Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
File: njApS35GRarttUZy1IBlsbHOvGI.mft (raw, json)
Hash identifier: RCLbF7RAgLlHeovqqAy4scXiVn0yCTKCl2xx326NB/o=
Subject key identifier: F8:F4:D6:7A:79:CE:7E:6C:53:1F:C9:3A:A7:1E:30:20:49:20:E8:09
Authority key identifier: 9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
Certificate issuer: /CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Certificate serial: 019CAD9072C0B0973A34021A8EBDB423F1CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
Manifest number: 1467
Signing time: Mon 02 Mar 2026 08:00:50 +0000
Manifest this update: Mon 02 Mar 2026 08:00:50 +0000
Manifest next update: Tue 03 Mar 2026 08:00:50 +0000
Files and hashes: 1: 2V-Naz0jnwf8V8dIgYhxF_-rK-o.roa (hash: XdSVxHJfUXdEh13NSWMZmFTpZfOjmyPDnSsH+zDSqy0=)
2: njApS35GRarttUZy1IBlsbHOvGI.crl (hash: 8mLOADz1CdtS4vadp6MKhUdnD8MDv6TSgAXm9x4jKDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:72:c0:b0:97:3a:34:02:1a:8e:bd:b4:23:f1:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Validity
Not Before: Mar 2 08:00:50 2026 GMT
Not After : Mar 3 08:00:50 2026 GMT
Subject: CN=f8f4d67a79ce7e6c531fc93aa71e30204920e809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ca:c0:a6:05:be:d1:e6:c9:4b:9b:03:fa:51:
5c:eb:2a:6e:5b:e3:6b:a5:af:32:f3:72:78:28:e0:
c3:c0:85:7b:e8:e8:3b:f7:0c:aa:6e:01:55:38:39:
ce:3d:17:ab:27:4c:51:ae:75:e9:a9:8b:51:65:e0:
a6:6d:b3:75:ef:a4:c2:c7:d4:e4:f8:a1:3b:37:c4:
4a:43:33:e0:2e:14:4d:2a:57:b9:03:ae:2b:7f:40:
bc:46:ac:0e:e5:ca:49:35:cc:dd:03:60:29:11:eb:
52:cc:c5:ff:4c:91:49:a3:73:85:8f:19:ee:69:86:
a3:e0:bf:1f:4f:0d:1e:f7:8f:db:48:bb:fb:b6:c0:
42:e3:b8:c1:6e:96:09:26:e4:c0:38:9a:6c:4a:65:
08:6f:c7:56:9e:ad:c4:ce:8d:83:b0:3f:0b:75:8b:
35:04:4b:c7:d4:e0:0d:77:c7:e4:c1:3e:10:24:af:
d4:32:47:d9:dc:7f:8c:19:4e:a4:d7:be:cd:ab:a1:
e7:5d:aa:d1:b7:46:27:a1:25:83:8f:4b:fa:27:bd:
0a:62:9e:51:90:7e:22:53:50:fe:17:fa:c7:16:26:
71:e8:d6:5b:13:32:a1:63:86:56:b4:9f:ce:ef:27:
a1:50:a6:32:02:76:ee:30:d8:c3:72:80:97:f4:0a:
d8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F4:D6:7A:79:CE:7E:6C:53:1F:C9:3A:A7:1E:30:20:49:20:E8:09
X509v3 Authority Key Identifier:
keyid:9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:34:06:03:d5:83:3a:0d:cd:6f:42:f9:dc:55:d3:76:39:b5:
d8:48:b1:fa:8c:27:62:2e:99:49:24:80:0c:20:20:1c:06:bd:
4f:52:82:56:64:48:38:62:17:f6:9b:0a:4d:a9:2e:74:41:60:
f9:1f:38:e3:84:32:0c:8d:27:ee:42:35:4f:65:84:49:70:15:
ad:6f:a2:06:71:bc:27:23:5b:cd:35:67:80:b5:0c:75:76:d9:
44:6e:12:a4:4b:66:7a:96:47:b4:9c:c7:b0:65:97:96:89:56:
c3:1b:ae:75:2c:58:c6:95:e3:fd:dc:b7:dd:a6:ca:81:eb:71:
76:99:96:98:d9:91:ea:9e:34:8e:de:3f:fd:bc:f7:a1:ff:40:
3f:6e:6f:4f:fc:2c:23:c2:c3:d8:06:3a:b6:6c:94:c1:78:e9:
f6:85:7c:a0:d8:27:84:75:ad:9a:9d:90:e3:db:54:cb:ec:9a:
2b:56:3c:a3:fd:c4:f7:a7:90:b3:96:f3:dd:66:0d:94:51:43:
ec:0e:93:44:48:1a:57:e1:62:c1:87:88:e5:4e:8d:55:e8:e1:
7a:de:b1:7f:46:66:ec:3a:cd:ad:44:91:7e:da:2b:fa:5a:d0:
8c:5d:b2:5e:51:69:e0:df:58:73:0c:3e:f8:7f:79:b9:1c:d7:
5a:66:72:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytkHLAsJc6NAIajr20I/HNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMzAyOTRiN2U0NjQ1YWFlZGI1NDY3MmQ0ODA2NWIxYjFj
ZWJjNjIwHhcNMjYwMzAyMDgwMDUwWhcNMjYwMzAzMDgwMDUwWjAzMTEwLwYDVQQD
EyhmOGY0ZDY3YTc5Y2U3ZTZjNTMxZmM5M2FhNzFlMzAyMDQ5MjBlODA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMrApgW+0ebJS5sD+lFc6ypuW+Nr
pa8y83J4KODDwIV76Og79wyqbgFVODnOPRerJ0xRrnXpqYtRZeCmbbN176TCx9Tk
+KE7N8RKQzPgLhRNKle5A64rf0C8RqwO5cpJNczdA2ApEetSzMX/TJFJo3OFjxnu
aYaj4L8fTw0e94/bSLv7tsBC47jBbpYJJuTAOJpsSmUIb8dWnq3Ezo2DsD8LdYs1
BEvH1OANd8fkwT4QJK/UMkfZ3H+MGU6k177Nq6HnXarRt0YnoSWDj0v6J70KYp5R
kH4iU1D+F/rHFiZx6NZbEzKhY4ZWtJ/O7yehUKYyAnbuMNjDcoCX9ArYfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPj01np5zn5sUx/JOqceMCBJIOgJMB8GA1UdIwQY
MBaAFJ4wKUt+RkWq7bVGctSAZbGxzrxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmpBcFMzNUdSYXJ0dFVaeTFJQmxzYkhPdkdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80NGU4OTMtOTI0Ny00NTJlLTlmNjct
NjkxMzM4N2I4MDgzLzEvbmpBcFMzNUdSYXJ0dFVaeTFJQmxzYkhPdkdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC80NGU4OTMtOTI0Ny00NTJlLTlmNjctNjkxMzM4N2I4MDgz
LzEvbmpBcFMzNUdSYXJ0dFVaeTFJQmxzYkhPdkdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApDQGA9WD
Og3Nb0L53FXTdjm12Eix+ownYi6ZSSSADCAgHAa9T1KCVmRIOGIX9psKTakudEFg
+R8444QyDI0n7kI1T2WESXAVrW+iBnG8JyNbzTVngLUMdXbZRG4SpEtmepZHtJzH
sGWXlolWwxuudSxYxpXj/dy33abKgetxdpmWmNmR6p40jt4//bz3of9AP25vT/ws
I8LD2AY6tmyUwXjp9oV8oNgnhHWtmp2Q49tUy+yaK1Y8o/3E96eQs5bz3WYNlFFD
7A6TREgaV+FiwYeI5U6NVejhet6xf0Zm7DrNrUSRftor+lrQjF2yXlFp4N9Ycww+
+H95uRzXWmZyfA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:52:16 2026 by rpki-client