Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
File: NJGSBLesR0JLqr-ykb0_yPqeBfY.mft (raw, json)
Hash identifier: kBsy7wK5TmHKAFaiMXv06nQq/Q7Z0K9b3HrUvohy7w0=
Subject key identifier: 7B:7A:CB:B0:6A:0C:55:2F:33:95:3D:E7:C2:3C:18:93:58:D0:DF:9B
Authority key identifier: 34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
Certificate issuer: /CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Certificate serial: 019EB87CA8F9CA16B9DCB01F39E17D130415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
Manifest number: 18EA
Signing time: Thu 11 Jun 2026 21:00:37 +0000
Manifest this update: Thu 11 Jun 2026 21:00:37 +0000
Manifest next update: Fri 12 Jun 2026 21:00:37 +0000
Files and hashes: 1: NJGSBLesR0JLqr-ykb0_yPqeBfY.crl (hash: HKHYoCIab0NHbPIXqtX3+nXTgB1sH0slnGVQ2129BTc=)
2: l04ryjfqbPZeuiZZejzJCWBinEU.roa (hash: qyO0LhlZBEPFvxWtxObTzuofXOhZhOAncGkjMZ9Xnlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:a8:f9:ca:16:b9:dc:b0:1f:39:e1:7d:13:04:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Validity
Not Before: Jun 11 21:00:37 2026 GMT
Not After : Jun 12 21:00:37 2026 GMT
Subject: CN=7b7acbb06a0c552f33953de7c23c189358d0df9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f1:cb:67:66:73:04:dc:13:0c:a4:23:a5:1d:
95:ea:d3:37:5b:55:fb:23:8f:23:85:f1:39:76:18:
24:4b:25:4e:c7:cc:20:2e:a0:14:3c:bc:63:4f:b3:
b0:f5:e4:fe:b9:05:cb:82:1c:fe:9c:34:ba:45:dc:
ce:2e:00:06:59:3c:a1:a2:b1:d0:b6:63:b4:4b:af:
e5:54:4c:5b:b2:55:cf:c6:da:02:52:88:dc:91:40:
01:be:bc:1c:e6:49:43:d7:b7:08:65:69:54:50:5c:
53:bd:1e:c3:0c:20:be:a2:37:55:ef:54:ab:4b:df:
c2:31:5d:a0:8d:a6:64:7d:66:28:54:3e:41:30:bb:
e5:a3:d1:96:d6:59:f8:15:d0:35:c9:eb:ca:75:c2:
e5:09:7f:f6:a6:20:08:70:56:3e:86:d0:b6:ae:6e:
06:35:5b:d4:e3:03:ee:d0:fa:a9:f1:a0:d3:35:e7:
a8:d5:ac:0a:f1:6a:75:3d:22:92:a5:5b:59:92:f7:
09:68:28:16:f3:00:29:e3:af:34:29:3d:d2:bd:51:
a9:6b:ea:73:96:f2:78:78:a7:c2:5f:1e:ce:09:a8:
bd:fa:c9:4e:69:e2:ec:f7:53:80:2e:67:f9:14:2b:
63:b5:4d:7f:84:1a:1b:0e:dc:11:38:f9:e0:11:90:
84:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7A:CB:B0:6A:0C:55:2F:33:95:3D:E7:C2:3C:18:93:58:D0:DF:9B
X509v3 Authority Key Identifier:
keyid:34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:6a:c0:95:ed:aa:69:d7:35:10:b6:4b:1e:7c:65:03:1b:ed:
76:f6:52:77:99:91:73:f9:48:08:cd:23:53:9a:d3:bc:a8:9f:
20:e8:5e:bc:e4:a1:76:9a:de:e4:78:c0:92:7e:7f:2c:5b:b2:
39:34:d6:19:03:33:60:98:7d:23:c4:7e:7b:42:ce:5e:fd:58:
ab:53:87:e5:dd:f8:11:6c:86:58:be:b7:99:ac:38:c8:e5:6f:
0a:de:f4:75:5f:28:f9:28:ee:6d:03:fe:bc:53:24:40:41:f4:
5f:41:4d:8d:d5:82:eb:fd:34:54:6c:f2:dd:1a:e6:ff:77:59:
e0:72:56:aa:5c:25:cf:6d:32:a2:ef:c5:57:40:16:49:3c:bf:
a6:dc:71:ba:9b:e2:42:78:62:25:ab:53:e0:80:33:c3:35:1a:
eb:12:b9:b1:19:e1:eb:58:1f:60:1d:68:cd:aa:f2:93:65:f3:
d1:8b:bd:cc:ac:52:77:ce:c5:20:d8:d9:78:05:ed:92:e5:b7:
cf:5c:86:96:db:73:d9:de:ec:0b:8d:d7:f1:62:b6:d1:ec:c6:
7d:da:54:6b:48:85:22:e7:79:3d:0e:40:a7:08:21:09:ee:9c:
a9:f2:55:7d:33:b7:17:a1:98:22:aa:10:dc:af:aa:2b:86:ce:
07:bf:4f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:10:26 2026 by rpki-client