Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
File: NjSXIAQAsPGq56h_yjbwd-DtYs4.mft (raw, json)
Hash identifier: /RsIjtG1M7kY0bdX4mDM06ibz3F+h1f1Hc6L8dPVXMs=
Subject key identifier: E9:7D:6C:E9:75:0B:E0:82:9D:DF:71:ED:F1:52:AA:B0:D7:6C:6B:68
Authority key identifier: 36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE
Certificate issuer: /CN=363497200400b0f1aae7a87fca36f077e0ed62ce
Certificate serial: 019D9AE38404B899F205CF3BA843908C300A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
Manifest number: 1237
Signing time: Fri 17 Apr 2026 10:01:34 +0000
Manifest this update: Fri 17 Apr 2026 10:01:34 +0000
Manifest next update: Sat 18 Apr 2026 10:01:34 +0000
Files and hashes: 1: 1cYADgyS9xUjbMqbTO8dbbS_ut0.roa (hash: sfBNeCmh7Arfh1u7KBOZ5cOLU6qwGNu6Ll6DwZYAXsQ=)
2: NjSXIAQAsPGq56h_yjbwd-DtYs4.crl (hash: CJi+3eXouR8gBc3GJ31IoUiQ/801h6Fpss0cfAtyW3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:84:04:b8:99:f2:05:cf:3b:a8:43:90:8c:30:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363497200400b0f1aae7a87fca36f077e0ed62ce
Validity
Not Before: Apr 17 10:01:34 2026 GMT
Not After : Apr 18 10:01:34 2026 GMT
Subject: CN=e97d6ce9750be0829ddf71edf152aab0d76c6b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0d:a2:e6:d8:1a:63:fe:7b:b4:f0:ec:f0:bc:
bf:f3:1d:74:29:65:95:b7:2e:66:60:83:74:e2:9d:
43:56:c5:de:ce:28:db:09:9e:df:71:60:77:1a:14:
93:c8:bc:e6:ee:62:f4:50:b9:94:11:74:b7:fb:77:
df:06:2d:22:f4:ab:c5:01:ce:6f:21:ed:19:ba:72:
2b:7c:b0:e7:75:f4:f7:7f:5b:08:ca:3a:9e:d3:f8:
3f:c0:06:c0:05:ea:69:8f:74:ff:fe:c2:24:81:4c:
1c:26:e4:d3:4d:35:a6:07:e2:26:7a:73:e1:ca:68:
13:9b:b1:52:bf:2b:b2:8b:40:75:05:fa:ce:bd:5d:
0d:e0:6c:27:0d:f6:d3:1d:ec:da:ff:73:b3:07:7b:
18:92:8d:7c:61:4c:dc:17:99:ee:2b:b4:f3:47:f8:
88:88:21:78:f3:94:1a:a5:3d:a4:bf:02:29:a9:1c:
b1:84:be:0b:61:12:ae:d5:3a:d2:40:5b:84:d3:bf:
01:02:3d:75:e2:c4:c8:74:23:f4:a5:c4:1b:28:03:
57:3e:1c:b3:04:89:ec:80:7b:6e:0b:e1:0d:67:93:
d2:9f:4a:8b:aa:e5:59:b0:d7:38:1a:87:d7:de:a1:
98:0b:80:67:25:70:10:80:a4:da:de:1e:9f:76:d3:
f8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7D:6C:E9:75:0B:E0:82:9D:DF:71:ED:F1:52:AA:B0:D7:6C:6B:68
X509v3 Authority Key Identifier:
keyid:36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:21:69:78:6e:29:f6:cc:d4:aa:7b:a2:ef:7b:c6:25:bb:95:
e1:1c:86:84:67:f0:b1:4a:25:50:86:a8:c5:1e:42:b8:ca:3f:
f2:c1:52:33:4f:fd:12:9e:b9:ad:22:28:3e:44:ae:2a:12:a2:
47:40:ba:c6:b8:2f:d0:c2:a3:fd:c2:fa:0a:e6:a2:3e:2c:55:
87:45:1c:81:77:d6:d8:20:5d:f1:2e:17:89:bf:63:d7:41:42:
9b:3f:5e:79:a4:a0:ca:ee:de:8c:fb:6f:6a:23:30:89:9e:98:
7f:6d:15:85:31:82:d3:e6:a8:81:ec:19:8c:0f:5b:b7:aa:de:
38:17:da:9d:84:8b:16:54:5f:42:73:d2:26:f5:d5:ce:45:fa:
52:ad:bf:db:db:6f:5c:79:a1:1c:55:53:95:e9:5e:10:c6:a8:
94:ef:b2:39:a4:3e:ac:2c:04:f3:62:8c:a1:0a:88:0f:df:29:
d8:61:e6:01:c1:66:27:a1:19:cc:c3:f5:fb:7e:04:7a:1e:ff:
52:8b:85:84:f0:9e:d1:a5:1e:63:fd:d3:3b:81:d3:22:24:27:
d8:82:50:ad:d2:62:01:bb:1e:3a:3b:62:95:32:d4:7f:08:ce:
5f:20:48:3c:c4:e3:df:5d:2e:ae:93:da:53:76:ce:0a:97:d3:
a2:23:dd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:47:59 2026 by rpki-client