Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
File: NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft (raw, json)
Hash identifier: 19QDYSBoiAK+lHfGnJfyQUmDNkgtyROI3S/GplWihkA=
Subject key identifier: B8:72:B2:60:0C:A8:42:EA:1B:C1:08:F6:32:3E:C4:E8:BC:55:01:AB
Authority key identifier: 34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E
Certificate issuer: /CN=349fd357c3fb8ea30e1207823b646e125318380e
Certificate serial: 019CAC46DF083A6388D45962641C6F4B736F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 02:00:51 +0000
Manifest this update: Mon 02 Mar 2026 02:00:51 +0000
Manifest next update: Tue 03 Mar 2026 02:00:51 +0000
Files and hashes: 1: NIIi-Q8GWOAf6y7xgN6FHyBQvLQ.roa (hash: EgUOgjA6chEBn1yaY61k/TDzCS6CCSsycQ401715+UQ=)
2: NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl (hash: 9QiU64AwhVgdKOaRS2aii9d54+hwKgRPPYzzHCByxwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:df:08:3a:63:88:d4:59:62:64:1c:6f:4b:73:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349fd357c3fb8ea30e1207823b646e125318380e
Validity
Not Before: Mar 2 02:00:51 2026 GMT
Not After : Mar 3 02:00:51 2026 GMT
Subject: CN=b872b2600ca842ea1bc108f6323ec4e8bc5501ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:75:3e:1a:3f:1d:b7:87:e6:3a:4c:56:c9:ea:
50:05:d0:fb:2f:02:84:0b:d3:fa:0b:34:5c:f8:1e:
11:8e:5f:c8:0b:34:d7:49:f8:6e:86:d0:e2:9d:e6:
5a:d4:62:99:ff:74:fc:ac:da:43:05:f8:84:89:4c:
b5:20:f9:6e:e8:e3:9f:8a:e0:f8:23:87:bd:e4:55:
a7:ab:8b:a2:04:bd:88:2b:b0:ca:98:35:b1:67:74:
bb:9e:b1:6b:4e:69:68:84:08:35:ed:0a:73:46:0a:
30:a3:91:2e:f5:d7:aa:21:b8:b6:52:63:2d:65:0e:
f7:e3:14:cf:c2:81:3e:28:06:93:f9:ce:73:55:dd:
bc:e6:32:7b:2d:48:37:27:bf:e0:64:ed:fa:e8:f6:
a8:d7:d8:cf:a3:d1:1f:ca:84:02:de:fc:2a:a3:62:
0f:bc:e0:6c:35:5d:74:4c:f2:3b:41:8f:e9:f5:b8:
e1:f4:4b:a2:e3:02:b9:aa:08:ba:9e:64:e9:51:18:
9e:b6:ce:71:88:4c:98:bc:1d:8d:c1:07:1f:5e:6e:
b2:4e:ff:69:1d:ff:f6:0b:26:43:2e:14:90:26:90:
df:82:73:f7:d4:e6:85:de:32:d0:6d:d9:62:d9:ab:
4e:c7:e2:5c:52:32:8d:67:71:70:35:ea:76:ef:c0:
a7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:72:B2:60:0C:A8:42:EA:1B:C1:08:F6:32:3E:C4:E8:BC:55:01:AB
X509v3 Authority Key Identifier:
keyid:34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:96:33:22:7d:67:a5:95:4e:3e:56:c0:9c:bb:4f:19:a6:6f:
08:10:3a:2e:ba:32:d1:35:97:c9:f7:2a:a2:62:18:1c:3a:dc:
99:05:94:4a:ff:13:b0:4b:f0:df:20:a3:cf:e8:c4:57:da:14:
6d:90:0e:6e:f0:3c:75:95:a0:8d:1f:49:59:a5:ac:a3:6f:6b:
fa:70:95:d5:0c:8e:9a:3f:50:e2:74:9c:8f:ff:4a:b3:9f:ac:
8f:95:08:11:82:c9:fb:96:19:c4:20:dc:84:3d:8a:4b:73:f5:
b2:88:49:94:c2:72:8e:87:e6:ed:aa:d2:20:08:c6:72:b4:63:
b4:a0:c0:ad:9c:24:07:48:be:f6:ee:30:73:4f:71:d7:d7:ff:
ef:25:44:c9:ca:4f:9c:50:34:e7:4a:08:6b:48:15:91:e9:69:
d6:d0:7a:fd:90:4c:e7:d3:49:6a:3b:a4:f3:7d:fa:41:3a:e6:
4c:24:c4:e7:3d:bb:d3:7a:b4:30:7b:3d:28:73:7d:37:1a:62:
73:ed:73:5b:c7:33:30:f9:a6:51:54:bb:b2:4d:ee:a3:5a:b7:
35:0a:17:62:6d:91:8f:82:46:75:53:d7:ff:a9:e8:01:15:f3:
1f:77:58:67:ab:d1:8a:16:0e:6f:d2:c1:f0:4b:a1:b0:2a:64:
93:33:ca:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:00:15 2026 by rpki-client