Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
File: NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft (raw, json)
Hash identifier: +QKAOefz7ZbwXvfjcqTfoazH/a7Xm2FWavC5tdyYjVM=
Subject key identifier: 67:A1:2D:98:C1:E1:7A:3B:DA:E6:90:F1:00:A1:F8:2A:99:84:12:77
Authority key identifier: 34:90:42:4C:68:8F:F5:19:FB:9E:20:4D:8F:15:88:55:34:55:B1:51
Certificate issuer: /CN=3490424c688ff519fb9e204d8f1588553455b151
Certificate serial: 019D37F6F078AC75D5633ACFFC9693B120E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
Manifest number: 077E
Signing time: Sun 29 Mar 2026 05:00:23 +0000
Manifest this update: Sun 29 Mar 2026 05:00:23 +0000
Manifest next update: Mon 30 Mar 2026 05:00:23 +0000
Files and hashes: 1: NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl (hash: feUWTEbx0sgy3kA0O0f+GTfl1j9dCemJNLuwJqhNu10=)
2: qQzg1fbUt0e37N5r1mLAOraSxBY.roa (hash: 8IeAzn3PZFb5uClCqgs5/Ha3rorSlMUXeb0ZYKF1ZXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:f0:78:ac:75:d5:63:3a:cf:fc:96:93:b1:20:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3490424c688ff519fb9e204d8f1588553455b151
Validity
Not Before: Mar 29 05:00:23 2026 GMT
Not After : Mar 30 05:00:23 2026 GMT
Subject: CN=67a12d98c1e17a3bdae690f100a1f82a99841277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3e:e9:1b:16:12:a1:a4:ca:96:86:d1:a7:21:
52:92:f5:46:00:0c:dc:ce:a3:96:d8:80:0b:d1:b7:
02:53:41:e5:69:9b:a4:3f:7d:3b:0d:0a:b1:bf:39:
23:44:2c:d4:7a:24:60:78:7d:66:b5:69:18:a9:8f:
ec:e7:8d:24:dc:1a:ea:06:5b:c1:49:9a:ae:d1:de:
fb:a6:af:a0:6d:bc:c2:2a:e2:9b:ca:54:1b:91:a0:
f4:ed:a6:6c:f5:57:9b:b9:df:4d:9c:93:0c:e6:dc:
5b:48:01:2f:b0:d3:82:6e:00:fb:e0:b8:a6:62:2a:
98:38:44:63:01:e1:7c:ac:b5:98:cd:c9:e6:d4:8e:
d4:9a:66:fa:2d:1f:a4:35:53:a3:d8:19:67:df:fd:
77:f6:6d:a1:11:bc:62:bb:8f:05:e2:6e:bb:5f:bd:
5b:07:98:a0:29:d6:74:a1:d7:77:44:ca:2d:bc:94:
05:2c:9a:b7:c5:78:a8:c1:4b:d1:b8:b8:a7:e8:9f:
1d:31:10:94:99:eb:24:3a:cb:2d:28:0d:70:9e:a1:
54:e6:ce:08:94:19:03:dd:18:01:30:c6:28:ae:d3:
20:13:28:7a:c9:6e:32:0b:9f:06:37:95:5f:5c:87:
ad:a4:81:76:b7:65:5e:0f:1e:db:3b:02:a6:57:2e:
db:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A1:2D:98:C1:E1:7A:3B:DA:E6:90:F1:00:A1:F8:2A:99:84:12:77
X509v3 Authority Key Identifier:
keyid:34:90:42:4C:68:8F:F5:19:FB:9E:20:4D:8F:15:88:55:34:55:B1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:77:bb:3c:38:2f:3a:61:2c:be:a7:ac:66:4d:16:c4:e5:f7:
4f:54:f6:6c:0d:38:33:5a:36:c4:c9:bc:6e:02:94:9c:f6:fe:
34:a7:63:93:57:f3:8e:b3:35:f7:40:4a:df:07:27:7e:81:14:
03:7c:83:4e:5e:6a:9f:8f:85:1b:d2:e7:30:f4:a2:37:a9:9e:
47:38:68:a1:f6:0d:57:68:89:13:ae:2e:0f:43:71:49:cd:aa:
51:34:81:55:b1:e2:b9:ec:2c:ed:84:c9:d2:e3:92:68:cc:1f:
08:6c:d3:0b:53:5f:9c:60:26:cd:1c:16:cb:d1:7b:76:04:c7:
b8:63:35:3f:1e:90:7f:f8:d7:16:50:ee:dc:b0:dc:78:f1:e4:
0b:4e:79:96:25:4f:1f:78:37:57:48:5c:c4:24:8b:22:f9:e0:
11:7c:7b:fa:a4:42:a2:22:6c:72:38:a0:0e:0e:8b:5c:7c:4a:
a4:80:f8:2c:3e:fa:ce:9a:5b:46:c4:41:7e:79:92:15:70:04:
a0:04:f1:8b:21:3d:3c:c8:74:fc:2a:52:ca:db:d1:23:91:3e:
67:31:21:24:09:86:74:0f:e2:30:6a:2c:f0:d5:ac:48:65:50:
fa:79:d0:62:a2:75:44:d0:8d:e4:c6:ea:6e:cd:ed:75:9a:b2:
a0:e9:8d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:32 2026 by rpki-client