Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/afd71b-0268-4409-a383-584a76399414/1/NJxIN9k5hA1fbHSqwINm70v-SHQ.mft
File: NJxIN9k5hA1fbHSqwINm70v-SHQ.mft (raw, json)
Hash identifier: V6Vurf43bugrY7jpdeWNKm6MKmv2oARdWfwHzPmtdqg=
Subject key identifier: E8:BE:F0:C1:B7:EF:1E:01:1F:DF:A7:41:62:5E:CF:3C:EE:1E:AF:CE
Authority key identifier: 34:9C:48:37:D9:39:84:0D:5F:6C:74:AA:C0:83:66:EF:4B:FE:48:74
Certificate issuer: /CN=349c4837d939840d5f6c74aac08366ef4bfe4874
Certificate serial: 019CAD59E02BBD7CF0F6853F11D823CBF0C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJxIN9k5hA1fbHSqwINm70v-SHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/afd71b-0268-4409-a383-584a76399414/1/NJxIN9k5hA1fbHSqwINm70v-SHQ.mft
Manifest number: 0433
Signing time: Mon 02 Mar 2026 07:01:14 +0000
Manifest this update: Mon 02 Mar 2026 07:01:14 +0000
Manifest next update: Tue 03 Mar 2026 07:01:14 +0000
Files and hashes: 1: NJxIN9k5hA1fbHSqwINm70v-SHQ.crl (hash: e8LPwY53zFNnLnh5pDgXO3SXB12eNSBUwQc1vrBd+tU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/afd71b-0268-4409-a383-584a76399414/1/NJxIN9k5hA1fbHSqwINm70v-SHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/afd71b-0268-4409-a383-584a76399414/1/NJxIN9k5hA1fbHSqwINm70v-SHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJxIN9k5hA1fbHSqwINm70v-SHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:e0:2b:bd:7c:f0:f6:85:3f:11:d8:23:cb:f0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349c4837d939840d5f6c74aac08366ef4bfe4874
Validity
Not Before: Mar 2 07:01:14 2026 GMT
Not After : Mar 3 07:01:14 2026 GMT
Subject: CN=e8bef0c1b7ef1e011fdfa741625ecf3cee1eafce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:12:42:b8:e5:66:f6:2a:c0:ee:da:e1:99:ea:
32:c2:d3:48:28:b8:8e:0f:b7:d6:2c:73:61:12:24:
36:73:5c:75:9f:bb:f4:2c:c1:1e:bc:b9:25:d1:a3:
74:af:b6:fc:2b:66:49:8f:15:c3:f4:a5:58:2a:1b:
58:bf:c6:27:79:fa:f7:34:82:2b:30:0d:87:1c:8e:
77:44:ee:72:f5:22:20:ad:52:b9:ff:3c:e2:95:1b:
84:de:db:7e:df:b9:47:be:4b:23:3e:74:52:dd:b3:
e7:91:78:56:ba:a3:f2:a7:cc:20:27:1e:fb:e1:5f:
17:3d:a9:1c:bb:52:e5:17:9a:99:7b:54:d7:e5:5b:
fd:c7:58:ec:e6:57:a0:e5:f9:55:3c:61:a5:7e:10:
07:e2:0b:69:f1:ad:3b:4e:b3:33:8b:6a:f0:55:66:
a1:02:bc:b7:67:2d:51:8e:0b:39:fe:67:29:61:5e:
02:bc:2f:4c:d4:fa:7a:a6:fa:62:9e:64:63:24:63:
0b:33:22:67:4b:d7:ee:6e:1c:8e:f8:32:25:3f:14:
f2:b8:86:3c:64:b2:10:7f:dc:37:f1:b2:26:dc:f6:
ab:ec:fa:b3:63:e3:a2:a3:9e:2e:46:64:68:b7:2a:
10:d6:ba:1a:0c:e0:be:ab:58:4e:da:95:dd:95:52:
2e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BE:F0:C1:B7:EF:1E:01:1F:DF:A7:41:62:5E:CF:3C:EE:1E:AF:CE
X509v3 Authority Key Identifier:
keyid:34:9C:48:37:D9:39:84:0D:5F:6C:74:AA:C0:83:66:EF:4B:FE:48:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJxIN9k5hA1fbHSqwINm70v-SHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/afd71b-0268-4409-a383-584a76399414/1/NJxIN9k5hA1fbHSqwINm70v-SHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/afd71b-0268-4409-a383-584a76399414/1/NJxIN9k5hA1fbHSqwINm70v-SHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:79:ab:70:61:d2:f1:2d:f6:ac:d5:a1:6e:67:85:95:c4:6d:
52:91:f0:be:d1:5d:d4:c9:48:7d:75:b8:2d:50:15:ae:ab:b5:
9a:7a:e0:34:7d:b8:c6:55:43:e0:a5:7e:f1:3d:f6:95:00:41:
1c:fb:c0:d7:52:fe:6e:bc:6b:3f:f3:6b:78:60:f6:ab:39:64:
08:6a:2e:55:01:d5:9b:ce:11:7c:9b:30:47:c4:ad:e0:37:61:
13:19:81:4d:ee:6b:ce:0d:2a:ca:a9:3a:20:61:c7:43:da:84:
13:02:2a:3f:fc:5f:20:fe:63:37:11:22:2c:78:7c:4a:02:ea:
2c:3e:a0:bd:c8:08:bc:2f:17:c5:cc:75:85:e5:f5:7d:27:c7:
b9:1e:94:d8:9d:52:45:57:72:45:a0:85:9f:98:84:b9:3a:cb:
16:ff:4b:ea:47:51:1c:63:76:07:0a:c1:e5:b9:fe:1c:9e:14:
9e:bc:26:62:e7:dc:fa:c3:ff:aa:95:b5:0f:9f:07:d7:c9:83:
f6:6c:9a:8c:47:86:43:0f:68:58:4e:57:90:81:b8:71:ff:aa:
15:f8:fd:bd:dd:2b:7c:cf:3a:eb:45:f8:77:60:09:d8:a2:37:
27:4c:94:90:87:8b:62:94:32:7a:d1:ba:95:f4:c9:ec:3a:40:
83:be:52:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:40:12 2026 by rpki-client