Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
File: NJGSBLesR0JLqr-ykb0_yPqeBfY.mft (raw, json)
Hash identifier: 4/+nZQ4zblYgRVay8Jgsu84Jbc8AMCb+U9xncEO+kg4=
Subject key identifier: 31:D9:FD:97:63:FA:05:D9:F8:7C:CB:DF:53:68:6A:5E:47:30:79:6F
Authority key identifier: 34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
Certificate issuer: /CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Certificate serial: 019D3A1C59939035C7DFCD95A1339EF35B96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
Manifest number: 1824
Signing time: Sun 29 Mar 2026 15:00:29 +0000
Manifest this update: Sun 29 Mar 2026 15:00:29 +0000
Manifest next update: Mon 30 Mar 2026 15:00:29 +0000
Files and hashes: 1: NJGSBLesR0JLqr-ykb0_yPqeBfY.crl (hash: ZFXTHE04fJrYxQKP2WRXJdW4Z2Xe3U7Pzr1NRz5syt8=)
2: l04ryjfqbPZeuiZZejzJCWBinEU.roa (hash: qyO0LhlZBEPFvxWtxObTzuofXOhZhOAncGkjMZ9Xnlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:59:93:90:35:c7:df:cd:95:a1:33:9e:f3:5b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Validity
Not Before: Mar 29 15:00:29 2026 GMT
Not After : Mar 30 15:00:29 2026 GMT
Subject: CN=31d9fd9763fa05d9f87ccbdf53686a5e4730796f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d3:d1:0d:bf:87:0b:cd:37:2d:12:5c:a2:1b:
be:7a:5e:79:80:c8:2e:ab:62:d1:3a:93:5a:76:f5:
a8:d2:ad:19:ef:73:12:0b:44:10:33:12:ab:5a:04:
b6:4b:d4:31:28:16:97:02:c1:d1:a5:8c:3c:a4:9e:
14:4b:59:f2:2b:91:3a:ad:b1:8b:35:75:02:c9:d5:
e2:19:ee:f5:19:31:8e:39:8f:3a:12:e5:b5:79:93:
44:91:68:b8:f7:45:ae:f5:71:38:5f:e4:a8:45:50:
4a:fb:25:ff:11:fd:c2:41:0b:5d:ad:aa:29:0e:f4:
6e:6d:a3:b9:97:5b:c8:73:3c:cf:c2:cb:64:46:7e:
da:bb:1d:4a:ca:79:17:e5:5d:e1:ed:26:6e:7d:c9:
26:51:9a:28:54:c8:c7:64:b2:ba:bc:66:5d:13:94:
27:a5:49:2c:d7:37:a6:55:16:c9:61:0a:0a:7c:48:
2a:5c:a5:02:66:d2:73:68:55:bc:ae:46:c5:7e:57:
cb:a4:a5:09:ce:32:18:6f:b7:a3:02:ac:b5:77:b3:
b9:f2:b2:f3:2c:9e:cc:15:e7:d5:30:fd:d9:09:a3:
b7:19:70:77:13:d4:0b:5c:6c:18:2f:bd:9f:3f:93:
22:80:f6:4c:de:d2:8f:c2:3e:ec:3b:72:7e:49:97:
52:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D9:FD:97:63:FA:05:D9:F8:7C:CB:DF:53:68:6A:5E:47:30:79:6F
X509v3 Authority Key Identifier:
keyid:34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:76:fa:d2:57:65:3a:d1:dd:a0:bb:5d:48:e0:0e:98:1b:96:
f0:c4:34:76:2b:9b:b5:d0:53:97:43:e9:85:ec:52:69:f3:a3:
78:ca:a9:98:62:c8:df:10:22:19:ed:b6:7d:a7:88:b0:3a:b3:
fa:d5:c6:33:ea:01:c1:dd:78:d7:89:23:eb:0f:b2:34:9e:5d:
02:00:b3:72:3a:44:ef:54:0a:cc:ca:24:50:59:61:95:fe:61:
d4:6b:e7:be:d6:1f:92:9c:5b:71:39:8a:20:2d:14:11:b4:be:
b1:09:a4:d9:71:4b:c4:9e:16:b3:8e:00:fe:c6:96:71:7a:50:
88:1c:a6:ed:bb:09:eb:06:ed:27:9a:8b:8a:85:82:96:c6:33:
88:e7:87:ab:19:3d:20:e2:28:2e:87:a7:90:17:e8:f1:99:18:
e6:39:7f:42:6c:85:1d:a1:01:cd:73:bc:5b:56:c2:d9:ab:6d:
02:ef:87:06:cd:85:33:b1:b3:ba:16:69:2f:9e:cb:ff:f8:f7:
80:b0:1b:53:74:af:4b:f3:5e:fb:7c:53:c9:fb:45:c7:6e:f0:
67:4f:f3:49:98:a2:40:d2:31:78:6c:38:dd:5b:55:85:9e:5d:
ba:2c:37:91:ad:8f:7e:16:ce:aa:90:de:89:21:d1:81:3d:8d:
4a:12:08:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:32:16 2026 by rpki-client