Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
File: NJGSBLesR0JLqr-ykb0_yPqeBfY.mft (raw, json)
Hash identifier: 47inRb5lCMF2upYhKhSgsawgiODH4HEcYuJZVYCwwiI=
Subject key identifier: 14:B2:35:B6:33:94:EB:A7:D6:4F:76:60:FC:CE:B8:31:30:F6:B4:7B
Authority key identifier: 34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
Certificate issuer: /CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Certificate serial: 01A0EE545E2246EFEAB277AA082A74BB4CA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
Manifest number: 1A0F
Signing time: Tue 29 Sep 2026 18:01:41 +0000
Manifest this update: Tue 29 Sep 2026 18:01:41 +0000
Manifest next update: Wed 30 Sep 2026 18:01:41 +0000
Files and hashes: 1: NJGSBLesR0JLqr-ykb0_yPqeBfY.crl (hash: 5VgJRYthTAZUq/zEQ7CPwA7b9PUhrO1MFQS6RvtraM0=)
2: l04ryjfqbPZeuiZZejzJCWBinEU.roa (hash: qyO0LhlZBEPFvxWtxObTzuofXOhZhOAncGkjMZ9Xnlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:54:5e:22:46:ef:ea:b2:77:aa:08:2a:74:bb:4c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Validity
Not Before: Sep 29 18:01:41 2026 GMT
Not After : Sep 30 18:01:41 2026 GMT
Subject: CN=14b235b63394eba7d64f7660fcceb83130f6b47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:95:52:e4:d0:b4:6c:16:ce:5c:a4:cb:0d:
58:e1:3a:da:3b:73:5f:de:c9:37:15:50:d7:ca:3a:
d9:a2:6a:43:9a:9e:e8:9f:35:82:1d:77:4e:5c:f7:
4d:05:8b:08:d7:30:69:8d:69:ac:60:63:24:3c:b8:
1f:14:65:b2:8b:d9:3a:99:cc:59:f3:a8:9e:95:1a:
42:9c:95:15:40:2f:5d:bf:40:d3:9e:b2:74:e3:95:
d3:dc:4b:21:5b:cc:1f:7d:36:7b:ce:3b:19:71:ec:
e0:5d:c7:84:21:11:39:0a:01:de:81:61:f4:af:05:
61:bc:fe:cb:7d:0a:be:0c:1d:b3:75:24:da:43:fc:
54:33:a6:60:b0:91:80:8d:25:48:51:91:47:9d:9d:
e7:ed:8d:55:f6:b4:ac:db:71:fb:d4:a0:1f:9d:09:
6c:05:2e:6d:d7:8e:65:a0:26:8b:3d:0b:4b:9a:38:
b3:7a:06:aa:ca:1a:7f:ba:d3:03:80:d6:70:2b:ed:
5f:1c:3e:23:b7:75:56:04:8d:b3:d8:b6:c3:78:5d:
c1:87:57:df:c9:c7:fd:c4:24:d6:5b:b7:f3:ba:03:
dd:0a:45:49:76:fa:78:d1:15:31:81:04:6b:12:22:
30:b8:45:6d:b7:3a:e1:68:10:9e:49:5e:df:1f:21:
93:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B2:35:B6:33:94:EB:A7:D6:4F:76:60:FC:CE:B8:31:30:F6:B4:7B
X509v3 Authority Key Identifier:
keyid:34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:56:dc:b1:d2:5a:5c:1a:21:92:4b:34:a8:b1:e2:4f:b5:0e:
23:9a:3f:2b:e9:5d:42:e4:dd:91:4f:90:eb:60:9c:d4:84:73:
e1:0f:a1:54:ba:d8:75:a1:9c:65:b0:26:9d:0b:cc:69:fb:12:
0a:de:7a:65:cf:58:51:f5:65:8f:49:05:9b:3e:91:ad:0f:20:
b0:2e:b4:b8:a8:0a:f8:fb:c1:3b:7e:9a:46:18:f3:cd:5d:7a:
d5:d0:3f:d6:cc:a6:b0:22:63:0e:fb:39:67:7e:3b:8f:36:b2:
fc:2d:4e:7c:98:48:2f:a8:1e:85:5c:55:f0:7d:9d:87:74:b5:
2d:e2:92:7a:8a:5b:54:bf:a0:56:b5:56:f1:3b:7a:4e:5d:a6:
bd:cf:6c:b6:cf:31:af:e8:94:b5:6f:cf:78:af:7f:30:41:1b:
a5:5e:d2:10:51:33:47:1e:47:04:e7:2c:21:c6:73:c9:26:29:
06:cb:c9:2b:a0:fa:c2:96:dc:6a:92:8c:ed:4c:50:9f:e2:8d:
21:5c:11:da:75:91:51:f5:d3:12:02:53:22:76:62:6e:bc:3f:
2a:ce:1a:37:d5:5e:cd:e1:4e:1e:3b:78:b6:d6:05:9f:2c:85:
f5:12:ea:48:5f:fa:44:f8:29:c2:5d:23:41:0c:69:0e:87:88:
90:ed:55:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDuVF4iRu/qsneqCCp0u0ygMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OTE5MjA0YjdhYzQ3NDI0YmFhYmZiMjkxYmQzZmM4ZmE5
ZTA1ZjYwHhcNMjYwOTI5MTgwMTQxWhcNMjYwOTMwMTgwMTQxWjAzMTEwLwYDVQQD
EygxNGIyMzViNjMzOTRlYmE3ZDY0Zjc2NjBmY2NlYjgzMTMwZjZiNDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkWVUuTQtGwWzlykyw1Y4TraO3Nf
3sk3FVDXyjrZompDmp7onzWCHXdOXPdNBYsI1zBpjWmsYGMkPLgfFGWyi9k6mcxZ
86ielRpCnJUVQC9dv0DTnrJ045XT3EshW8wffTZ7zjsZcezgXceEIRE5CgHegWH0
rwVhvP7LfQq+DB2zdSTaQ/xUM6ZgsJGAjSVIUZFHnZ3n7Y1V9rSs23H71KAfnQls
BS5t145loCaLPQtLmjizegaqyhp/utMDgNZwK+1fHD4jt3VWBI2z2LbDeF3Bh1ff
ycf9xCTWW7fzugPdCkVJdvp40RUxgQRrEiIwuEVttzrhaBCeSV7fHyGT5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSyNbYzlOun1k92YPzOuDEw9rR7MB8GA1UdIwQY
MBaAFDSRkgS3rEdCS6q/spG9P8j6ngX2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hOGVmZGYtNWNlZS00OTRiLWJlNDgt
YTM3MWYyODg5MTM4LzEvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9hOGVmZGYtNWNlZS00OTRiLWJlNDgtYTM3MWYyODg5MTM4
LzEvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABlbcsdJa
XBohkks0qLHiT7UOI5o/K+ldQuTdkU+Q62Cc1IRz4Q+hVLrYdaGcZbAmnQvMafsS
Ct56Zc9YUfVlj0kFmz6RrQ8gsC60uKgK+PvBO36aRhjzzV161dA/1symsCJjDvs5
Z347jzay/C1OfJhIL6gehVxV8H2dh3S1LeKSeopbVL+gVrVW8Tt6Tl2mvc9sts8x
r+iUtW/PeK9/MEEbpV7SEFEzRx5HBOcsIcZzySYpBsvJK6D6wpbcapKM7UxQn+KN
IVwR2nWRUfXTEgJTInZibrw/Ks4aN9VezeFOHjt4ttYFnyyF9RLqSF/6RPgpwl0j
QQxpDoeIkO1Vgg==
-----END CERTIFICATE-----
Generated at Wed Sep 30 00:25:21 2026 by rpki-client