Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
File: NJGSBLesR0JLqr-ykb0_yPqeBfY.mft (raw, json)
Hash identifier: v7E0atxxeX9tHDs1nmI4PNuAUytjTtuNCWOavAOC/IA=
Subject key identifier: 66:DD:73:FC:24:42:F1:6E:53:16:EF:AC:49:73:78:53:50:DB:D9:F4
Authority key identifier: 34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
Certificate issuer: /CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Certificate serial: 019D28BB727C647149DFBCE481AEDCA19E51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
Manifest number: 181B
Signing time: Thu 26 Mar 2026 06:01:06 +0000
Manifest this update: Thu 26 Mar 2026 06:01:06 +0000
Manifest next update: Fri 27 Mar 2026 06:01:06 +0000
Files and hashes: 1: NJGSBLesR0JLqr-ykb0_yPqeBfY.crl (hash: 4XyJRZDzC3u9bakPHDisNqlwKidIasyQXgVtyF5SutE=)
2: l04ryjfqbPZeuiZZejzJCWBinEU.roa (hash: qyO0LhlZBEPFvxWtxObTzuofXOhZhOAncGkjMZ9Xnlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:72:7c:64:71:49:df:bc:e4:81:ae:dc:a1:9e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Validity
Not Before: Mar 26 06:01:06 2026 GMT
Not After : Mar 27 06:01:06 2026 GMT
Subject: CN=66dd73fc2442f16e5316efac4973785350dbd9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:32:10:48:84:6c:de:7f:52:dc:85:0e:5a:20:
34:c5:5e:21:24:a3:e9:bd:65:b0:08:cd:4c:c2:b8:
e2:1e:70:e1:41:d2:c8:bd:22:36:24:57:a4:1d:a7:
b6:5b:0e:84:e3:9d:2a:1b:16:05:4f:be:20:b9:b1:
3b:c5:1a:c5:d0:21:41:e4:3e:f5:b7:ac:7f:a6:fe:
1b:33:ce:bd:81:ea:0f:5e:35:62:d5:4a:06:f0:8a:
13:99:43:b0:dd:4d:0d:cf:fb:39:f9:bf:c8:80:e7:
ea:4e:1a:3a:3c:31:b3:fb:ed:24:bf:71:df:b6:34:
b1:4e:95:3b:53:18:53:f3:65:40:b7:4b:8a:c4:a4:
dd:e5:a3:d8:81:18:91:b0:02:df:f0:46:56:ef:86:
3a:85:11:68:9b:ea:b7:60:d9:3b:25:34:f0:d3:d7:
6a:a5:24:ee:22:2a:3a:61:28:0c:6f:56:4a:8d:7c:
ad:2c:4c:7e:55:40:55:a3:e3:94:f2:d2:28:7f:b6:
ea:97:94:ea:a4:e2:c5:fe:b5:21:c8:39:d2:e7:9e:
93:e6:7e:d7:74:94:5a:31:55:5c:13:f7:e7:ae:c8:
6b:0b:60:ef:83:8a:f1:24:d8:2c:9c:c1:70:13:2e:
48:4f:42:31:40:51:de:a4:c5:0b:49:a5:4d:0d:08:
96:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DD:73:FC:24:42:F1:6E:53:16:EF:AC:49:73:78:53:50:DB:D9:F4
X509v3 Authority Key Identifier:
keyid:34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:9b:32:ab:3a:72:ba:1a:25:f0:26:c0:1c:61:bd:2f:b0:1e:
ef:de:d9:da:46:79:cb:ed:94:1c:7c:d9:6c:3b:b7:48:c9:84:
35:cf:14:43:04:d2:f0:13:02:60:5a:f9:bd:64:c8:81:75:93:
f5:f3:01:11:aa:ab:7d:8c:a2:d1:91:e2:28:43:4b:ea:8f:fa:
e3:5d:14:03:59:af:d9:29:a9:0a:7b:3b:e2:6b:d7:c4:4a:47:
b3:29:0f:ea:22:d6:90:f8:7c:c1:c6:65:4e:4e:bb:d6:81:c6:
7c:e9:77:46:bc:71:33:bb:c5:40:34:6a:4e:87:b4:7b:3f:03:
35:59:5d:da:f3:1e:96:a4:9f:d0:89:e2:8c:1b:84:88:d2:32:
51:c8:64:28:ba:22:3d:15:a5:f1:51:bd:f3:c7:e6:c4:a3:a0:
0c:75:5f:41:65:c2:ee:c1:e6:9b:80:66:32:55:46:58:1b:c2:
16:32:59:42:b7:2a:ab:cc:a2:31:77:c6:e0:04:4f:61:ca:8e:
05:f8:8d:2b:9f:a7:02:9e:6b:e1:91:92:2a:e9:0f:0b:4d:04:
07:bd:eb:a3:ca:98:32:55:f8:43:88:a3:e4:89:da:41:7f:19:
40:66:7e:68:b7:0a:29:02:ec:36:f6:38:0c:5a:68:bd:7b:91:
6a:69:10:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou3J8ZHFJ37zkga7coZ5RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OTE5MjA0YjdhYzQ3NDI0YmFhYmZiMjkxYmQzZmM4ZmE5
ZTA1ZjYwHhcNMjYwMzI2MDYwMTA2WhcNMjYwMzI3MDYwMTA2WjAzMTEwLwYDVQQD
Eyg2NmRkNzNmYzI0NDJmMTZlNTMxNmVmYWM0OTczNzg1MzUwZGJkOWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozIQSIRs3n9S3IUOWiA0xV4hJKPp
vWWwCM1MwrjiHnDhQdLIvSI2JFekHae2Ww6E450qGxYFT74gubE7xRrF0CFB5D71
t6x/pv4bM869geoPXjVi1UoG8IoTmUOw3U0Nz/s5+b/IgOfqTho6PDGz++0kv3Hf
tjSxTpU7UxhT82VAt0uKxKTd5aPYgRiRsALf8EZW74Y6hRFom+q3YNk7JTTw09dq
pSTuIio6YSgMb1ZKjXytLEx+VUBVo+OU8tIof7bql5TqpOLF/rUhyDnS556T5n7X
dJRaMVVcE/fnrshrC2Dvg4rxJNgsnMFwEy5IT0IxQFHepMULSaVNDQiWnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbdc/wkQvFuUxbvrElzeFNQ29n0MB8GA1UdIwQY
MBaAFDSRkgS3rEdCS6q/spG9P8j6ngX2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hOGVmZGYtNWNlZS00OTRiLWJlNDgt
YTM3MWYyODg5MTM4LzEvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9hOGVmZGYtNWNlZS00OTRiLWJlNDgtYTM3MWYyODg5MTM4
LzEvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARpsyqzpy
uhol8CbAHGG9L7Ae797Z2kZ5y+2UHHzZbDu3SMmENc8UQwTS8BMCYFr5vWTIgXWT
9fMBEaqrfYyi0ZHiKENL6o/6410UA1mv2SmpCns74mvXxEpHsykP6iLWkPh8wcZl
Tk671oHGfOl3RrxxM7vFQDRqToe0ez8DNVld2vMelqSf0InijBuEiNIyUchkKLoi
PRWl8VG988fmxKOgDHVfQWXC7sHmm4BmMlVGWBvCFjJZQrcqq8yiMXfG4ARPYcqO
BfiNK5+nAp5r4ZGSKukPC00EB73ro8qYMlX4Q4ij5InaQX8ZQGZ+aLcKKQLsNvY4
DFpovXuRamkQpg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:01 2026 by rpki-client