Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
File: njApS35GRarttUZy1IBlsbHOvGI.mft (raw, json)
Hash identifier: +Y7zFdzCHmCkRfZjYJj5skZDx7GZj4gMFYpLYIpy6uU=
Subject key identifier: 70:A0:D5:5F:80:41:8C:95:44:16:BF:6F:CE:30:2E:C7:38:7D:03:01
Authority key identifier: 9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
Certificate issuer: /CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Certificate serial: 01A194D6B6E87EDDB352ADE30B338B4AD93B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
Manifest number: 16F1
Signing time: Sun 01 Nov 2026 02:01:01 +0000
Manifest this update: Sun 01 Nov 2026 02:01:01 +0000
Manifest next update: Mon 02 Nov 2026 02:01:01 +0000
Files and hashes: 1: 2V-Naz0jnwf8V8dIgYhxF_-rK-o.roa (hash: XdSVxHJfUXdEh13NSWMZmFTpZfOjmyPDnSsH+zDSqy0=)
2: njApS35GRarttUZy1IBlsbHOvGI.crl (hash: NR0CKZ5BcSj1gLQZvlgscHz9H9VQJbHKHl70NX9vj7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:94:d6:b6:e8:7e:dd:b3:52:ad:e3:0b:33:8b:4a:d9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Validity
Not Before: Nov 1 02:01:01 2026 GMT
Not After : Nov 2 02:01:01 2026 GMT
Subject: CN=70a0d55f80418c954416bf6fce302ec7387d0301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9d:e1:6a:84:6b:58:e2:bb:c0:0b:1b:fb:90:
79:aa:16:fe:66:c7:76:33:e4:94:71:ad:ec:4a:70:
06:07:45:0d:44:92:c6:f2:25:ae:89:82:7c:35:91:
cf:37:df:8a:6a:f0:77:55:b7:b2:6f:7b:16:e4:fe:
e3:4f:f2:a1:10:cc:86:d2:1a:33:49:9b:7f:90:d2:
d7:ea:5d:a7:f5:f0:b8:8d:89:b3:15:72:ff:62:5c:
49:eb:63:3c:6b:96:04:27:b3:c9:c7:ce:20:00:0c:
24:50:8b:6e:84:42:d7:e3:af:7b:02:46:ec:37:f9:
c6:58:b4:e1:7c:ba:ce:99:46:ba:2c:73:2e:88:0c:
10:12:7e:6f:f3:bc:ed:ba:75:ab:e8:27:d1:2d:55:
ad:81:04:87:b2:25:73:80:d7:8d:a6:d8:b0:b1:46:
c1:2e:01:71:e9:8a:bf:0c:a6:00:4d:cb:cc:bd:20:
d8:5b:76:72:e1:9c:39:be:9c:17:b4:ba:93:37:5c:
46:23:b5:44:fb:8d:43:66:f1:ed:53:d0:55:dd:4e:
51:df:96:7d:fd:3c:9c:c5:21:78:14:b6:2c:1a:ef:
19:1a:c4:fe:33:de:7b:b8:32:fd:de:c1:f4:a7:60:
9d:9f:ff:2d:59:f4:bc:c9:c3:73:51:08:01:6a:cc:
a2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A0:D5:5F:80:41:8C:95:44:16:BF:6F:CE:30:2E:C7:38:7D:03:01
X509v3 Authority Key Identifier:
keyid:9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f8:59:21:4b:e1:ca:dd:05:a3:08:5c:12:6e:dc:44:0e:ba:
f4:94:db:ad:83:fb:49:a4:ae:d1:e1:1e:61:ea:ef:12:a8:3a:
47:32:f8:69:ae:9b:9c:b1:1b:45:c2:bf:c1:c5:dd:fe:db:68:
88:b6:56:dd:0e:c3:ab:84:a9:58:49:a4:e2:64:a6:eb:ca:78:
9f:19:8d:b9:eb:3e:49:40:76:5d:2c:fe:b8:e1:38:3c:f4:58:
fc:29:30:cd:90:be:01:0b:16:6a:5f:c7:eb:41:0f:4a:4e:13:
da:c3:20:bd:b9:de:ad:b9:e7:33:c6:4e:de:10:fd:56:32:da:
8c:55:bc:b4:23:28:ca:fd:b6:14:5f:7d:68:2b:1e:4e:fe:b5:
35:69:57:1f:69:e4:2d:21:94:63:e6:6b:64:1d:96:5c:98:89:
1a:fd:e9:d3:b7:b3:18:10:8b:63:1a:b5:c3:45:1a:0a:ef:6c:
49:42:45:ca:9b:6b:26:dc:17:53:2e:be:2e:ea:87:a9:09:75:
24:a7:6d:74:8a:fd:72:71:90:ea:1c:e0:d0:f1:43:8d:f5:c1:
39:7e:b0:66:11:d9:26:2c:3a:c2:46:90:fc:39:8c:b9:e0:5c:
14:23:0b:50:23:fe:23:4c:58:45:1a:87:61:bd:9b:3b:fc:79:
d7:1b:45:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:35:39 2026 by rpki-client