Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
File: NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft (raw, json)
Hash identifier: Lv8qugi/e5E+2lpQm+d4DpSCz2x84ST6qIDk/0Xcst8=
Subject key identifier: A5:CD:8A:7B:41:B3:DC:8D:3E:DB:70:9C:B1:19:20:49:19:AA:85:E6
Authority key identifier: 34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3
Certificate issuer: /CN=349c02b30adbf10f71f9be0f4644424498263df3
Certificate serial: 019D9774455F54DF18D1F49AD7803AD55BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
Manifest number: 1602
Signing time: Thu 16 Apr 2026 18:01:12 +0000
Manifest this update: Thu 16 Apr 2026 18:01:12 +0000
Manifest next update: Fri 17 Apr 2026 18:01:12 +0000
Files and hashes: 1: NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl (hash: 1iL09abXMu+a2sHSDKFlsXUHIxpe8LDErqgQe/dNkKw=)
2: nLdNc3uBYqXuQWe74YmK5T849LY.roa (hash: zK1HUD0p8PZSAAAocDxVA//Y+SMHbXms/tkLOsNaqAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:74:45:5f:54:df:18:d1:f4:9a:d7:80:3a:d5:5b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349c02b30adbf10f71f9be0f4644424498263df3
Validity
Not Before: Apr 16 18:01:12 2026 GMT
Not After : Apr 17 18:01:12 2026 GMT
Subject: CN=a5cd8a7b41b3dc8d3edb709cb119204919aa85e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c2:96:e4:8f:77:f3:32:a6:72:c5:8e:f5:50:
7f:1a:f7:d8:0a:64:1d:ac:85:ba:f8:6a:1e:c6:d6:
69:57:8f:65:e6:37:2f:c4:9f:85:e3:18:42:a5:1a:
7a:b2:f0:f5:af:b0:f7:1d:46:77:83:63:0b:d8:4e:
e3:01:24:19:9f:d4:a2:43:5f:a8:35:bb:b6:15:8c:
b1:3b:bf:05:44:d3:46:ff:5f:3b:17:02:e9:09:51:
9e:fa:3f:85:22:62:30:bc:29:3f:0c:ed:8f:90:54:
e1:1a:cb:b9:9a:60:ed:d4:08:0d:54:f7:5e:37:3a:
08:f9:be:87:39:be:87:d5:71:fd:77:4c:b4:61:02:
82:a5:15:a2:5c:2b:98:87:52:80:21:3f:db:6d:6a:
74:c3:0e:6f:f3:0c:fa:d8:ae:34:c9:4f:37:41:12:
28:29:d2:0a:ca:34:b1:77:e0:33:e5:20:63:71:5f:
72:d1:2f:6f:98:17:71:9f:d3:6e:c5:62:46:3e:c1:
2e:2f:22:bf:1f:45:d5:d3:7c:f3:74:1b:50:f7:37:
5c:da:4c:52:7c:74:07:de:f5:24:dd:4c:03:32:34:
2f:2d:ce:92:01:20:55:1e:3e:cc:99:4d:75:a8:5e:
a5:a4:9e:8e:38:19:d2:fe:fe:78:a1:f4:db:fc:fc:
72:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CD:8A:7B:41:B3:DC:8D:3E:DB:70:9C:B1:19:20:49:19:AA:85:E6
X509v3 Authority Key Identifier:
keyid:34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:7c:3a:c8:f5:92:79:eb:92:21:ca:67:bb:0e:6a:57:61:ae:
a3:b1:54:08:0e:db:ea:e5:78:cf:76:7a:6e:2d:f0:71:f8:3d:
9d:fd:94:86:f9:7e:92:28:59:0e:09:39:f9:a3:07:7e:e9:c0:
b1:73:4e:4a:e3:bf:79:d2:26:16:a3:29:36:ab:c2:1f:2d:66:
4c:47:45:1a:c7:e5:2e:4c:6f:b9:a9:0e:de:af:43:15:ee:a8:
04:ad:90:39:9b:8d:4e:19:5e:ff:91:16:03:28:45:2e:9a:b5:
6f:7a:bc:1d:34:b2:7a:b8:21:b6:60:d9:04:0d:bc:7e:52:96:
0e:72:5a:b2:39:8a:46:d4:0a:9e:c4:5c:26:ef:0a:c4:0e:53:
3d:83:7d:f0:d1:f1:84:4c:42:98:8e:03:e2:70:7a:db:9f:a9:
6b:de:05:57:5f:f1:f1:3d:0b:d2:21:59:ec:9d:72:b8:ac:35:
77:f9:fd:fd:0c:d0:62:40:fa:07:64:2b:e4:1d:4a:bc:ae:59:
fd:e7:6b:7b:e1:d4:18:6d:5a:14:b5:7b:e5:cf:b8:0a:bd:14:
c3:85:67:30:a8:82:0c:6c:ae:82:46:bc:9d:93:33:98:3d:46:
21:f1:48:05:1f:69:f2:b6:90:e4:b2:0a:92:b7:e3:26:ed:7a:
b5:c5:75:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:13:16 2026 by rpki-client