Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
File: NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft (raw, json)
Hash identifier: ddLhtywX3rg6md6/naYBgTFj5xWnaalobyH4dqrOyuo=
Subject key identifier: DD:8C:C8:2E:15:75:BA:B0:E3:7F:9F:2A:7F:4C:FC:52:FF:9F:A6:76
Authority key identifier: 36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0
Certificate issuer: /CN=36368aac0f4a28c8a31760f06b578dae453146f0
Certificate serial: 019D9AE285BAA6996862FA741E395280BAC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 10:00:29 +0000
Manifest this update: Fri 17 Apr 2026 10:00:29 +0000
Manifest next update: Sat 18 Apr 2026 10:00:29 +0000
Files and hashes: 1: NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl (hash: dDOpRxTJqGt1zhcrgpCPdxaJsEZW9eLrvRPpXzBnFJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:85:ba:a6:99:68:62:fa:74:1e:39:52:80:ba:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36368aac0f4a28c8a31760f06b578dae453146f0
Validity
Not Before: Apr 17 10:00:29 2026 GMT
Not After : Apr 18 10:00:29 2026 GMT
Subject: CN=dd8cc82e1575bab0e37f9f2a7f4cfc52ff9fa676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bf:6b:cc:a4:17:b7:a4:e7:38:0e:07:60:1f:
e9:7f:c6:78:06:c5:f3:bd:95:38:b1:4d:43:21:34:
6b:c5:ce:3b:d5:a9:d4:af:1c:d4:ec:98:f0:af:b8:
ba:00:f0:9d:85:98:a6:b8:a4:be:43:ad:93:2d:22:
eb:37:e5:a6:66:8d:2d:79:a3:4d:3a:f9:13:3f:8f:
63:74:2f:8d:8f:3b:f1:d1:30:f5:3e:17:99:c0:60:
85:02:88:6d:8f:91:19:5e:7f:dc:ea:93:05:5b:e4:
27:5f:22:d7:d1:93:e3:9f:91:23:79:36:b3:2f:79:
58:16:91:27:87:c6:ed:b8:d8:de:b8:ce:90:4c:6a:
58:f4:2d:b8:c7:98:f1:c9:30:38:d6:06:0b:48:cf:
d0:3e:9b:b1:6b:92:c2:f3:ac:6d:59:f1:66:d7:9d:
31:e0:2d:80:2e:0c:91:bc:37:fb:c6:56:18:45:34:
33:25:77:83:b1:41:8b:2b:21:04:2a:05:35:6d:37:
57:04:38:cf:26:9e:44:92:42:f3:84:eb:f0:2d:2e:
47:b9:53:43:74:20:77:dd:c6:5b:9e:10:bd:04:51:
0b:68:67:ce:30:9d:56:1c:50:fc:9d:41:f0:60:b6:
9f:48:82:b2:e3:2a:c5:96:31:f8:92:74:06:e6:0a:
1e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8C:C8:2E:15:75:BA:B0:E3:7F:9F:2A:7F:4C:FC:52:FF:9F:A6:76
X509v3 Authority Key Identifier:
keyid:36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:75:9c:aa:54:23:0d:75:09:53:52:65:a8:0c:10:a5:6e:a2:
f1:3c:c2:a4:1b:03:cb:76:9b:d7:c3:4b:34:56:2c:a7:ec:0a:
39:58:43:0d:ca:b8:3b:36:c1:06:dc:b0:92:6d:84:8b:0f:e8:
5b:07:84:da:48:94:26:5b:a7:72:0e:2b:43:97:49:39:8b:f0:
3c:11:b8:b8:6c:b2:8e:35:cd:95:ee:1b:8e:05:ec:fe:7e:37:
fe:be:45:d0:42:28:6b:e3:c8:0b:e4:fb:1a:31:21:3a:bd:55:
89:49:67:1e:66:0b:5d:38:76:5b:11:6f:89:f3:2f:bf:e1:b1:
0c:10:ab:6a:b8:55:4f:91:ae:86:d0:3d:3a:05:16:3d:80:30:
f1:e9:c9:e9:dc:09:6a:f7:e8:85:3a:c0:bc:bf:b0:f5:e1:18:
55:b1:1f:e8:46:b6:cc:33:5f:3a:ed:3b:af:bc:68:fa:9e:28:
1d:f2:b7:7f:d9:ba:41:90:35:b6:b1:0c:4c:d5:9a:7c:34:12:
90:0e:a6:61:d4:e6:09:10:ee:f8:7e:94:b9:21:db:ca:e1:c7:
46:04:a0:fc:03:b5:99:05:10:5a:cb:04:48:8d:9b:a3:27:5b:
59:54:8e:2a:45:a6:74:06:d2:3b:43:0d:cb:8f:42:16:5b:ae:
ab:75:f2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:53:51 2026 by rpki-client