Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
File: NJGSBLesR0JLqr-ykb0_yPqeBfY.mft (raw, json)
Hash identifier: kVs6pmT5+qpGK8L53GrMJMmbaoUpYkEXvFwZuCUEzHo=
Subject key identifier: 55:B1:4F:6D:8E:C9:B2:16:48:DD:55:D0:DA:28:16:EB:CB:5A:65:8F
Authority key identifier: 34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
Certificate issuer: /CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Certificate serial: 01A0EC658526A447F9131D3E04968BA54834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
Manifest number: 1A0E
Signing time: Tue 29 Sep 2026 09:01:11 +0000
Manifest this update: Tue 29 Sep 2026 09:01:11 +0000
Manifest next update: Wed 30 Sep 2026 09:01:11 +0000
Files and hashes: 1: NJGSBLesR0JLqr-ykb0_yPqeBfY.crl (hash: 9CA0NWx9e/46OGsFj+0G1NoK5DTFifIOzQ76sNLTrgQ=)
2: l04ryjfqbPZeuiZZejzJCWBinEU.roa (hash: qyO0LhlZBEPFvxWtxObTzuofXOhZhOAncGkjMZ9Xnlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:65:85:26:a4:47:f9:13:1d:3e:04:96:8b:a5:48:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6
Validity
Not Before: Sep 29 09:01:11 2026 GMT
Not After : Sep 30 09:01:11 2026 GMT
Subject: CN=55b14f6d8ec9b21648dd55d0da2816ebcb5a658f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4d:07:3f:6d:e4:e5:8a:85:90:8b:7a:55:ad:
b5:4e:64:56:28:d8:a3:ca:99:b5:62:b0:c2:e3:ab:
b9:95:f8:50:95:8e:7a:35:ce:25:40:61:8e:36:63:
bc:b5:d9:71:75:e3:23:70:0a:34:7c:14:e7:a4:99:
15:7a:b9:2d:8f:bb:e6:82:31:d8:a4:a4:cd:78:60:
0c:87:a3:ca:18:6f:9c:fd:84:41:6d:f2:16:2d:ac:
6d:f0:08:2f:23:8a:d9:9f:4d:90:82:b9:a2:78:22:
59:3a:f4:c3:60:dc:ae:3c:6c:79:70:3e:4e:e1:a5:
de:63:31:10:d2:f9:3e:1f:b8:f9:72:87:23:0c:33:
63:df:4a:01:46:67:14:10:67:97:a3:0e:52:95:ec:
ee:4f:0b:d0:aa:95:27:37:ca:8b:ce:ff:d2:96:85:
31:0b:82:6a:d9:6a:f0:62:61:53:4e:36:e8:f2:d1:
2b:6e:fb:4c:4b:e6:23:25:1a:83:60:51:fd:24:bd:
ab:22:af:4a:3e:0d:ef:6d:e0:a9:ba:8f:9d:c4:c8:
36:51:c9:8d:cb:4a:6d:b2:7b:8a:27:76:a7:6d:0f:
cf:bc:4e:19:44:a6:34:e1:2c:a1:c4:12:32:ee:5c:
15:5c:1c:2f:12:93:f3:17:34:c4:e3:63:a2:c7:7d:
ea:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B1:4F:6D:8E:C9:B2:16:48:DD:55:D0:DA:28:16:EB:CB:5A:65:8F
X509v3 Authority Key Identifier:
keyid:34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:6d:d1:69:46:ee:01:49:46:a2:8b:7f:4f:ff:4c:8c:8c:5c:
34:55:ec:21:33:1f:36:cc:4c:ff:19:6d:a0:cb:fd:50:c3:fb:
38:84:cc:f6:68:14:13:2a:22:95:ff:12:1f:fe:8b:bf:c5:bc:
cc:71:a3:08:55:c6:d2:97:8d:84:ed:e2:d0:97:fa:85:8f:33:
1a:7f:38:f6:a7:82:76:4a:ca:eb:b8:03:38:c6:8b:78:1d:75:
d7:b2:63:98:53:7f:b6:81:05:46:d3:1b:2d:3d:5d:b3:2d:81:
12:9d:75:a4:68:a8:6c:24:38:ac:63:97:23:fe:56:fd:6c:94:
19:d8:8d:71:61:55:fc:77:86:e8:6a:01:44:8d:1a:20:b8:d7:
cd:e7:6c:5f:c7:86:fe:74:b1:bb:89:ce:82:37:2b:0d:c9:8e:
e7:b4:f1:e2:42:85:a7:2f:c5:01:dc:e9:19:4d:3c:1d:2b:b2:
b0:6a:06:28:a7:a2:7f:6f:37:2c:a4:92:59:60:11:0a:b3:79:
fe:1a:76:5a:56:5d:0f:e0:f8:ce:b8:62:b1:65:da:ad:eb:d5:
e5:49:af:c9:3b:85:e3:7e:3d:38:a6:ed:8a:02:36:9a:e9:37:
79:11:f0:18:2f:29:68:49:fc:0d:a5:d4:2c:9d:76:a4:08:56:
e6:a2:ff:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:25:46 2026 by rpki-client