Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
File: njSxhiccy4nF5Ysw5wvXQQnMKEo.mft (raw, json)
Hash identifier: kjobRf3TcP5iPgfv7FnOCRKE5DRQYpx3bWaBodOg9Go=
Subject key identifier: 0B:86:84:F7:5B:DB:A4:43:78:92:79:57:01:C8:97:00:F0:AF:55:FA
Authority key identifier: 9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A
Certificate issuer: /CN=9e34b186271ccb89c5e58b30e70bd74109cc284a
Certificate serial: 019D9BF53B497BDAEF5018B21B540ACFD2CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
Manifest number: 0ABB
Signing time: Fri 17 Apr 2026 15:00:33 +0000
Manifest this update: Fri 17 Apr 2026 15:00:33 +0000
Manifest next update: Sat 18 Apr 2026 15:00:33 +0000
Files and hashes: 1: OZYu8TXfUk-kbxX_bRvIgQ0oovM.roa (hash: Ny452KM+a4Sd+vTRDWLyo6c+SHTZU1CTK6tileQUJVE=)
2: njSxhiccy4nF5Ysw5wvXQQnMKEo.crl (hash: fG0Xw9BcHKLTIESZSwZPThk1OtOFRW4UzxgCoN4upsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:3b:49:7b:da:ef:50:18:b2:1b:54:0a:cf:d2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e34b186271ccb89c5e58b30e70bd74109cc284a
Validity
Not Before: Apr 17 15:00:33 2026 GMT
Not After : Apr 18 15:00:33 2026 GMT
Subject: CN=0b8684f75bdba4437892795701c89700f0af55fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:54:22:9d:45:15:f3:64:e0:14:a8:3a:06:
b3:f1:a1:b4:4d:ab:1e:b4:11:40:a6:aa:84:84:77:
03:94:4d:64:f6:cb:ec:6b:f4:98:1f:2b:6f:fe:4b:
6a:ec:7b:3a:e6:96:e4:85:b0:61:41:c4:47:1d:27:
ad:62:02:6f:e7:9b:e1:89:56:9e:4f:1a:f6:a5:8a:
be:6c:9f:2d:3f:c0:23:3d:9d:fe:04:ae:2b:aa:2c:
6f:a2:2f:a7:93:e7:75:cf:6c:0b:bb:48:41:91:d7:
63:c5:a0:a3:00:73:0a:bf:35:d9:4b:c6:69:98:87:
c0:f8:e0:41:e9:6c:0a:5c:a9:01:d7:a2:e0:ea:5f:
98:11:31:3f:5d:e8:b6:c3:4e:e7:1a:8d:04:29:cd:
4c:8d:3b:65:18:c9:d6:9d:8b:f9:f9:2d:0e:d4:75:
43:30:c5:82:09:27:c3:e9:a2:b3:a7:02:bb:27:28:
3f:b8:6c:8c:eb:d7:97:97:f1:e7:c4:fa:57:73:f5:
19:77:6d:09:5f:10:b0:ee:ca:f7:3d:97:5c:8a:c4:
ea:0a:d3:b5:46:c0:ec:84:52:98:49:e2:82:8e:da:
96:3d:d6:2a:10:15:09:38:51:0f:20:29:e0:91:93:
5f:89:9b:39:9f:e9:fb:fc:84:fa:79:96:42:89:e7:
73:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:86:84:F7:5B:DB:A4:43:78:92:79:57:01:C8:97:00:F0:AF:55:FA
X509v3 Authority Key Identifier:
keyid:9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:39:48:b1:80:09:5c:c4:0e:8e:b8:a3:26:cc:3b:57:e0:8f:
97:12:d4:1c:7d:c6:70:b0:b4:ec:82:4c:17:50:9d:f0:04:21:
1c:c0:c8:d6:34:db:d3:80:61:64:94:5e:08:15:22:62:df:52:
a0:d3:22:e1:7f:4e:70:b8:6d:d7:d5:75:0c:dd:b7:51:50:fd:
60:6e:7e:3b:5e:a1:17:d9:4c:e4:1c:8c:3c:ce:f2:71:28:ab:
b7:3b:f5:9f:2b:e0:d4:24:67:59:e5:10:ba:5c:75:33:1b:7c:
16:dc:29:72:c3:7d:c2:0a:6d:56:ce:f6:7d:44:3d:5b:13:a8:
61:b3:fb:6c:8b:1c:c4:6b:f0:4e:06:40:ef:08:60:e6:3f:45:
68:36:4b:fe:7c:9a:85:5c:d6:24:2f:4f:e7:3a:1e:a3:e4:07:
39:d5:46:d9:7c:73:fd:a7:1a:9a:13:31:d2:2d:05:fc:1c:1c:
15:86:a8:13:91:ec:f0:46:15:37:ef:bb:e7:cd:82:c3:f9:ca:
e2:f6:37:42:4e:cd:cd:96:68:d1:42:d8:04:9a:32:33:c8:5b:
50:03:f8:b8:54:5c:17:72:0e:96:f9:7c:9f:7e:be:ef:fc:fb:
f6:19:da:ed:ee:41:87:fa:20:3e:16:78:42:d6:3f:8e:77:74:
2c:fc:49:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:44:11 2026 by rpki-client