Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
File: NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft (raw, json)
Hash identifier: 4RokpiP/E5gCw2/lRatJ4WMApgSRiKaQJdtG/qClybE=
Subject key identifier: C7:AA:74:7D:D5:23:AC:2B:44:93:4F:DF:62:74:E7:6F:F9:0C:C2:BC
Authority key identifier: 34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E
Certificate issuer: /CN=349fd357c3fb8ea30e1207823b646e125318380e
Certificate serial: 01A0D5DE123FE48538BE5AF35B449738EC0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
Manifest number: 1A6E
Signing time: Fri 25 Sep 2026 00:01:35 +0000
Manifest this update: Fri 25 Sep 2026 00:01:35 +0000
Manifest next update: Sat 26 Sep 2026 00:01:35 +0000
Files and hashes: 1: NIIi-Q8GWOAf6y7xgN6FHyBQvLQ.roa (hash: EgUOgjA6chEBn1yaY61k/TDzCS6CCSsycQ401715+UQ=)
2: NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl (hash: HBaSqAPGn+D57gkWnaFofVjJttpoBAwCk5yU+D17DJs=)
3: SzMzAMGR1n44l9wjSMiDkP_2u8k.asa (hash: /kYodvA9ywSCYdFNl7M0UF2fB5etYv2Czg5PZb60ur4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:12:3f:e4:85:38:be:5a:f3:5b:44:97:38:ec:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349fd357c3fb8ea30e1207823b646e125318380e
Validity
Not Before: Sep 25 00:01:35 2026 GMT
Not After : Sep 26 00:01:35 2026 GMT
Subject: CN=c7aa747dd523ac2b44934fdf6274e76ff90cc2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5d:eb:a2:53:9a:ba:89:e0:57:c7:fd:e0:68:
58:64:ea:d9:22:16:e4:fb:e3:e4:87:55:d4:8d:87:
11:a4:9d:0d:f9:48:a9:ea:ee:7e:4f:bb:bd:4a:34:
05:86:12:14:a3:cd:b3:91:d0:ee:ba:f3:1c:dc:5e:
d9:f9:e5:0a:a3:9a:f7:d3:e7:c2:75:84:c4:43:35:
ff:f0:24:cf:66:ee:3b:d3:64:96:69:79:5d:c6:d2:
fd:11:f9:72:f4:8d:56:49:ec:27:4e:59:0f:60:85:
b9:44:29:92:f3:fd:2a:37:9f:0c:b7:c1:de:a2:24:
ed:a4:3e:57:7b:e3:6b:59:b6:0f:25:c4:52:b5:40:
f3:d1:84:a1:88:11:ff:85:f9:6f:e4:8d:4f:54:ac:
95:ee:05:a2:16:3a:f4:43:c2:5f:07:e4:73:d3:78:
15:9f:30:c6:31:3d:94:74:78:8b:b0:95:2d:1c:7e:
57:83:bc:05:0f:5c:ea:9e:6c:1a:07:eb:8f:cd:1e:
44:57:f4:85:c1:42:34:bf:b8:e2:3b:f6:64:52:8f:
c5:9c:e0:04:08:24:99:87:7f:e6:5f:63:9e:1f:85:
8a:ea:08:d7:ec:7a:39:0b:08:fa:b9:88:c5:9a:6e:
68:9a:f8:7a:9f:53:51:b4:e1:1c:0f:9c:35:a4:aa:
42:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AA:74:7D:D5:23:AC:2B:44:93:4F:DF:62:74:E7:6F:F9:0C:C2:BC
X509v3 Authority Key Identifier:
keyid:34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:9d:8d:12:55:9e:45:48:e2:07:e6:41:da:40:bc:b0:f4:33:
5c:a3:0f:13:1e:27:94:01:91:15:7f:1b:5f:9e:60:78:ce:89:
b8:f8:b8:23:4e:a9:3e:be:3e:bc:f0:2e:fe:81:c2:89:d4:c5:
d1:1e:41:a6:7f:f3:db:f1:eb:b1:00:be:dd:03:8a:20:12:29:
b1:bd:2c:f2:f1:46:d4:fa:89:e6:26:15:df:18:a6:b8:2c:ad:
f6:f0:d5:13:cf:ab:47:6c:c3:10:54:7d:80:ca:1f:b0:6b:32:
de:77:7e:d4:84:24:24:a9:b5:fc:99:00:44:f0:7a:c0:62:e7:
f7:ab:aa:ad:6a:07:f3:57:9f:c3:ee:c7:7d:c0:8a:c0:5d:81:
7d:03:49:0f:71:45:b0:da:77:a9:bd:75:26:f5:19:8a:ea:9c:
63:2d:6e:e4:16:4c:20:d1:c6:34:84:27:99:2b:61:c5:19:aa:
cd:9d:48:08:84:8b:4d:5c:91:03:80:a4:1d:af:62:4a:8c:6c:
80:2e:1a:9b:4f:56:02:49:01:d1:70:dd:8d:ab:e5:38:37:80:
63:0d:4b:99:8e:8d:f5:0e:10:0d:c1:e1:f7:f0:ce:9c:f2:12:
4c:bd:6e:58:3d:7b:99:65:0f:9c:ff:78:bd:05:ec:bc:f3:fe:
37:1d:d2:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDV3hI/5IU4vlrzW0SXOOwOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWZkMzU3YzNmYjhlYTMwZTEyMDc4MjNiNjQ2ZTEyNTMx
ODM4MGUwHhcNMjYwOTI1MDAwMTM1WhcNMjYwOTI2MDAwMTM1WjAzMTEwLwYDVQQD
EyhjN2FhNzQ3ZGQ1MjNhYzJiNDQ5MzRmZGY2Mjc0ZTc2ZmY5MGNjMmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7V3rolOauongV8f94GhYZOrZIhbk
++Pkh1XUjYcRpJ0N+Uip6u5+T7u9SjQFhhIUo82zkdDuuvMc3F7Z+eUKo5r30+fC
dYTEQzX/8CTPZu4702SWaXldxtL9Efly9I1WSewnTlkPYIW5RCmS8/0qN58Mt8He
oiTtpD5Xe+NrWbYPJcRStUDz0YShiBH/hflv5I1PVKyV7gWiFjr0Q8JfB+Rz03gV
nzDGMT2UdHiLsJUtHH5Xg7wFD1zqnmwaB+uPzR5EV/SFwUI0v7jiO/ZkUo/FnOAE
CCSZh3/mX2OeH4WK6gjX7Ho5Cwj6uYjFmm5omvh6n1NRtOEcD5w1pKpCtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMeqdH3VI6wrRJNP32J052/5DMK8MB8GA1UdIwQY
MBaAFDSf01fD+46jDhIHgjtkbhJTGDgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkpfVFY4UDdqcU1PRWdlQ08yUnVFbE1ZT0E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82MGExMDAtZjE2Ni00MmQ1LTg3MTIt
MWU4NGYwOGMxZGNiLzEvTkpfVFY4UDdqcU1PRWdlQ08yUnVFbE1ZT0E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS82MGExMDAtZjE2Ni00MmQ1LTg3MTItMWU4NGYwOGMxZGNi
LzEvTkpfVFY4UDdqcU1PRWdlQ08yUnVFbE1ZT0E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJ2NElWe
RUjiB+ZB2kC8sPQzXKMPEx4nlAGRFX8bX55geM6JuPi4I06pPr4+vPAu/oHCidTF
0R5Bpn/z2/HrsQC+3QOKIBIpsb0s8vFG1PqJ5iYV3ximuCyt9vDVE8+rR2zDEFR9
gMofsGsy3nd+1IQkJKm1/JkARPB6wGLn96uqrWoH81efw+7HfcCKwF2BfQNJD3FF
sNp3qb11JvUZiuqcYy1u5BZMINHGNIQnmSthxRmqzZ1ICISLTVyRA4CkHa9iSoxs
gC4am09WAkkB0XDdjavlODeAYw1LmY6N9Q4QDcHh9/DOnPISTL1uWD17mWUPnP94
vQXsvPP+Nx3SCg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 04:24:29 2026 by rpki-client