Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
File: NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft (raw, json)
Hash identifier: pu1wE4z/EYsXpiqq3SV8Trj8PzKAZXt9XyiEGpkhuws=
Subject key identifier: B1:56:AC:12:69:B1:F4:9C:FF:53:2D:8E:25:08:C9:DF:10:CB:67:73
Authority key identifier: 34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA
Certificate issuer: /CN=34921598b6a261aa4c3e67144ac876033253e0aa
Certificate serial: 019EC0A43E67838EAD31D66BC3772CE01D09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 11:00:49 +0000
Manifest this update: Sat 13 Jun 2026 11:00:49 +0000
Manifest next update: Sun 14 Jun 2026 11:00:49 +0000
Files and hashes: 1: CawyeYNcMjrLuvvbcUuS250xWNk.roa (hash: y+f/df2HILWWbPxsyDOlBpH7jfN1Enb/8oL5EPuvVoU=)
2: NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl (hash: Ek+BAJyD1vG5s0JZssUPQW26bQN6whpSGf9VKFRIbis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:3e:67:83:8e:ad:31:d6:6b:c3:77:2c:e0:1d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34921598b6a261aa4c3e67144ac876033253e0aa
Validity
Not Before: Jun 13 11:00:49 2026 GMT
Not After : Jun 14 11:00:49 2026 GMT
Subject: CN=b156ac1269b1f49cff532d8e2508c9df10cb6773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9c:03:7a:c0:ff:1b:63:03:7e:89:cf:ce:c3:
cb:ce:ae:00:42:f2:3e:a5:eb:b3:ad:a6:bd:18:62:
2f:e1:34:1c:0d:b0:35:4a:af:67:d5:c1:a5:74:41:
85:4a:d1:ef:da:ed:f6:4b:2e:27:57:85:07:62:0a:
63:70:d4:6b:34:4e:b0:34:88:78:5d:a2:e0:a3:74:
92:30:57:db:46:26:ac:8b:f9:82:15:5b:5e:cd:a8:
56:e5:2a:be:d9:0c:45:a6:0c:04:a8:55:a9:af:aa:
47:2b:f7:66:c2:2f:e8:d3:da:53:5e:79:40:4f:f5:
80:ff:b1:64:f7:3d:e7:0f:79:0b:c8:cc:f9:b2:e5:
7f:e3:17:06:0c:4c:72:57:da:e6:fd:f8:26:5d:09:
25:61:54:69:24:16:08:0f:a2:26:4c:6b:2e:e4:0c:
fb:1f:6c:2a:90:6e:fd:0b:64:51:c4:ca:cb:c2:c9:
47:53:78:2a:dc:fb:4a:92:8a:39:3c:49:41:d6:fd:
cf:5d:dc:f1:c1:d2:8b:d4:23:a1:af:12:2c:9a:01:
74:61:08:29:c8:2f:e7:15:b5:db:7a:68:ed:d4:77:
d8:7d:cf:a2:35:70:73:85:39:5a:d0:97:38:b6:2f:
15:05:c2:b6:68:f9:ae:24:63:26:46:da:fc:34:68:
d3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:56:AC:12:69:B1:F4:9C:FF:53:2D:8E:25:08:C9:DF:10:CB:67:73
X509v3 Authority Key Identifier:
keyid:34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:09:ec:8f:d3:47:f1:9d:ce:6d:0e:e2:63:27:45:a7:ae:88:
d6:be:d1:ac:f2:23:f9:ed:d9:2d:69:6a:fa:61:9e:85:08:b1:
98:5c:0f:09:90:e9:b1:ad:55:08:b9:0f:fe:10:a5:73:f2:d3:
81:90:36:1d:8f:00:0d:cb:5e:d1:ab:5f:36:9f:09:5f:39:79:
5d:60:9f:52:6f:cb:dd:6d:2c:19:0d:79:1e:d0:a0:e6:4a:1a:
b1:c2:c1:a0:ce:51:08:ec:a4:0e:b5:d7:b4:3f:97:47:3f:6e:
30:e7:19:9e:3f:95:a6:bb:16:c8:2e:4b:8d:67:0c:75:4c:6d:
81:47:99:6a:da:e8:ef:55:b5:83:11:fb:c1:25:30:41:ac:fd:
c4:df:68:f1:40:39:01:d8:1d:ea:3b:62:21:80:96:d4:9c:b8:
59:e2:cd:cc:92:71:aa:6c:aa:ff:ac:59:37:99:4d:f9:b5:d6:
d2:34:33:44:e1:3f:b8:c7:00:76:36:4c:c2:a9:14:35:6f:7d:
e6:da:ec:8d:9f:28:1f:8e:39:74:35:ac:74:53:f2:50:3b:f6:
01:37:6d:6e:3d:cb:7a:db:0a:3b:05:fd:12:4e:14:3d:37:1a:
5b:e3:08:20:f9:ff:b5:a7:ee:0e:fd:95:42:55:3d:16:f0:b7:
90:f5:68:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:43:37 2026 by rpki-client