Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
File: NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft (raw, json)
Hash identifier: rLfX5GPkUa4LtqrhRbwoFACl5yXdBLmZnVE8jbQ0JhQ=
Subject key identifier: CA:34:E1:89:9C:B0:31:22:1D:55:6F:A1:8C:B5:7C:D0:0E:29:54:66
Authority key identifier: 34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA
Certificate issuer: /CN=34921598b6a261aa4c3e67144ac876033253e0aa
Certificate serial: 019CAD90C7B6960268FA8C381176B3E8AB4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 08:01:12 +0000
Manifest this update: Mon 02 Mar 2026 08:01:12 +0000
Manifest next update: Tue 03 Mar 2026 08:01:12 +0000
Files and hashes: 1: CawyeYNcMjrLuvvbcUuS250xWNk.roa (hash: y+f/df2HILWWbPxsyDOlBpH7jfN1Enb/8oL5EPuvVoU=)
2: NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl (hash: ZbEoXuYfN9972ld+M+nLJ1aSq1VNSGDOg0mN1+xFiys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:c7:b6:96:02:68:fa:8c:38:11:76:b3:e8:ab:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34921598b6a261aa4c3e67144ac876033253e0aa
Validity
Not Before: Mar 2 08:01:12 2026 GMT
Not After : Mar 3 08:01:12 2026 GMT
Subject: CN=ca34e1899cb031221d556fa18cb57cd00e295466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5b:95:4b:b6:24:77:6f:89:d9:70:21:3c:9e:
1c:da:1e:55:1d:5e:c6:7c:ef:04:9f:48:03:d5:0a:
26:64:b7:36:23:e2:5a:53:cd:ab:3a:42:83:7d:35:
7b:db:8d:87:06:cf:6a:e8:98:a2:da:f2:80:c4:41:
55:5c:78:00:56:09:e2:65:91:cf:07:a1:8e:4f:52:
20:a8:81:43:c4:15:fd:21:e5:15:63:2f:e0:85:c5:
0b:d4:e0:bc:aa:cf:c8:27:03:ad:e3:7e:e7:5c:d4:
e3:08:32:aa:a5:8c:a8:f3:d6:db:ba:70:f8:18:7e:
68:87:36:ec:3b:00:52:09:04:c8:1a:1c:f6:f1:e8:
30:70:23:4a:b1:81:07:3e:7b:ce:22:99:87:e4:2e:
54:74:e8:16:f0:38:f3:f0:68:dd:e6:ae:d7:5e:55:
ae:40:be:cc:2b:a5:a7:e4:68:d1:74:db:bb:48:a3:
fc:a1:10:be:ba:74:55:21:b4:30:c5:cd:84:89:f8:
c0:1b:3e:52:b5:37:af:52:5b:e4:94:81:1b:15:81:
f0:a3:2e:a5:89:ca:4f:6c:b4:66:b2:66:0f:e4:7a:
76:64:be:b3:9f:e6:3b:cd:dc:5e:19:05:5c:4e:ce:
72:5a:80:9a:23:50:12:08:58:ba:38:45:38:4f:3f:
43:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:34:E1:89:9C:B0:31:22:1D:55:6F:A1:8C:B5:7C:D0:0E:29:54:66
X509v3 Authority Key Identifier:
keyid:34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c7:16:2a:96:28:23:a0:a6:57:17:b4:f1:f9:92:79:e4:05:
45:23:25:de:42:1e:c6:fc:80:94:93:57:84:3f:61:8c:b1:bd:
fc:2a:53:dd:4f:b4:61:d0:63:d7:89:07:09:d3:17:83:2a:f2:
28:f0:0c:82:95:49:08:56:f8:6d:82:dc:c4:76:38:7f:3b:3b:
2c:3d:f3:7b:7b:ba:ee:9c:89:9c:a4:2a:cd:eb:7f:d2:04:49:
8a:8f:70:3e:0b:8c:b5:1f:00:9a:94:3f:78:65:f8:3a:c1:3a:
78:0d:53:2f:d5:a9:f4:c2:da:b9:04:a1:0c:6b:7c:74:7a:f0:
c2:ad:51:49:4f:fe:66:20:8a:38:1d:ae:a0:bf:92:4f:ff:8a:
43:28:f4:a9:3f:7a:e1:39:5a:c1:7d:10:61:74:8e:a5:f1:c4:
8a:8b:34:23:1f:4b:00:c5:07:7e:58:01:35:47:95:a1:d0:68:
14:d7:39:3d:00:ef:a7:a6:25:dd:0d:73:47:b6:71:8c:6c:98:
2b:b2:09:6d:3e:da:eb:c9:26:21:1f:f2:be:23:2a:e4:82:cb:
03:a8:ec:63:e1:6c:d5:ce:50:6e:eb:e7:9f:22:c5:a1:5f:51:
6a:04:e4:b8:62:a8:93:c8:14:da:15:46:a5:0b:29:8e:25:9e:
d3:0d:a3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:16:41 2026 by rpki-client