Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
File: NJGSBLesR0JLqr-ykb0_yPqeBfY.mft (raw, json)
Hash identifier: SpK0vG5QgMDtHL8zwB8oGtibouch4GM/TCPAnCunQLc=
Subject key identifier: 87:B9:A1:99:36:58:90:8F:DD:29:FA:F4:6E:03:2E:19:A0:D1:A0:48
Authority key identifier: 34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
Certificate issuer: /CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Certificate serial: 01A0C3D70D5438AAB23D1E479CAC31D03483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
Manifest number: 19F9
Signing time: Mon 21 Sep 2026 12:00:45 +0000
Manifest this update: Mon 21 Sep 2026 12:00:45 +0000
Manifest next update: Tue 22 Sep 2026 12:00:45 +0000
Files and hashes: 1: NJGSBLesR0JLqr-ykb0_yPqeBfY.crl (hash: HTG3OMne9caHt4y2fgmCujRyCIoWXL0996bxYggEMcQ=)
2: l04ryjfqbPZeuiZZejzJCWBinEU.roa (hash: qyO0LhlZBEPFvxWtxObTzuofXOhZhOAncGkjMZ9Xnlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d7:0d:54:38:aa:b2:3d:1e:47:9c:ac:31:d0:34:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Validity
Not Before: Sep 21 12:00:45 2026 GMT
Not After : Sep 22 12:00:45 2026 GMT
Subject: CN=87b9a1993658908fdd29faf46e032e19a0d1a048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:68:68:3c:63:e3:a1:3c:a6:cb:ce:f3:a6:ab:
c2:a9:63:dd:b9:b5:7f:bb:47:b8:11:04:7f:7c:9a:
c9:0c:f2:ec:f9:94:e4:ee:2e:31:bb:78:9d:7b:48:
04:b9:6b:45:e9:7f:ab:45:49:4a:ff:5d:17:d7:37:
14:db:ee:84:47:d0:78:b9:d8:96:a8:e4:af:3e:e6:
3b:27:4f:73:8b:ff:b7:e6:19:b5:ae:82:73:8a:cf:
e4:6f:79:a9:42:fb:b4:83:64:a2:db:97:4f:d5:fc:
19:d6:42:71:99:06:70:b7:ef:b7:6e:ec:b6:37:56:
18:14:d7:18:c4:5c:5b:fe:d7:1d:4d:5d:f1:9a:63:
9e:27:81:2b:26:e0:ad:ca:f1:84:ba:b6:58:a2:73:
8d:4a:6d:26:aa:9a:90:a7:ce:3d:8a:69:7a:98:8e:
f5:31:cf:8c:d9:7b:f4:d5:ad:01:1e:ad:66:33:ad:
59:48:e9:26:cc:39:3e:52:38:1b:41:26:2a:33:35:
32:ea:00:b7:1a:d8:a1:05:9f:1a:4d:b1:18:ea:c8:
f3:de:7a:81:89:88:d1:cf:68:dd:99:24:07:c7:cb:
7b:38:d0:f9:af:30:5f:e6:b8:e2:5d:43:14:c7:c0:
b1:63:e6:63:d7:b5:38:a7:bc:97:7c:02:1d:3b:17:
02:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B9:A1:99:36:58:90:8F:DD:29:FA:F4:6E:03:2E:19:A0:D1:A0:48
X509v3 Authority Key Identifier:
keyid:34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:7b:62:fa:20:8b:a2:11:14:f9:13:48:91:6a:29:91:d5:78:
97:35:22:2f:e7:9d:e1:cb:72:a3:49:d9:bd:82:89:1b:b7:69:
84:9f:3d:7c:62:85:fb:13:77:e6:7b:c4:06:0a:f9:32:57:3f:
48:93:d4:a9:f1:c3:7a:d3:8a:e4:57:44:c7:10:59:01:b7:5b:
90:b5:47:13:8b:db:d3:ff:ef:30:95:81:43:c3:87:e1:94:9f:
cd:91:29:ff:ce:0d:7b:63:28:25:a2:b7:08:eb:a3:42:de:85:
ca:de:aa:c7:a7:ab:33:fe:d4:fa:39:e4:e1:f8:29:0b:cc:c5:
f1:89:b6:be:cd:e1:e0:78:9c:da:57:dc:20:39:20:1b:13:9d:
97:a2:d1:b2:1d:b9:1c:70:12:46:9b:d9:85:7e:3d:52:99:95:
1e:74:92:41:fa:1c:f6:ba:0f:9f:e0:de:d9:83:d6:96:2d:04:
96:8e:e9:2a:5a:cf:30:29:27:4e:0c:07:6d:b2:aa:fc:bf:a5:
23:5f:0c:19:f4:3d:2f:20:f5:d2:6a:30:70:33:38:84:5a:2b:
c7:3d:2a:59:95:db:d1:0c:59:8a:09:68:e9:b5:16:c9:81:6c:
88:46:b8:19:1c:e4:4c:bb:9a:62:83:71:1b:3c:51:af:85:3e:
e2:4f:77:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:31:03 2026 by rpki-client