Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
File: NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft (raw, json)
Hash identifier: yfbotwPFgOS4Re34f3BhTEIU35duZG5Q+aWKlRnCw4I=
Subject key identifier: 78:31:05:75:2E:CD:A9:B0:CE:24:B8:25:61:97:5D:65:23:14:96:95
Authority key identifier: 34:90:42:4C:68:8F:F5:19:FB:9E:20:4D:8F:15:88:55:34:55:B1:51
Certificate issuer: /CN=3490424c688ff519fb9e204d8f1588553455b151
Certificate serial: 01A08B9F7CFF752BF670FA6F660962E97693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
Manifest number: 0937
Signing time: Thu 10 Sep 2026 14:01:20 +0000
Manifest this update: Thu 10 Sep 2026 14:01:20 +0000
Manifest next update: Fri 11 Sep 2026 14:01:20 +0000
Files and hashes: 1: NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl (hash: z9gCGqf3ak4pHWtDBqEG2eEiHTeQ14xIsRhznUUySHM=)
2: qQzg1fbUt0e37N5r1mLAOraSxBY.roa (hash: 8IeAzn3PZFb5uClCqgs5/Ha3rorSlMUXeb0ZYKF1ZXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:7c:ff:75:2b:f6:70:fa:6f:66:09:62:e9:76:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3490424c688ff519fb9e204d8f1588553455b151
Validity
Not Before: Sep 10 14:01:20 2026 GMT
Not After : Sep 11 14:01:20 2026 GMT
Subject: CN=783105752ecda9b0ce24b82561975d6523149695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:51:7a:49:37:9e:ee:38:1f:48:2d:16:76:db:
28:9e:5b:f7:a8:be:b9:93:89:fa:d6:59:6b:16:08:
54:a1:e7:e8:65:34:cf:e2:95:a1:c9:a3:e8:a2:8c:
be:83:99:ec:3f:5e:59:1a:a1:94:90:73:7b:4d:fe:
b8:7c:63:8d:8a:56:e2:d3:33:45:e9:c1:37:cf:0e:
88:2e:54:22:cc:1e:be:34:3e:0c:8c:cf:c2:2e:25:
4f:e1:b9:e2:f6:1a:81:76:15:a0:f9:66:bd:2b:2c:
2d:f5:95:0e:80:ec:9f:e1:d6:ad:15:44:07:06:95:
73:db:2a:0e:44:82:51:3b:66:68:3c:5a:15:45:3e:
e4:94:ce:a4:10:5c:9a:53:25:8b:17:df:09:e4:cb:
1f:1c:32:74:72:d6:72:83:d7:22:2d:2b:c5:8a:8a:
55:68:30:98:e3:ae:9a:bc:46:9f:d6:bc:9b:64:36:
9a:24:84:70:e5:09:61:93:24:2a:a6:16:e1:54:94:
54:59:fa:5f:28:e7:5c:69:cb:a0:39:21:6f:2d:da:
2a:98:a6:a5:f8:bc:41:e5:1d:92:e0:56:b5:3b:0d:
ac:94:dd:34:79:1d:74:d0:e2:b0:aa:f0:d6:cb:3a:
c7:2b:e6:ea:49:46:a9:f5:1b:5b:14:89:de:0a:cd:
ee:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:31:05:75:2E:CD:A9:B0:CE:24:B8:25:61:97:5D:65:23:14:96:95
X509v3 Authority Key Identifier:
keyid:34:90:42:4C:68:8F:F5:19:FB:9E:20:4D:8F:15:88:55:34:55:B1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:7e:31:e3:17:19:ca:58:8c:6f:b8:c7:aa:6c:1b:a0:14:f2:
29:6d:3f:58:0e:a9:40:ce:9e:34:41:68:04:59:fe:02:cc:53:
11:83:27:69:85:c9:02:b2:87:e3:6a:db:b1:5f:b7:32:84:96:
ed:30:5e:ea:45:e4:ca:e8:ea:2d:e5:2f:0a:3a:fc:30:d8:7b:
c1:a9:1e:b5:2e:77:51:98:d5:74:ae:de:f5:63:b8:f1:18:71:
d7:78:3d:ce:f4:d3:75:08:8c:76:5d:9b:44:73:e8:a1:13:31:
b5:74:b2:3b:a7:f4:dc:1a:04:8e:d1:7f:29:38:89:10:bd:fb:
dd:a7:2b:d6:e9:e8:69:7c:e4:eb:0e:3d:6c:f2:2a:c6:9e:f9:
71:92:b2:8e:68:51:62:b6:d7:52:0d:9f:a3:04:04:80:c8:c3:
0a:cc:1e:c7:ec:33:ca:93:84:09:c0:b1:df:32:a3:46:29:57:
83:51:dc:1d:c9:55:a2:0a:5c:fd:de:27:7c:35:38:8e:8d:df:
20:cc:c1:4e:91:86:4e:6b:2e:08:2e:03:83:13:cb:9b:47:4f:
bc:cd:27:9e:91:10:b1:9c:62:ce:bf:5d:54:8e:70:19:b8:70:
84:65:d3:ac:e8:51:8f:07:6f:eb:ef:88:b8:69:2f:04:b4:a4:
90:99:aa:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:55:11 2026 by rpki-client