Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
File: NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft (raw, json)
Hash identifier: Khtr3Z52WfLyVWYbKTczJk5p7Ae04rZRr9sEGo7nBWU=
Subject key identifier: D8:6C:94:04:89:65:E0:6F:37:F2:09:C7:6A:87:83:52:E2:3D:1F:13
Authority key identifier: 34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA
Certificate issuer: /CN=34921598b6a261aa4c3e67144ac876033253e0aa
Certificate serial: 019D9B196BC10586EFF31D8AD0E3EA3D3C85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 11:00:27 +0000
Manifest this update: Fri 17 Apr 2026 11:00:27 +0000
Manifest next update: Sat 18 Apr 2026 11:00:27 +0000
Files and hashes: 1: CawyeYNcMjrLuvvbcUuS250xWNk.roa (hash: y+f/df2HILWWbPxsyDOlBpH7jfN1Enb/8oL5EPuvVoU=)
2: NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl (hash: EP9agl1zU/ZPDq+jYDeM/Xq8T3dwQc0W5ZICuPvaqVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:6b:c1:05:86:ef:f3:1d:8a:d0:e3:ea:3d:3c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34921598b6a261aa4c3e67144ac876033253e0aa
Validity
Not Before: Apr 17 11:00:27 2026 GMT
Not After : Apr 18 11:00:27 2026 GMT
Subject: CN=d86c94048965e06f37f209c76a878352e23d1f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:67:f4:99:57:17:9c:e2:e0:73:93:38:09:7d:
e2:09:d6:83:3a:26:3a:f0:ca:11:ee:b0:d9:68:19:
2e:42:97:df:61:ae:fd:eb:0b:a5:57:2d:a9:ed:62:
7e:c8:44:5c:3e:fb:a5:0f:3c:87:ad:d0:be:bc:de:
8b:bc:d4:61:3a:f9:e3:ab:ba:42:91:7e:77:b4:da:
4d:a9:83:74:e9:3a:dc:c6:1c:71:37:2f:e4:59:e8:
d5:4b:ad:12:6f:cd:75:21:b6:c6:77:6a:f6:01:c2:
ff:4f:96:a0:a8:f7:67:d8:21:86:45:57:78:06:34:
40:5d:ea:b4:2f:a0:83:dd:0f:38:ba:19:0e:1f:d5:
90:94:7d:0e:2e:da:89:44:9b:2d:b2:53:3f:87:44:
13:89:cc:a9:77:95:bd:f7:e4:0d:b1:c3:93:14:ba:
64:0f:fb:0a:bd:16:c9:7c:23:b2:a7:32:3f:fa:c7:
41:d9:c1:7a:ed:4e:47:8a:af:a8:a9:05:3c:ec:cd:
bc:81:8c:a2:b1:d0:7a:af:76:72:2e:9c:ea:bd:91:
64:d1:b1:23:ca:20:16:1b:9a:5f:2e:88:44:28:ed:
d1:b4:f0:0d:7f:b6:df:3c:40:e1:ee:2c:5d:cb:cb:
2a:9b:a7:23:b6:7e:e8:5d:0a:e2:c6:db:e9:8e:e4:
66:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6C:94:04:89:65:E0:6F:37:F2:09:C7:6A:87:83:52:E2:3D:1F:13
X509v3 Authority Key Identifier:
keyid:34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:35:f0:0f:37:5d:8e:3f:db:3d:5c:e3:fb:1e:8d:24:0c:43:
9a:08:9c:9b:20:90:b5:fb:b6:e9:68:a3:37:7f:00:ab:c4:9b:
dd:27:09:44:4f:c0:43:45:07:2e:58:9b:1c:00:42:6a:a9:19:
07:87:cf:d5:f4:11:7a:37:35:67:d4:43:52:a6:93:3d:89:8b:
15:b5:cc:5a:ff:fd:9c:c8:fa:a4:3d:44:71:a8:cf:60:99:c5:
14:ea:6b:57:23:b3:a2:b9:da:b5:b9:e3:0c:75:b8:2c:ed:68:
10:c1:cf:23:bd:1e:67:fa:1c:3d:e4:d1:1d:db:ec:4a:18:c7:
37:80:87:9b:9f:40:4a:0d:1a:4e:7b:2b:b4:ba:7e:be:67:a8:
df:10:5e:2e:6c:e8:b1:9e:c5:8c:0d:3e:7e:a5:ff:3d:23:7d:
2d:c8:5a:b4:77:d8:51:fa:b9:45:44:50:a8:82:54:ac:95:6c:
dc:e9:c1:be:b2:02:b9:af:c8:6a:82:90:14:6d:44:84:b8:4c:
d6:2f:c9:f9:78:a4:84:c6:2a:ad:c7:92:04:6e:38:94:3c:45:
95:81:86:3b:98:d2:4e:1a:51:1f:76:2c:7b:df:15:40:3a:29:
a6:60:70:ac:13:80:df:7b:28:75:13:c5:de:1e:5e:97:55:a8:
4a:08:2d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:03:47 2026 by rpki-client