Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
File: njApS35GRarttUZy1IBlsbHOvGI.mft (raw, json)
Hash identifier: 7vPfLaRqkyv+s5g1PEjCJge0m8QRqXGHMkCFbodJ4g0=
Subject key identifier: 4D:43:E4:F3:A6:81:A0:E7:15:0F:8E:1B:77:17:10:E8:E0:2E:97:1F
Authority key identifier: 9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
Certificate issuer: /CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Certificate serial: 019D992B2398C59DD782FA08F77729789EF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
Manifest number: 14E1
Signing time: Fri 17 Apr 2026 02:00:34 +0000
Manifest this update: Fri 17 Apr 2026 02:00:34 +0000
Manifest next update: Sat 18 Apr 2026 02:00:34 +0000
Files and hashes: 1: 2V-Naz0jnwf8V8dIgYhxF_-rK-o.roa (hash: XdSVxHJfUXdEh13NSWMZmFTpZfOjmyPDnSsH+zDSqy0=)
2: njApS35GRarttUZy1IBlsbHOvGI.crl (hash: 0cmdzuvTCWHWPFc2JRkza8pM2pEkAPpewu8VvMF3alk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:23:98:c5:9d:d7:82:fa:08:f7:77:29:78:9e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Validity
Not Before: Apr 17 02:00:34 2026 GMT
Not After : Apr 18 02:00:34 2026 GMT
Subject: CN=4d43e4f3a681a0e7150f8e1b771710e8e02e971f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e7:fe:55:d6:4f:09:6f:a8:c1:06:07:29:4a:
1d:5a:a9:34:d6:57:85:c9:f4:44:46:9f:8a:c6:18:
4c:d7:5f:5b:56:7a:aa:9b:94:ad:5d:8f:35:c2:8c:
46:51:ce:0f:1c:45:3a:11:b0:42:e9:66:ea:58:1e:
59:cd:63:24:9a:c5:15:ef:fa:91:1b:7e:03:2a:29:
d0:c9:de:66:87:e3:5a:15:71:26:fd:40:09:bb:79:
60:31:db:8a:49:7a:bd:3c:15:de:9f:47:ce:34:f0:
ac:97:86:83:f5:42:ca:88:12:de:4c:81:2c:84:df:
fc:af:cc:34:1e:c9:66:0a:67:8b:ca:2e:69:5b:ce:
ed:25:d3:fd:ae:f0:9c:6a:e8:93:dd:77:ae:f7:39:
8b:00:05:99:1c:7b:6b:5a:bf:bf:51:c8:78:6d:a0:
24:2b:eb:f6:61:fc:3d:6f:5f:61:83:50:f9:99:8c:
3f:48:33:b2:9e:84:ad:d9:f2:1c:bf:90:15:84:e3:
cf:44:a0:78:66:c1:92:7c:d7:59:0c:0c:3c:df:9d:
d5:57:ae:06:2d:04:95:1c:b2:88:f7:2f:67:19:36:
a5:f9:2c:de:25:dd:f9:2a:4c:b5:2e:5d:5b:69:ce:
59:5f:8b:f2:15:fa:40:23:67:07:8f:c4:1e:57:22:
71:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:43:E4:F3:A6:81:A0:E7:15:0F:8E:1B:77:17:10:E8:E0:2E:97:1F
X509v3 Authority Key Identifier:
keyid:9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6c:a9:b7:28:87:54:54:5f:3d:d2:eb:a9:e4:e3:a5:3b:44:
8c:78:a3:42:b8:dd:bb:53:ee:b6:f9:67:a2:b5:34:37:6a:77:
24:d2:aa:91:66:65:b9:9e:f5:b9:f9:bc:b5:2a:5f:69:3e:e6:
bb:8c:33:89:1f:05:dd:71:a1:6d:58:2e:13:e4:f1:6d:39:d7:
70:61:f5:3e:1b:67:97:57:e3:c4:99:0d:37:70:aa:65:15:b6:
87:d4:e9:99:6a:0e:8d:40:b4:a3:dd:a9:55:ee:b8:6b:64:16:
66:07:01:ad:21:a9:ea:68:cb:83:71:51:15:48:f4:51:7a:94:
c1:b3:dd:d0:32:2b:c8:9b:cb:f4:75:34:5a:66:95:44:8b:bc:
71:1c:28:7d:74:fc:ed:c8:c7:f2:6b:cf:4c:a5:39:6d:7f:80:
1f:02:9c:7b:61:3a:54:0d:d6:f6:2e:f9:bd:df:7b:86:6f:bc:
9d:92:e6:26:b2:3c:e1:cd:f7:7f:32:d3:6b:0d:3a:f4:e7:dc:
2a:41:83:00:e1:8b:9f:08:93:4a:79:9f:c0:f2:20:6e:56:8c:
44:56:40:aa:c0:f6:7d:4f:65:29:a0:ca:d2:70:2d:7a:bf:d3:
3e:af:4c:ea:47:13:2b:29:3d:cd:40:2f:ee:12:66:3f:c2:a0:
68:e8:09:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:31:22 2026 by rpki-client