Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft
File: NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft (raw, json)
Hash identifier: 2AJSckHuszArWMOXKRaBjxdegkPCvuuaSilHNWh14DQ=
Subject key identifier: 38:A2:87:4D:4D:58:2C:D5:E0:7F:29:A3:FD:DC:6D:33:68:21:C9:51
Authority key identifier: 36:31:9B:CD:47:47:ED:5B:20:2B:B5:78:AC:B3:90:D1:6F:C4:11:A5
Certificate issuer: /CN=36319bcd4747ed5b202bb578acb390d16fc411a5
Certificate serial: 019CAA8F70E0E7B3A7027EF3FB54DF7FAE62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft
Manifest number: 14D9
Signing time: Sun 01 Mar 2026 18:00:53 +0000
Manifest this update: Sun 01 Mar 2026 18:00:53 +0000
Manifest next update: Mon 02 Mar 2026 18:00:53 +0000
Files and hashes: 1: NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl (hash: J1zIUTklU6XTvrAdmc7ynLxlk04YJObnAqLdyKLmpdc=)
2: QWziBGJKT97GaU5TsJ0WTnA3UaQ.roa (hash: cg/5v5qKfRj2142sZSNTSinM09isCzKzLrAye6kCxYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:70:e0:e7:b3:a7:02:7e:f3:fb:54:df:7f:ae:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36319bcd4747ed5b202bb578acb390d16fc411a5
Validity
Not Before: Mar 1 18:00:53 2026 GMT
Not After : Mar 2 18:00:53 2026 GMT
Subject: CN=38a2874d4d582cd5e07f29a3fddc6d336821c951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a0:e8:1b:cf:39:89:cf:c9:44:8e:28:a2:8c:
bd:04:c9:f4:18:de:d8:31:05:55:7f:8d:6f:f4:96:
dc:59:48:43:ee:96:2c:1f:75:02:94:c7:83:2b:3d:
9d:13:0a:79:5d:8d:23:d9:f2:c0:32:d4:3c:94:a7:
43:53:d3:3d:d5:61:d5:f0:76:cb:96:ec:15:e3:a8:
57:24:93:6d:03:b3:47:31:0a:2f:35:f7:32:37:a6:
94:7d:4a:a1:1a:5b:6d:2f:66:50:df:e6:74:ae:1c:
aa:be:d1:ca:fb:6e:ba:19:a5:7c:57:60:d7:f5:cf:
34:bc:d7:a9:51:24:c1:0e:f9:e7:39:ee:f4:26:98:
46:bc:ae:a0:a3:23:70:ed:82:74:23:a4:03:03:47:
db:2a:ff:c9:00:c7:b0:7f:86:a9:71:21:bb:82:ed:
12:4b:30:0a:ed:c2:36:7d:c0:7e:45:2b:b5:82:37:
04:b7:c4:ef:22:37:cd:b6:77:ec:05:a5:74:05:b5:
99:ff:3a:c2:a7:33:93:f7:78:d5:d6:98:3e:64:ba:
08:a6:2d:8e:0a:0e:3b:b1:b5:36:68:a5:61:a1:28:
19:0b:22:d6:84:b1:ab:04:dd:97:d6:c5:01:18:ed:
34:58:48:c6:51:47:7c:09:86:88:a5:64:16:75:46:
c6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A2:87:4D:4D:58:2C:D5:E0:7F:29:A3:FD:DC:6D:33:68:21:C9:51
X509v3 Authority Key Identifier:
keyid:36:31:9B:CD:47:47:ED:5B:20:2B:B5:78:AC:B3:90:D1:6F:C4:11:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:12:cf:53:49:4c:87:a6:a4:c0:e8:44:1a:db:53:21:e1:83:
0e:1e:8a:1f:36:ca:c3:b1:8a:a8:6c:46:e7:9c:19:8c:23:7e:
a6:b2:1f:50:29:59:44:da:93:ec:8b:a0:a9:98:bf:88:1a:1e:
d1:cb:c7:b2:96:2b:99:f2:ee:92:ef:db:14:08:0b:df:0a:bf:
63:2c:da:97:67:c3:23:fa:8d:83:1b:22:77:9a:08:4a:cf:c5:
c2:65:3e:dd:da:10:d0:aa:92:b6:cc:94:e1:ad:8e:04:84:e4:
27:a7:9b:d4:04:0e:72:c8:40:e0:ac:88:fa:46:35:ae:38:65:
51:92:b2:05:46:d2:8d:4e:9c:29:56:fb:77:40:a4:df:f8:2e:
28:c8:ef:7a:9b:0d:9b:42:8d:cb:93:43:2a:7d:7d:4d:90:b4:
ef:54:8d:ff:82:ac:87:27:d2:67:fa:a2:66:bb:27:de:27:ce:
e5:8a:2d:2b:f6:66:98:54:f4:27:89:92:76:5c:c7:57:b6:54:
82:dc:43:bb:b3:e6:26:cd:90:b9:24:67:6f:6b:0d:77:f0:63:
e5:60:18:b5:18:42:6e:72:c6:e6:b3:2d:a4:a9:a1:bb:68:7f:
2a:d2:42:92:c2:64:58:f9:cb:63:84:46:79:81:d4:f1:40:1f:
ea:2e:0d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:26 2026 by rpki-client