Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
File: NJGSBLesR0JLqr-ykb0_yPqeBfY.mft (raw, json)
Hash identifier: XiMF1Y4VabikHIzVhKt5rGYDR8+lBXRt5CmX4VbAzzQ=
Subject key identifier: C7:29:4A:CA:D1:3F:34:BA:21:50:BF:4B:10:AC:04:19:E9:B4:CB:F0
Authority key identifier: 34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
Certificate issuer: /CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Certificate serial: 01A08BD5C694C696FAFD8FA2D1CAE0024FB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
Manifest number: 19DC
Signing time: Thu 10 Sep 2026 15:00:38 +0000
Manifest this update: Thu 10 Sep 2026 15:00:38 +0000
Manifest next update: Fri 11 Sep 2026 15:00:38 +0000
Files and hashes: 1: NJGSBLesR0JLqr-ykb0_yPqeBfY.crl (hash: OHj3tiaW+DGxjqKHGbmz03aG9aqexhm8bQ0WPDPNqqo=)
2: l04ryjfqbPZeuiZZejzJCWBinEU.roa (hash: qyO0LhlZBEPFvxWtxObTzuofXOhZhOAncGkjMZ9Xnlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:c6:94:c6:96:fa:fd:8f:a2:d1:ca:e0:02:4f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Validity
Not Before: Sep 10 15:00:38 2026 GMT
Not After : Sep 11 15:00:38 2026 GMT
Subject: CN=c7294acad13f34ba2150bf4b10ac0419e9b4cbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ce:bd:fa:0f:92:ec:90:33:28:b1:4c:22:56:
69:e4:ef:27:c2:6e:6b:98:02:7a:57:38:15:91:75:
bd:5a:43:8c:1c:f7:44:79:e3:8a:8d:35:ad:27:7c:
16:0a:73:6f:6c:57:cf:a6:4e:70:3e:ed:01:a9:74:
8e:bf:fc:b3:e3:a5:7f:f4:64:14:da:63:3c:f8:c1:
58:09:34:e9:1d:22:2b:b0:11:99:f4:af:1e:76:35:
84:4e:09:5d:83:85:9e:af:43:0d:30:c8:8e:06:38:
c4:5e:d3:93:ef:14:8c:f3:63:fd:ee:89:fe:d0:59:
06:c7:25:5a:fc:83:30:eb:d4:18:18:d9:73:3f:39:
55:b9:11:ef:f3:38:01:56:d9:56:9c:d1:2a:62:3b:
63:35:a4:49:50:2a:d4:1f:10:96:59:35:a1:d5:23:
69:3d:c9:ba:5c:e1:d4:b1:3f:3b:e4:03:d9:f2:c7:
e8:e6:5e:b9:3c:48:62:06:a4:d1:50:b5:33:89:3f:
7d:8a:01:7a:10:c3:67:fa:fb:14:20:be:75:a4:2d:
58:0c:b5:da:62:cb:dd:19:e4:44:21:49:34:37:24:
51:2a:bb:e0:b0:20:de:2f:76:d4:99:0f:ed:7e:b2:
1c:0e:87:50:f1:e2:b6:b7:75:a0:34:05:ea:0f:9d:
0d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:29:4A:CA:D1:3F:34:BA:21:50:BF:4B:10:AC:04:19:E9:B4:CB:F0
X509v3 Authority Key Identifier:
keyid:34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:19:6f:58:b1:53:df:4d:63:11:45:81:a0:1d:0d:e2:9c:1a:
89:c3:d8:a2:43:d4:06:a3:56:13:26:ca:78:21:de:1e:5c:ea:
28:f8:27:ef:9b:ba:85:ae:b7:7d:ca:23:93:19:c1:f4:3d:a2:
81:6b:c9:72:04:b3:76:c9:f2:0e:85:0e:66:52:22:b1:2e:e4:
54:e8:d6:2a:eb:6c:cc:46:d5:77:9d:66:68:78:51:29:57:0e:
7e:fe:a8:7b:86:a8:ae:4a:bc:93:00:57:33:e9:15:62:b8:bb:
45:4c:c8:81:1e:98:e5:d9:50:72:6a:9a:a6:bc:ea:60:85:a7:
fc:c8:93:f0:26:5c:87:f8:5d:9b:57:93:7b:a6:ac:a4:b0:a0:
2e:eb:90:d4:62:51:c1:d9:cb:6f:53:fe:5d:16:07:a1:65:d7:
cc:c1:84:5a:2f:27:3c:ba:ea:f5:60:ff:37:13:8c:fb:ed:03:
db:6e:dc:3b:2d:ce:b7:17:d9:18:1a:b1:59:1e:95:70:f8:dd:
8e:92:6d:fc:18:93:64:82:88:63:f6:4c:44:cd:66:c1:19:b1:
e6:c9:2b:c2:01:8c:17:80:14:b1:1e:21:bb:a4:0a:92:79:cb:
a4:5b:0b:45:5b:79:e8:1b:d2:6c:26:69:f4:8d:b2:61:49:ea:
f6:d9:dc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:34:17 2026 by rpki-client