Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
File: NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft (raw, json)
Hash identifier: J1TfuNpQlxyFqtMj/6V3D7bSOIscLNZ1LZCNllOzwlY=
Subject key identifier: 4F:2E:D6:00:EF:FD:F5:EC:24:61:47:B6:28:B9:8B:4C:65:84:32:33
Authority key identifier: 34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E
Certificate issuer: /CN=349fd357c3fb8ea30e1207823b646e125318380e
Certificate serial: 01A03D4D3B87CDBAB88DB0F37DEDA521E9E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
Manifest number: 1A1F
Signing time: Wed 26 Aug 2026 09:01:06 +0000
Manifest this update: Wed 26 Aug 2026 09:01:06 +0000
Manifest next update: Thu 27 Aug 2026 09:01:06 +0000
Files and hashes: 1: NIIi-Q8GWOAf6y7xgN6FHyBQvLQ.roa (hash: EgUOgjA6chEBn1yaY61k/TDzCS6CCSsycQ401715+UQ=)
2: NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl (hash: HgBaSvDNi3miWLT4fZqKrTBKcwNVtvd/OJZLfyp0QMc=)
3: SzMzAMGR1n44l9wjSMiDkP_2u8k.asa (hash: /kYodvA9ywSCYdFNl7M0UF2fB5etYv2Czg5PZb60ur4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:4d:3b:87:cd:ba:b8:8d:b0:f3:7d:ed:a5:21:e9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349fd357c3fb8ea30e1207823b646e125318380e
Validity
Not Before: Aug 26 09:01:06 2026 GMT
Not After : Aug 27 09:01:06 2026 GMT
Subject: CN=4f2ed600effdf5ec246147b628b98b4c65843233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:03:cf:de:41:36:1f:cb:98:d1:0f:6b:14:94:
8a:83:28:fe:f6:28:37:cb:9c:70:bc:e6:80:38:4c:
14:96:75:b3:a2:f1:56:7b:7d:25:f1:5d:73:26:66:
d9:0a:ac:93:06:fb:15:78:d9:74:7b:97:bc:6b:42:
c0:c0:d9:3a:29:38:a8:61:d7:5e:f2:8d:6a:45:8b:
be:f1:22:e8:98:79:ff:65:ff:1c:1e:1d:c0:ee:6d:
49:c9:35:4c:27:f7:77:f5:16:a6:52:4d:0a:cc:4f:
7d:87:90:ca:6f:13:7d:dc:3f:d8:44:6b:aa:51:f3:
7b:24:5e:12:e8:72:a1:99:de:2d:8a:45:d3:42:dd:
28:e0:26:5d:d6:1e:06:26:68:ca:03:53:a6:ec:d7:
6d:dc:4e:b8:e6:57:ef:0f:22:d1:6f:b3:fc:3d:20:
25:e2:02:26:b5:07:64:db:47:3b:af:df:5e:e4:f6:
5d:25:e5:de:7e:08:fd:e6:2b:d3:01:11:2d:33:fa:
dd:1c:f9:bf:30:a0:ee:dc:02:c2:a9:64:14:b4:d6:
4a:2e:22:8d:58:79:8a:6f:b4:04:09:76:82:65:74:
dd:c0:a6:cd:99:99:f8:2a:56:c9:2d:ab:40:6d:3f:
39:29:fe:5b:f2:72:17:9a:32:62:0b:c9:1e:8c:45:
19:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2E:D6:00:EF:FD:F5:EC:24:61:47:B6:28:B9:8B:4C:65:84:32:33
X509v3 Authority Key Identifier:
keyid:34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:24:ac:95:58:97:b9:8e:bc:0a:05:18:30:21:40:e1:f5:ba:
c2:86:ec:bd:2d:a6:83:f2:d5:c0:fc:95:70:11:07:9b:c9:8d:
47:9b:fd:f4:6e:70:35:5d:87:d5:72:e9:6c:cc:b7:a7:aa:8f:
30:90:4e:b6:6f:37:dc:42:25:da:06:28:91:7c:ea:67:1c:43:
ea:c4:92:99:ec:3f:1a:77:b6:03:4a:df:91:8f:32:9f:9c:b1:
da:80:2e:32:a8:53:99:44:c8:9f:cc:68:bb:e7:c5:fc:9f:93:
4a:86:73:c7:a6:c1:fa:e3:67:63:ef:77:fa:62:1a:65:13:cf:
14:72:de:a3:dd:66:7e:68:d1:bd:3f:22:db:62:71:11:e2:af:
94:27:6e:a7:2a:c3:2e:58:80:9d:05:f3:a5:b4:a3:04:dd:5a:
0d:b6:02:1c:f0:9e:6d:1d:0c:88:d7:40:97:04:7c:c1:6e:1a:
cf:f4:25:8a:70:fc:a0:ac:73:77:63:6b:48:6a:f0:5b:f0:76:
cc:d4:b3:d3:2a:2c:b0:dd:55:2b:c1:65:3a:95:e4:7a:1d:bc:
cc:61:ca:11:d0:bf:47:a3:f3:69:a9:81:b8:10:09:fa:be:c5:
aa:72:1f:18:e9:a1:8e:d2:2f:21:42:36:d2:23:ae:af:8d:4b:
f1:03:c4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:07:12 2026 by rpki-client