Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/afd71b-0268-4409-a383-584a76399414/1/NJxIN9k5hA1fbHSqwINm70v-SHQ.mft
File: NJxIN9k5hA1fbHSqwINm70v-SHQ.mft (raw, json)
Hash identifier: qbipjESlCxmFeDYOXObCrbp6CwGiir9QwTlyFUl9i+g=
Subject key identifier: EF:0A:35:89:49:A8:9F:D9:02:2A:0E:B4:96:AF:72:76:7C:FE:B4:EB
Authority key identifier: 34:9C:48:37:D9:39:84:0D:5F:6C:74:AA:C0:83:66:EF:4B:FE:48:74
Certificate issuer: /CN=349c4837d939840d5f6c74aac08366ef4bfe4874
Certificate serial: 019D9AE2BCF41B2BA839060220B3FD2475C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJxIN9k5hA1fbHSqwINm70v-SHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/afd71b-0268-4409-a383-584a76399414/1/NJxIN9k5hA1fbHSqwINm70v-SHQ.mft
Manifest number: 04AE
Signing time: Fri 17 Apr 2026 10:00:43 +0000
Manifest this update: Fri 17 Apr 2026 10:00:43 +0000
Manifest next update: Sat 18 Apr 2026 10:00:43 +0000
Files and hashes: 1: NJxIN9k5hA1fbHSqwINm70v-SHQ.crl (hash: otuyGA5UNVaquVX1RN07Miw3GtKU0HNe7Zug3LN1nzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/afd71b-0268-4409-a383-584a76399414/1/NJxIN9k5hA1fbHSqwINm70v-SHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/afd71b-0268-4409-a383-584a76399414/1/NJxIN9k5hA1fbHSqwINm70v-SHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJxIN9k5hA1fbHSqwINm70v-SHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:bc:f4:1b:2b:a8:39:06:02:20:b3:fd:24:75:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349c4837d939840d5f6c74aac08366ef4bfe4874
Validity
Not Before: Apr 17 10:00:43 2026 GMT
Not After : Apr 18 10:00:43 2026 GMT
Subject: CN=ef0a358949a89fd9022a0eb496af72767cfeb4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:da:9c:3d:81:37:5c:5e:fb:79:69:83:64:e1:
86:58:64:c6:ee:a9:4b:70:f6:a1:9f:4d:8d:49:06:
49:81:08:3b:3c:10:10:e3:96:c3:ca:b6:1d:28:3d:
4c:f1:9d:fa:22:7a:0a:1e:69:ae:e6:95:82:72:ea:
5e:ca:43:84:0e:90:91:d0:87:ff:ca:3d:4f:f4:d0:
fb:a9:19:f1:22:7a:c8:14:51:ca:72:99:95:69:fa:
b7:ee:2e:f7:4c:c5:5b:38:e0:43:70:ba:69:c5:e5:
da:38:61:72:00:6a:a5:3e:8d:32:15:41:b7:c3:93:
30:e3:ca:3a:e2:3a:05:03:66:3a:f9:d9:76:6d:5e:
13:7c:60:ee:cc:52:75:c4:bf:e2:fd:25:3a:ae:13:
f7:d9:60:e0:b3:6b:ca:1b:fa:99:79:c4:0a:01:e5:
1d:4b:22:50:d6:57:73:b3:1a:62:26:a9:e3:5a:82:
70:16:7b:98:c4:8d:a0:14:cf:a1:4e:ff:d8:4b:dc:
8b:aa:2d:62:9d:60:9f:b8:c1:ee:65:ce:91:05:30:
a0:0e:5d:27:62:93:d8:ca:9e:f8:ec:a2:5c:01:4d:
00:30:bc:8a:9c:16:0a:4c:92:6a:1b:48:b6:6c:54:
be:b7:a8:53:af:f9:97:d8:67:b8:67:09:eb:ad:28:
9e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0A:35:89:49:A8:9F:D9:02:2A:0E:B4:96:AF:72:76:7C:FE:B4:EB
X509v3 Authority Key Identifier:
keyid:34:9C:48:37:D9:39:84:0D:5F:6C:74:AA:C0:83:66:EF:4B:FE:48:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJxIN9k5hA1fbHSqwINm70v-SHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/afd71b-0268-4409-a383-584a76399414/1/NJxIN9k5hA1fbHSqwINm70v-SHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/afd71b-0268-4409-a383-584a76399414/1/NJxIN9k5hA1fbHSqwINm70v-SHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:34:31:5e:3f:69:ee:38:98:18:90:c7:54:6f:34:03:d0:b4:
18:cf:67:d2:88:43:80:33:c1:1e:ff:49:86:f5:64:34:f2:ef:
52:09:43:f5:c8:5c:a0:04:5a:77:0f:15:19:47:10:c5:02:ce:
ae:d9:a6:77:40:e6:e2:04:b7:8f:79:73:6b:95:89:1b:78:26:
5e:e4:05:a3:fe:2f:97:01:c1:0e:40:25:cd:e6:7f:2b:dc:b5:
cb:6e:d3:0d:b5:a1:ce:a1:a9:47:c7:d1:03:17:80:d8:fa:86:
cd:6d:40:92:1e:5c:e5:8f:6c:c0:43:3f:c8:84:18:80:dc:d8:
3e:8c:5d:77:75:53:99:94:b6:5f:d0:2c:4a:c3:bc:01:1a:93:
0e:7c:ef:2b:79:61:14:46:4d:25:a0:46:a0:34:fc:32:04:58:
2b:b6:ba:7c:e0:b1:38:85:da:da:05:bb:6d:d3:f2:33:c5:d9:
9a:59:0a:14:d8:a3:2b:6c:4a:09:e5:ad:86:08:81:a4:a6:9d:
2a:50:be:53:83:11:37:70:5d:11:2c:36:20:fa:30:b7:16:6f:
d1:b6:0b:ef:42:b1:00:96:a2:16:33:6c:03:08:49:0d:78:74:
d6:20:27:5b:69:96:85:df:47:e8:29:dc:b0:4c:92:55:0c:2e:
c4:c9:eb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:28:42 2026 by rpki-client