Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
File: njApS35GRarttUZy1IBlsbHOvGI.mft (raw, json)
Hash identifier: jvz/S0BRu8fZwQdbpsqxhwMdQzQXjHpLFrqHkPZJkO4=
Subject key identifier: D9:33:84:C4:F1:28:CF:55:81:83:23:B1:38:27:2D:20:79:A8:3C:76
Authority key identifier: 9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
Certificate issuer: /CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Certificate serial: 019D389C57A12A576BA974BD13C3EC452317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
Manifest number: 14AF
Signing time: Sun 29 Mar 2026 08:01:03 +0000
Manifest this update: Sun 29 Mar 2026 08:01:03 +0000
Manifest next update: Mon 30 Mar 2026 08:01:03 +0000
Files and hashes: 1: 2V-Naz0jnwf8V8dIgYhxF_-rK-o.roa (hash: XdSVxHJfUXdEh13NSWMZmFTpZfOjmyPDnSsH+zDSqy0=)
2: njApS35GRarttUZy1IBlsbHOvGI.crl (hash: nyTFTBRq73n90cCvKUt8AgBwMPJjdwMl9L+BsiwuRb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:57:a1:2a:57:6b:a9:74:bd:13:c3:ec:45:23:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Validity
Not Before: Mar 29 08:01:03 2026 GMT
Not After : Mar 30 08:01:03 2026 GMT
Subject: CN=d93384c4f128cf55818323b138272d2079a83c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:69:3b:3f:0d:59:66:1d:f2:87:e7:fc:e9:e8:
f4:72:62:16:cf:89:f1:db:72:92:f6:ad:e3:00:01:
93:49:4f:7e:36:fe:b5:6b:fc:ab:65:d3:09:ae:23:
38:bd:53:71:5c:64:7e:17:c6:58:e6:7e:6b:db:3e:
66:77:80:d4:b6:8e:d1:24:51:21:da:1b:a6:25:2f:
5c:24:49:d3:98:de:56:27:a3:3c:b4:3e:70:c6:8f:
fe:50:5f:24:46:79:18:c5:45:e6:55:4e:c8:d6:1e:
a5:b4:eb:12:c0:fd:eb:62:d3:4d:59:f1:67:6a:f6:
7c:3d:e6:10:5c:25:54:36:a7:3f:d3:29:5e:70:d2:
eb:3d:8f:79:89:1a:4c:05:f4:ba:38:d2:2c:cd:2e:
c0:d0:2a:08:69:78:5e:3a:0c:9b:bf:8e:fa:96:2a:
ea:f1:3b:a8:04:17:34:3a:91:c8:39:53:3f:d4:c2:
f3:99:a9:0b:5b:af:5c:12:1b:17:f1:cc:d3:cd:c1:
d7:cf:67:87:7d:4e:42:09:2b:b4:76:e7:84:02:0f:
ac:08:f8:fc:19:a3:c8:28:1b:1a:bc:2d:f0:31:53:
dd:26:a2:f1:ee:7a:88:55:2f:4b:54:99:ea:4c:c6:
71:df:78:45:45:e4:d1:58:14:9a:f3:cf:e9:9b:44:
b0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:33:84:C4:F1:28:CF:55:81:83:23:B1:38:27:2D:20:79:A8:3C:76
X509v3 Authority Key Identifier:
keyid:9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:85:92:fb:55:78:aa:41:bb:bb:e5:08:15:1e:59:83:fa:32:
d8:48:ea:61:a4:8e:e5:d2:34:0b:38:3b:27:20:24:17:14:21:
7f:c2:91:0f:e7:ac:50:b8:a9:c1:18:b3:c6:19:e7:69:ad:c0:
44:c5:3b:af:bc:9c:29:3b:1c:68:f7:7c:a8:44:7b:bb:1d:14:
d0:d8:1b:d6:35:82:ec:9a:50:5b:fb:dc:be:66:6d:41:ca:72:
96:08:c3:ec:35:d6:ed:03:75:20:04:8d:a5:14:67:83:b8:a1:
56:7d:08:67:eb:31:80:10:dd:4e:3a:9f:a9:93:77:22:20:67:
a4:6c:d2:04:f2:b5:86:df:3f:0c:27:d8:c1:17:28:d5:cd:8e:
45:43:93:e5:d9:1a:f5:43:6d:65:09:ce:1b:40:0e:77:15:83:
fa:9f:43:e7:45:7c:77:14:af:96:31:fa:9e:a1:34:d8:f9:fa:
f2:f1:9d:14:e2:ae:d0:a7:c6:ee:60:16:20:6f:0b:43:36:e2:
ba:fc:7b:93:eb:47:74:b1:c6:4e:83:1e:fa:d4:26:76:b1:7f:
d0:c9:7f:e1:fb:7b:2d:a7:72:37:c6:65:0e:94:48:1b:e7:43:
be:59:25:51:67:7c:76:86:af:c1:00:fb:03:e2:a8:93:29:94:
c5:85:e8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:49 2026 by rpki-client