Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
File: NJGSBLesR0JLqr-ykb0_yPqeBfY.mft (raw, json)
Hash identifier: 5+6Qn8gB/0CpoMlLDsnqzieMn7uppMJPs6b+AwGTuik=
Subject key identifier: 76:14:E7:A9:34:30:FC:F4:EF:CF:DA:DC:DC:E7:CB:B0:BF:86:D2:94
Authority key identifier: 34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
Certificate issuer: /CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Certificate serial: 019FA2297920B295CDE2BF131A72C4579E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
Manifest number: 1963
Signing time: Mon 27 Jul 2026 06:00:54 +0000
Manifest this update: Mon 27 Jul 2026 06:00:54 +0000
Manifest next update: Tue 28 Jul 2026 06:00:54 +0000
Files and hashes: 1: NJGSBLesR0JLqr-ykb0_yPqeBfY.crl (hash: lJ43dch9Ed8aqJkJIv7FJO4krBpixlw6M5dlTpodE7w=)
2: l04ryjfqbPZeuiZZejzJCWBinEU.roa (hash: qyO0LhlZBEPFvxWtxObTzuofXOhZhOAncGkjMZ9Xnlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:79:20:b2:95:cd:e2:bf:13:1a:72:c4:57:9e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Validity
Not Before: Jul 27 06:00:54 2026 GMT
Not After : Jul 28 06:00:54 2026 GMT
Subject: CN=7614e7a93430fcf4efcfdadcdce7cbb0bf86d294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:24:ff:e7:e5:04:2a:66:73:fe:3a:16:f8:2a:
c5:e5:c7:3d:4a:ac:19:b6:12:b7:b0:d4:c7:d7:be:
73:b0:7e:34:86:9b:9d:58:d6:e0:42:1b:ed:6b:aa:
32:f0:3f:8f:9d:6b:ad:7a:e6:f8:a5:7e:fd:6f:95:
f1:aa:c5:f8:90:d6:ae:05:c6:9c:d9:d4:fd:6c:6b:
49:fa:8d:f4:f7:86:ab:0f:f1:79:ba:2a:c8:b9:12:
ff:33:da:6f:97:8e:ae:6d:61:fa:ef:b4:40:a2:5d:
cb:a2:e0:30:fb:eb:a9:e1:bb:d6:d4:6e:f9:38:62:
cb:6d:29:93:c1:36:07:a3:95:3b:20:06:c4:51:19:
1a:7e:5e:bd:18:e2:aa:c5:e2:6c:41:9d:3c:5e:0b:
1d:78:63:1b:5f:3e:7f:72:34:b4:8e:6f:7c:c7:29:
c7:da:ed:83:5f:46:1a:57:99:39:54:58:b8:7a:4c:
8d:8d:b9:b5:60:0a:c4:13:95:d0:07:4c:27:e6:ce:
13:eb:ec:5b:2c:61:13:21:88:22:c7:35:af:22:06:
48:4f:1b:f1:f2:49:e1:d8:da:c1:20:b2:32:6d:75:
48:74:fd:f4:87:e6:48:2c:cd:10:aa:d2:00:c5:6b:
ef:ea:5d:96:71:7f:37:cd:28:13:d5:de:08:82:62:
46:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:14:E7:A9:34:30:FC:F4:EF:CF:DA:DC:DC:E7:CB:B0:BF:86:D2:94
X509v3 Authority Key Identifier:
keyid:34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:4b:61:7b:a9:bb:d1:d9:7a:83:9e:ef:04:05:1f:95:30:97:
6e:1d:41:ef:5a:7e:e9:1a:3b:a9:6e:32:41:50:0b:c9:39:65:
67:c8:53:8c:ac:f3:86:1e:27:6e:4a:fc:b0:f3:47:5e:a3:b2:
b3:e9:ff:a0:cc:b3:61:87:0a:9f:19:0c:b7:0a:e2:09:61:4b:
d1:7d:ae:c1:e2:e0:1d:fe:46:f8:8f:c0:bc:a1:ef:49:6b:d6:
1f:bb:b8:55:b8:10:7a:41:aa:13:aa:0e:c1:ed:e3:d5:f1:de:
66:9b:4f:3e:33:10:5d:02:4e:3f:81:f2:a4:5d:25:eb:aa:1a:
93:dc:ae:95:3b:4e:ee:3b:e3:ab:27:ce:7a:d0:26:fa:33:d6:
7b:48:59:c3:4b:21:cb:6d:f1:ac:ba:37:32:a6:79:6b:2a:a8:
5a:b5:74:4a:6e:0c:4c:69:48:0c:93:a7:fc:62:81:05:e3:a8:
dd:e7:d0:81:1d:9e:df:70:7e:df:9e:a6:d9:0f:4d:02:64:56:
ff:83:3c:cd:1e:39:41:74:1e:08:db:29:d8:95:65:9d:78:83:
2f:ef:78:f6:a3:1a:ac:04:88:fc:7f:59:8c:3d:3f:c7:96:f3:
41:72:86:bc:76:73:b1:86:9d:08:1c:cf:aa:5a:1e:52:89:e6:
81:76:a3:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iKXkgspXN4r8TGnLEV55ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OTE5MjA0YjdhYzQ3NDI0YmFhYmZiMjkxYmQzZmM4ZmE5
ZTA1ZjYwHhcNMjYwNzI3MDYwMDU0WhcNMjYwNzI4MDYwMDU0WjAzMTEwLwYDVQQD
Eyg3NjE0ZTdhOTM0MzBmY2Y0ZWZjZmRhZGNkY2U3Y2JiMGJmODZkMjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriT/5+UEKmZz/joW+CrF5cc9SqwZ
thK3sNTH175zsH40hpudWNbgQhvta6oy8D+PnWuteub4pX79b5XxqsX4kNauBcac
2dT9bGtJ+o3094arD/F5uirIuRL/M9pvl46ubWH677RAol3LouAw++up4bvW1G75
OGLLbSmTwTYHo5U7IAbEURkafl69GOKqxeJsQZ08XgsdeGMbXz5/cjS0jm98xynH
2u2DX0YaV5k5VFi4ekyNjbm1YArEE5XQB0wn5s4T6+xbLGETIYgixzWvIgZITxvx
8knh2NrBILIybXVIdP30h+ZILM0QqtIAxWvv6l2WcX83zSgT1d4IgmJGjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYU56k0MPz078/a3Nzny7C/htKUMB8GA1UdIwQY
MBaAFDSRkgS3rEdCS6q/spG9P8j6ngX2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hOGVmZGYtNWNlZS00OTRiLWJlNDgt
YTM3MWYyODg5MTM4LzEvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9hOGVmZGYtNWNlZS00OTRiLWJlNDgtYTM3MWYyODg5MTM4
LzEvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0the6m7
0dl6g57vBAUflTCXbh1B71p+6Ro7qW4yQVALyTllZ8hTjKzzhh4nbkr8sPNHXqOy
s+n/oMyzYYcKnxkMtwriCWFL0X2uweLgHf5G+I/AvKHvSWvWH7u4VbgQekGqE6oO
we3j1fHeZptPPjMQXQJOP4HypF0l66oak9yulTtO7jvjqyfOetAm+jPWe0hZw0sh
y23xrLo3MqZ5ayqoWrV0Sm4MTGlIDJOn/GKBBeOo3efQgR2e33B+356m2Q9NAmRW
/4M8zR45QXQeCNsp2JVlnXiDL+949qMarASI/H9ZjD0/x5bzQXKGvHZzsYadCBzP
qloeUonmgXajjA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 10:52:50 2026 by rpki-client