Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
File: NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft (raw, json)
Hash identifier: kWYI16oANv/6cbBg8YbKR6RVoZfwNe+0D2hlbZPNGf4=
Subject key identifier: AC:A2:7B:20:D3:AE:7A:BD:40:AE:67:B7:96:C0:4D:6E:5B:83:51:74
Authority key identifier: 34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3
Certificate issuer: /CN=349c02b30adbf10f71f9be0f4644424498263df3
Certificate serial: 019CABD964CBE65129B5FCEA5444404A526C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
Manifest number: 1588
Signing time: Mon 02 Mar 2026 00:01:16 +0000
Manifest this update: Mon 02 Mar 2026 00:01:16 +0000
Manifest next update: Tue 03 Mar 2026 00:01:16 +0000
Files and hashes: 1: NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl (hash: cCur916M/JVp5n7vHoLO7GbvtrNIlLLz/0j8J9OIxI0=)
2: nLdNc3uBYqXuQWe74YmK5T849LY.roa (hash: zK1HUD0p8PZSAAAocDxVA//Y+SMHbXms/tkLOsNaqAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:64:cb:e6:51:29:b5:fc:ea:54:44:40:4a:52:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349c02b30adbf10f71f9be0f4644424498263df3
Validity
Not Before: Mar 2 00:01:16 2026 GMT
Not After : Mar 3 00:01:16 2026 GMT
Subject: CN=aca27b20d3ae7abd40ae67b796c04d6e5b835174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:65:23:e1:4c:65:e5:0c:0b:ed:e8:8a:84:c6:
83:09:ce:4a:34:02:73:43:3f:48:26:66:9e:8e:9e:
86:a5:f0:98:a4:a8:7a:fd:68:99:ff:24:63:0b:1b:
fc:b2:38:3a:24:8c:07:22:2a:ac:9e:68:26:f9:a2:
b4:dc:f0:33:f6:7e:c3:1e:b8:51:a0:f9:17:b2:0f:
4f:6d:e8:42:57:36:42:66:9d:6a:13:64:81:3c:2d:
d9:0b:0f:6b:d7:ef:f3:47:f7:14:4c:c1:21:09:6f:
a1:18:ed:82:31:0a:f4:59:08:5c:d8:56:24:17:1a:
8e:07:ad:07:ef:f4:59:de:e7:8c:bc:9c:7f:fb:d6:
3c:e9:4e:b1:a0:29:5c:e5:d7:14:20:61:cf:cf:12:
3c:73:90:d9:90:a2:ab:ad:71:59:3e:e4:9e:96:b4:
57:45:f3:07:d4:70:bd:06:a8:69:12:84:37:41:9c:
99:27:f5:9f:0f:6c:3a:28:9b:95:4d:df:9f:f1:22:
6f:f5:d2:38:df:83:35:e2:3d:ae:06:4e:11:99:62:
93:19:d2:23:e8:66:3b:1a:b6:46:34:43:e3:c7:f5:
74:f6:35:aa:b7:b1:67:17:e6:4b:c1:c8:04:ce:93:
d6:f5:25:22:7c:9c:56:5e:1b:5a:92:98:c1:d3:59:
8a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A2:7B:20:D3:AE:7A:BD:40:AE:67:B7:96:C0:4D:6E:5B:83:51:74
X509v3 Authority Key Identifier:
keyid:34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b9:ce:30:4b:6f:8f:3c:7f:ec:a1:36:4d:2e:4d:6b:88:c5:
41:0b:13:6a:80:e0:9c:d0:9e:e6:7d:54:9e:ca:cd:ef:08:9a:
30:ce:18:61:2f:29:6d:37:c7:35:9f:10:c1:f1:2b:c2:14:9c:
76:63:db:15:f2:a4:9d:79:cf:25:75:a6:16:56:d7:11:d7:bc:
13:7a:a2:30:26:02:c4:03:bd:b6:f7:72:fa:c0:29:7a:6c:e6:
c3:79:2f:20:3c:b9:40:ff:18:9d:25:75:c6:e1:e4:d7:cf:a5:
94:b1:32:d7:95:7e:05:ce:15:c9:0f:7e:7a:8c:75:53:55:c6:
44:89:62:cb:40:ab:9e:af:4e:cc:37:a8:a5:ef:96:d6:0e:8b:
32:84:a3:f9:1e:fd:e6:84:b0:ea:89:2d:58:06:99:73:3c:9a:
02:3b:f9:22:b7:3e:76:90:40:57:86:86:1c:10:8c:ad:93:b4:
08:13:28:3b:10:0d:91:85:c5:78:68:ed:1c:9b:75:0f:f0:61:
42:ca:a9:b8:18:28:60:17:68:75:c2:00:96:38:32:de:d7:2a:
77:0d:f7:69:fe:48:6b:62:bf:53:2a:e6:47:3f:ff:5a:42:13:
4b:c1:eb:70:67:05:ba:c1:4f:fb:f6:3c:c6:41:78:67:e3:e2:
4e:19:1c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:49:59 2026 by rpki-client