Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
File: NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft (raw, json)
Hash identifier: RgbT153+Om99cuQfXRwzUpXKVo+pJ9tUlv9RxmQGXUM=
Subject key identifier: D1:D3:79:A2:47:72:1A:E6:AA:5A:F1:F0:60:6D:65:A4:C5:68:B5:E3
Authority key identifier: 36:31:0A:95:94:89:D1:AC:5B:87:96:AF:62:6E:07:C3:F1:C1:71:F3
Certificate issuer: /CN=36310a959489d1ac5b8796af626e07c3f1c171f3
Certificate serial: 019CAB6B766F6CDC8D1144683B487506821F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
Manifest number: 17D6
Signing time: Sun 01 Mar 2026 22:01:12 +0000
Manifest this update: Sun 01 Mar 2026 22:01:12 +0000
Manifest next update: Mon 02 Mar 2026 22:01:12 +0000
Files and hashes: 1: NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl (hash: Mdie35MN1wUG1xyoLeH83JDLj5aNVQYdroNBbtrKtfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:76:6f:6c:dc:8d:11:44:68:3b:48:75:06:82:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36310a959489d1ac5b8796af626e07c3f1c171f3
Validity
Not Before: Mar 1 22:01:12 2026 GMT
Not After : Mar 2 22:01:12 2026 GMT
Subject: CN=d1d379a247721ae6aa5af1f0606d65a4c568b5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:ad:21:e1:31:06:c2:28:06:e5:af:d9:f8:
1f:56:5d:ef:be:8e:b2:f3:33:ee:e2:8c:3c:97:19:
92:8e:94:a0:50:64:ab:33:50:7f:38:ce:b4:df:c8:
d2:cb:a4:01:d4:43:30:97:42:ff:1d:8a:8c:96:e6:
35:fb:8e:29:4e:97:62:83:01:38:34:87:c4:ac:97:
57:75:d1:2d:35:58:a2:19:b7:fb:30:00:ef:40:41:
b9:49:31:d2:9f:d4:9f:0f:c2:14:82:df:f4:82:45:
74:ab:be:bf:ad:e5:36:fe:4e:69:c0:bf:4f:92:0e:
9d:a8:f2:ed:ce:5a:78:02:03:a9:57:fa:64:17:fb:
dc:cb:05:3e:bc:d7:83:48:b9:66:96:5d:a8:6b:54:
b0:64:3a:33:bd:ab:a4:d1:57:58:ab:bc:fb:f2:57:
7d:91:3f:b8:5d:13:0b:49:1e:6a:ae:28:7f:3d:be:
1e:e7:6e:32:c9:f1:6c:d2:10:60:b2:ae:8c:05:f3:
e4:32:41:74:a9:ac:7a:1d:46:ca:67:3a:1c:89:8b:
99:54:0d:72:07:f5:92:c3:87:bb:66:dc:ec:37:00:
82:6a:e5:77:75:4c:69:5f:25:e0:f9:03:b3:99:30:
6b:61:15:d2:6c:ed:a5:b8:d3:00:0e:0f:aa:96:5d:
12:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D3:79:A2:47:72:1A:E6:AA:5A:F1:F0:60:6D:65:A4:C5:68:B5:E3
X509v3 Authority Key Identifier:
keyid:36:31:0A:95:94:89:D1:AC:5B:87:96:AF:62:6E:07:C3:F1:C1:71:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a5:2c:fd:03:8a:19:77:30:8e:80:fb:54:5e:8d:be:71:bf:
3b:63:ee:a3:28:0b:cf:e4:f9:84:6e:2f:1e:91:ac:74:1e:ab:
19:f9:d6:6e:d2:68:3e:03:0a:e9:33:47:54:14:23:4f:74:64:
4c:a3:0a:5a:6b:b4:92:a8:2b:57:ca:b5:ec:39:64:b7:e7:b2:
27:5c:77:75:6b:f8:bc:3f:b6:02:0e:a5:56:ee:8d:0f:a4:7d:
94:2b:d3:d7:4c:60:1f:c9:4e:7e:38:0f:ab:ad:49:d2:40:00:
98:ce:23:07:0d:d6:73:17:e3:7a:2b:03:d7:c2:96:95:7d:d7:
d8:3e:f7:72:e0:a3:7d:43:35:43:ef:d8:45:16:56:c8:37:e1:
78:17:11:b1:a2:43:1f:d1:81:d3:d8:c7:2f:b0:cb:c1:24:7a:
ae:de:06:a1:ba:c2:27:d4:01:72:e2:22:ba:b7:d0:43:65:7d:
39:f5:f3:81:52:8a:c4:9d:d9:45:6b:fa:81:3e:17:8f:71:6d:
7f:c5:48:d9:21:8b:3a:78:ec:6c:ce:5f:49:d7:21:71:db:0e:
94:62:93:6e:15:ca:8c:77:c4:57:0b:ab:be:c6:89:07:af:93:
37:0d:ec:df:cd:20:d7:17:0d:5f:b5:88:fa:29:6a:e0:8e:ad:
15:2f:94:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:28:28 2026 by rpki-client