Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
File: Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft (raw, json)
Hash identifier: 6lff+SSurMhLCid+sLhfzTc8yMcp01IBY533fvXukkE=
Subject key identifier: 8D:08:7C:0B:DD:A8:EE:5A:23:33:CC:1B:D3:97:C6:C4:D4:AA:3A:50
Authority key identifier: 36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
Certificate issuer: /CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Certificate serial: 019CAA8FC6E2C4E828446A75E523DFF2D2B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
Manifest number: 04B9
Signing time: Sun 01 Mar 2026 18:01:15 +0000
Manifest this update: Sun 01 Mar 2026 18:01:15 +0000
Manifest next update: Mon 02 Mar 2026 18:01:15 +0000
Files and hashes: 1: Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl (hash: N3+jXEom7e4DStp4R29RtiQLjaAL9/ZuKWuSYfIsW2k=)
2: gk4gJNf4bMjSvDxRHQogZ5qtP6Q.asa (hash: vTTViFNR0vhqhAgeAJUXn5K4HSHa6hjasS8Zb1BM/mE=)
3: zHfDyMse-vNJufyI9SCct6ZccBc.roa (hash: 3exCGyL+KSp4BS9S3DhRHLN2Z0aDggGK5DfZIwZFGko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:c6:e2:c4:e8:28:44:6a:75:e5:23:df:f2:d2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Validity
Not Before: Mar 1 18:01:15 2026 GMT
Not After : Mar 2 18:01:15 2026 GMT
Subject: CN=8d087c0bdda8ee5a2333cc1bd397c6c4d4aa3a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:5d:68:28:1f:07:4f:15:62:24:49:41:75:
97:92:aa:bc:be:5e:12:94:92:98:f9:c6:09:1f:2b:
2c:3c:4e:f8:2a:9c:4b:05:47:40:b5:9e:19:8b:ee:
00:79:e6:71:95:97:6a:27:b5:3e:39:ed:45:d0:55:
f6:91:f1:6a:d1:7a:98:3f:15:5c:40:a5:da:ae:db:
43:3c:60:af:44:5c:47:03:55:c7:4a:07:3d:bd:9a:
f9:4c:11:f2:ef:72:ad:4e:8f:e5:86:d3:43:70:ff:
30:ab:62:d3:86:93:a6:42:9d:1f:bf:07:f2:38:0f:
ae:ed:87:0a:0f:7e:d3:7b:64:40:57:05:5c:e0:6d:
a8:8c:45:5f:fc:ed:bc:5d:80:ea:c7:76:60:e4:4c:
77:31:5e:15:77:7f:82:46:26:15:3c:43:e3:0c:b9:
3d:d9:0d:18:82:b1:4b:07:dd:12:a1:cd:73:ff:4b:
c8:b8:1e:7b:c8:d0:b1:e8:d1:73:cb:44:aa:2b:1f:
d9:d0:32:ee:95:c9:92:46:05:17:68:42:a6:1a:c3:
76:99:1d:68:9b:d1:49:61:09:e5:a0:75:a0:1d:da:
7e:9e:ac:b6:13:c8:69:be:88:8b:06:48:c5:ec:ec:
a8:e2:5f:fe:1b:60:6f:2c:a8:79:57:e7:2a:f6:8f:
3e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:08:7C:0B:DD:A8:EE:5A:23:33:CC:1B:D3:97:C6:C4:D4:AA:3A:50
X509v3 Authority Key Identifier:
keyid:36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:69:fc:d0:6a:3c:04:96:17:33:88:19:1b:e8:98:74:2f:fa:
75:44:45:74:23:55:79:d9:f7:90:15:dd:56:80:cf:08:cc:a9:
8d:7d:3c:d3:76:c9:c0:4b:2e:ff:d9:30:a7:1d:2a:90:77:eb:
04:61:0b:3b:b7:75:5d:30:28:81:78:54:39:68:70:66:cb:6f:
0f:c0:d7:98:95:46:00:71:86:5d:85:d9:e1:ac:fb:4b:96:3a:
3c:76:00:d9:40:cf:0a:90:38:41:51:cf:4d:01:7d:85:00:19:
28:33:b8:d9:43:0b:bf:d7:66:f7:66:8b:5a:4d:c7:28:47:07:
88:8e:5d:09:33:8c:bb:68:ca:e9:ee:d1:f9:4a:5e:49:4d:d9:
3c:71:0c:f6:58:4b:0f:b4:d4:b8:1b:0e:aa:74:21:56:d3:63:
6c:cc:a2:3a:3a:eb:ad:4d:33:46:56:a0:8a:91:74:5f:d3:ea:
c0:be:cb:df:63:3d:c2:14:7c:3a:62:dc:6c:cf:7a:af:59:36:
37:1c:2a:fe:5d:87:eb:cf:0f:8d:83:6c:de:3d:27:50:6a:93:
d1:85:fb:99:c2:b6:06:b1:39:93:01:90:7f:f1:65:dc:74:72:
98:de:0a:b9:f3:e3:1f:f4:e0:9a:5a:ed:17:24:14:43:16:1d:
51:4d:31:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:22:12 2026 by rpki-client