Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
File: NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft (raw, json)
Hash identifier: kQ61Lq17yxoSqk3k2H6271kG5WsNv0y4rR5Yq8BDzbc=
Subject key identifier: 65:43:B4:5B:9F:D4:8B:7F:B8:7C:F3:E8:70:E4:05:7C:32:56:53:8B
Authority key identifier: 34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E
Certificate issuer: /CN=349fd357c3fb8ea30e1207823b646e125318380e
Certificate serial: 019F122E5D8284CC37B03ECEF06363A35D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
Manifest number: 1984
Signing time: Mon 29 Jun 2026 07:00:56 +0000
Manifest this update: Mon 29 Jun 2026 07:00:56 +0000
Manifest next update: Tue 30 Jun 2026 07:00:56 +0000
Files and hashes: 1: 4sa3784Bi9DMLhD2DNXva3FSXiA.asa (hash: HiMiDe0dC8OTllwNeML3o8XyExGFwmZ6ylQX9zkk8zY=)
2: NIIi-Q8GWOAf6y7xgN6FHyBQvLQ.roa (hash: EgUOgjA6chEBn1yaY61k/TDzCS6CCSsycQ401715+UQ=)
3: NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl (hash: /DNEPBCl1RwVwLOiiAwb6P8jXsVL00wOOXtMXTvcdq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:5d:82:84:cc:37:b0:3e:ce:f0:63:63:a3:5d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349fd357c3fb8ea30e1207823b646e125318380e
Validity
Not Before: Jun 29 07:00:56 2026 GMT
Not After : Jun 30 07:00:56 2026 GMT
Subject: CN=6543b45b9fd48b7fb87cf3e870e4057c3256538b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2c:4a:da:7a:64:2f:b5:ef:87:8d:db:ba:30:
65:bd:f9:e6:3f:07:68:1b:a6:28:24:e2:f2:08:39:
99:bf:fc:e7:41:de:b1:41:73:20:81:c0:5b:81:e3:
9a:71:bf:bb:05:0c:7b:f4:fb:1a:97:d5:5c:85:b4:
17:cc:9c:df:e1:af:31:a3:a9:4c:67:ab:cf:b9:04:
80:d3:cf:99:28:86:3e:a0:23:3d:bb:ba:51:d6:70:
49:3c:26:b1:c1:bf:8e:84:bb:44:13:cf:78:15:7d:
45:8f:43:52:e2:5e:58:2f:53:cf:79:f5:bb:f7:ed:
57:b8:7b:89:e2:13:68:bd:52:5d:d1:dc:dc:1e:54:
21:d3:1f:a1:d0:b2:c7:6d:90:02:d7:04:dd:69:da:
81:bd:34:1e:95:4b:a9:b0:c6:3b:31:b6:30:91:0c:
35:0f:6b:74:9a:33:88:34:83:15:f4:92:21:d1:b3:
9b:86:05:67:7e:4e:53:80:5f:3f:13:10:c6:ae:96:
77:61:86:aa:18:49:72:91:17:ba:47:0c:16:46:78:
54:74:90:96:ab:70:b3:7b:33:87:2c:80:fd:ee:9c:
d2:ce:fb:66:9b:17:55:9e:33:9c:fb:b6:3b:d5:3b:
3c:22:9b:ed:b6:33:6f:11:b3:4b:aa:6a:89:31:76:
84:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:43:B4:5B:9F:D4:8B:7F:B8:7C:F3:E8:70:E4:05:7C:32:56:53:8B
X509v3 Authority Key Identifier:
keyid:34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9d:c3:8f:51:85:0a:64:0d:60:8c:8b:80:f7:2e:31:73:c7:
66:2b:75:ff:b2:98:88:04:5f:5b:54:0d:d1:fc:59:df:db:7a:
1e:f6:dd:a7:36:17:20:c2:3e:d9:c4:41:c5:ec:dc:61:24:04:
c6:3b:e6:23:5d:00:9d:1c:6d:81:8c:2f:48:bb:6a:68:30:1f:
6d:d5:c4:a2:03:93:c6:5f:1d:e3:34:73:ab:db:06:7a:3c:c4:
cd:1b:12:88:64:73:4e:c0:c2:4c:97:e2:c6:4c:48:01:f9:ba:
e5:18:e4:5f:fb:3b:28:d2:cc:de:6e:f2:a1:48:42:19:9c:e2:
a0:84:44:7d:5b:29:b2:7a:f5:fe:7e:b9:35:3a:5e:90:fd:4b:
11:6e:61:07:94:7a:fe:2c:c0:2c:45:8d:19:5f:7a:8d:a4:fb:
aa:a3:9b:ed:e2:c7:19:25:83:9e:66:c9:7b:9d:97:b2:2c:45:
a6:90:df:d4:fa:5f:f7:27:8f:3d:fa:f9:ff:56:8c:98:d5:75:
fd:fc:1c:ce:53:e5:70:1c:ae:d0:4b:51:0e:f9:84:8c:3c:3b:
7d:40:0d:98:e7:96:d6:58:f8:36:24:b0:92:5b:22:31:64:61:
23:b2:19:6a:d1:b8:88:11:d5:b0:5b:3d:1f:c9:de:78:54:34:
19:52:3b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:34:50 2026 by rpki-client