Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
File: NJGSBLesR0JLqr-ykb0_yPqeBfY.mft (raw, json)
Hash identifier: FqTMN1QgHHsZRtUYvwrPNZKns0kpsBMM2HWmvnVu84E=
Subject key identifier: 01:C7:F8:18:D5:B2:FE:9C:99:67:EA:33:F5:C2:40:7C:4F:3E:CF:4E
Authority key identifier: 34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
Certificate issuer: /CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Certificate serial: 019CAB343878BE8FE7C5ED6D8E080CFDB779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
Manifest number: 17DA
Signing time: Sun 01 Mar 2026 21:00:52 +0000
Manifest this update: Sun 01 Mar 2026 21:00:52 +0000
Manifest next update: Mon 02 Mar 2026 21:00:52 +0000
Files and hashes: 1: NJGSBLesR0JLqr-ykb0_yPqeBfY.crl (hash: XU0UA27QNPG/gOuJK+UQ+vvUi4iN2i51/vabykdwFl0=)
2: l04ryjfqbPZeuiZZejzJCWBinEU.roa (hash: qyO0LhlZBEPFvxWtxObTzuofXOhZhOAncGkjMZ9Xnlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:38:78:be:8f:e7:c5:ed:6d:8e:08:0c:fd:b7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Validity
Not Before: Mar 1 21:00:52 2026 GMT
Not After : Mar 2 21:00:52 2026 GMT
Subject: CN=01c7f818d5b2fe9c9967ea33f5c2407c4f3ecf4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5a:29:72:d5:db:28:05:7c:d2:87:af:6c:6a:
f0:2b:d9:55:37:95:42:bd:ff:ca:c9:80:06:b8:00:
54:50:a2:d1:bd:67:1e:0e:fe:00:ef:db:fb:b7:bc:
fa:7c:07:f9:06:37:f3:16:f1:2c:fc:1f:b8:dc:a2:
0f:d6:84:c4:f8:3f:08:97:e7:6d:85:34:50:64:9d:
54:b1:ba:43:62:19:98:c5:49:e0:69:95:8c:c0:4c:
c1:d7:3d:e7:68:64:db:92:9a:22:69:2b:17:2d:11:
bb:cc:08:cc:9c:e4:d4:96:5b:c5:57:4a:fc:43:bb:
d8:12:db:d0:39:ab:c8:c1:14:b6:47:61:cd:c0:65:
86:f6:40:aa:ed:43:ab:12:93:e7:0b:d1:ef:21:47:
05:d1:a8:85:bb:f7:ec:b2:7a:bc:d5:1d:41:8b:a9:
ea:6c:4e:5a:27:63:ea:92:2b:91:2b:b1:0e:90:8e:
5d:11:78:5f:64:76:ce:6c:c6:e3:4f:d4:76:94:cb:
5c:24:01:2b:a4:33:e0:e8:ac:c8:7e:14:66:73:7c:
ff:ed:cc:b0:4b:fa:80:86:0e:97:00:eb:b6:fd:ca:
89:12:1e:8c:27:7b:c0:bc:2f:c7:b2:d8:2a:a5:b2:
57:71:cb:72:fb:ec:1d:3d:ee:9e:79:0c:ed:10:ba:
58:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C7:F8:18:D5:B2:FE:9C:99:67:EA:33:F5:C2:40:7C:4F:3E:CF:4E
X509v3 Authority Key Identifier:
keyid:34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a3:61:7e:b5:87:d6:12:00:38:0f:9a:3f:94:a4:62:31:e4:
e3:9f:35:1c:74:3e:3a:e5:55:d3:6d:bd:98:b4:d5:89:10:cb:
66:d4:d6:bf:56:79:b1:5e:e2:e6:a0:68:4e:3d:6e:1e:5a:5e:
a6:23:f6:b5:54:09:d7:c3:5d:d7:44:c6:c5:0a:95:02:c3:85:
66:26:39:fd:f6:ad:f4:b3:7b:37:8a:17:6d:f2:fb:b1:ae:2b:
3b:b4:0f:df:88:93:f3:30:5d:52:c0:31:45:c7:24:4b:f5:60:
96:bb:07:32:39:42:77:27:33:9b:15:df:17:d0:7a:4c:fe:d3:
b5:7c:5e:5e:ef:13:73:e6:b1:e8:ab:36:bb:11:23:29:bb:53:
0c:1c:06:35:f9:b9:a2:d1:94:39:55:d3:b9:6c:3e:d7:14:24:
a4:43:b8:10:ec:87:8a:96:66:26:71:50:8f:ed:ea:2a:b4:eb:
27:87:eb:34:22:f6:49:40:b8:f9:6f:4d:9f:16:fb:27:43:df:
51:48:69:62:1c:c7:c3:18:d2:5f:b6:d2:e7:2c:fc:23:49:c8:
ba:02:d7:76:ea:f3:aa:a1:3d:49:db:33:f9:4b:7a:f3:e0:32:
61:41:f1:19:c2:3a:e6:68:a3:6e:9c:35:07:ba:5c:74:7a:cd:
fc:ad:6d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:14 2026 by rpki-client