:1d:
82:e9:0a:06:f4:43:da:9a:38:04:86:f9:c4:64:d7:
b9:9b:5b:8d:bf:0d:a3:f5:f3:a2:0c:00:4f:1d:38:
db:19:89:c8:45:c6:63:88:9c:fd:1b:16:83:90:4e:
be:6b:38:72:72:9d:80:19:cf:25:72:21:f8:ef:75:
f4:e2:c6:26:c5:f1:db:75:7d:15:da:0b:18:22:8b:
f2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C7:B7:7D:2B:47:93:C9:94:F8:2B:97:FE:6D:E4:B3:3F:4C:4F:6E
X509v3 Authority Key Identifier:
keyid:9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:1f:39:e3:8d:92:09:86:33:d5:7d:a1:9d:55:57:23:eb:44:
32:63:7f:ca:5a:33:6f:76:eb:b5:dd:68:4b:51:b1:cf:ee:05:
de:8e:ed:a1:e7:25:b9:65:b8:1f:bd:e9:ad:3e:b6:40:2c:89:
0e:cc:8a:5a:20:fe:5a:99:77:2c:88:00:4d:4a:e0:46:f6:1a:
96:35:51:7e:c0:18:1b:97:59:60:d5:6c:e2:9a:b9:0f:32:3d:
98:a1:75:54:21:82:cb:07:7b:20:54:c3:ec:8c:99:19:88:bb:
e8:1f:05:b7:df:52:7c:f4:22:de:b5:09:80:bc:2a:49:a5:06:
b9:e8:29:c3:51:cb:3c:0f:64:0a:48:7f:9e:07:44:87:73:cd:
0a:57:be:7f:c9:7d:3a:fd:6f:7b:1b:5a:86:34:70:69:c3:88:
87:60:b3:07:0e:2a:8c:17:48:99:cf:ef:c9:9d:74:87:eb:89:
b5:c1:71:a3:97:44:b2:6d:31:25:71:7b:69:13:f3:1b:3a:9b:
5e:4c:e6:bf:67:24:3d:4e:07:06:c4:2b:bc:a7:a7:82:8b:4d:
4e:a5:0f:65:ef:b2:48:13:15:b8:26:04:6d:1a:28:d0:fd:38:
55:c0:c7:15:8a:d9:3a:0e:39:7d:80:30:de:1b:33:2a:ed:29:
a2:a1:7e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:12:46 2026 by rpki-client