Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
File: NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft (raw, json)
Hash identifier: v2pbWYp3NNAxkhglgHHd7jy1XNQJD6Ej480QDkPEN8Q=
Subject key identifier: 0C:49:8B:40:87:C4:83:C8:BE:88:CC:76:4B:3E:29:BC:E2:03:18:82
Authority key identifier: 34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA
Certificate issuer: /CN=34921598b6a261aa4c3e67144ac876033253e0aa
Certificate serial: 01A0D98415F77CF912612320F5E599FF51D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 17:01:47 +0000
Manifest this update: Fri 25 Sep 2026 17:01:47 +0000
Manifest next update: Sat 26 Sep 2026 17:01:47 +0000
Files and hashes: 1: CawyeYNcMjrLuvvbcUuS250xWNk.roa (hash: y+f/df2HILWWbPxsyDOlBpH7jfN1Enb/8oL5EPuvVoU=)
2: NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl (hash: SQvSn6SyoCMlApiSMVtGARtkgBcBxmSRKxWfndrtWZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:84:15:f7:7c:f9:12:61:23:20:f5:e5:99:ff:51:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34921598b6a261aa4c3e67144ac876033253e0aa
Validity
Not Before: Sep 25 17:01:47 2026 GMT
Not After : Sep 26 17:01:47 2026 GMT
Subject: CN=0c498b4087c483c8be88cc764b3e29bce2031882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b2:34:c5:62:ed:8b:f0:c1:5b:97:e0:f8:55:
b6:9c:d2:3d:bf:73:bb:af:82:bc:4d:25:17:cc:4b:
f3:f1:01:89:87:b5:9c:db:91:c1:ed:61:6f:17:23:
d3:f3:93:b9:20:a8:b7:d2:b2:41:d2:0a:75:1e:58:
ce:fa:b4:66:7e:3c:b9:7c:c7:85:a3:bd:2c:43:47:
cf:6d:0f:0d:c2:5c:30:f6:dd:1e:f5:db:50:89:e6:
e1:c4:4c:6b:58:bc:ff:8f:30:f0:75:74:27:f6:b2:
f7:27:9d:f6:d9:aa:4d:97:ce:ad:61:94:66:12:89:
2a:e8:15:8c:46:05:5e:68:8e:5d:70:80:88:80:ba:
0d:ee:1b:56:2d:b0:a6:89:e3:18:3c:a2:94:13:f3:
ed:f1:e8:2d:40:bc:0a:75:51:b0:c4:c1:32:df:5a:
60:04:b8:5e:b5:1d:d8:da:fd:3c:9f:10:5e:10:0b:
1d:5b:ec:57:01:61:f4:81:4c:12:6f:7c:71:e7:23:
b1:83:50:f8:55:ac:22:e3:cc:a2:03:72:f4:43:42:
8c:e0:91:23:ed:17:26:21:c9:23:aa:f7:51:90:94:
be:9a:d9:04:73:d2:72:c0:82:74:83:fd:ae:82:f3:
2c:07:07:07:e8:6e:ad:64:ab:73:8b:8c:37:25:cb:
40:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:49:8B:40:87:C4:83:C8:BE:88:CC:76:4B:3E:29:BC:E2:03:18:82
X509v3 Authority Key Identifier:
keyid:34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:bb:30:6f:e9:fa:fe:2c:3c:38:30:2b:b6:23:f3:5f:e5:04:
9a:ce:f4:1d:cf:8d:b5:83:73:d6:f7:81:ed:3c:10:69:64:de:
14:9f:e4:23:66:27:84:1a:e7:0c:1f:b6:b3:cd:e9:ed:f9:92:
8c:5e:bc:ae:78:5e:5b:93:ab:55:45:7e:a9:81:e4:a1:b2:3a:
a1:cd:5f:46:a7:5d:ea:bc:2b:68:b7:bc:2a:ed:c0:49:e9:cd:
fa:ac:b6:c4:63:b9:62:3b:f3:5b:38:83:01:c3:a8:95:02:ef:
a7:b7:96:e8:cb:5e:35:22:be:41:5b:7a:86:83:13:98:1c:b0:
e5:51:21:79:c8:1c:fd:9f:bb:ec:17:5f:73:5b:3c:60:5e:f0:
f5:ae:e0:f0:be:7e:2e:68:db:e2:5b:c4:a9:50:37:ea:d3:a5:
07:8b:fc:f3:bd:8b:37:aa:67:d7:f3:d8:6d:eb:44:b8:5e:23:
f1:d3:a0:a3:33:b6:02:c1:c9:45:af:14:90:b5:98:14:d4:b1:
47:e0:4d:10:38:35:bd:b4:77:43:23:30:c9:5d:a4:15:d8:7a:
7a:f5:30:e6:f6:ee:14:66:13:7e:2f:a5:69:f0:ea:94:68:d3:
7b:f3:33:8d:5a:cc:c9:85:cb:ab:3d:3f:06:a7:35:59:01:9a:
3f:53:69:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:14:42 2026 by rpki-client