Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
File: njApS35GRarttUZy1IBlsbHOvGI.mft (raw, json)
Hash identifier: dfKmN6g0aofsSLfes5yQec9Zwm3q28dFMHMjsGSTKcw=
Subject key identifier: 1B:91:86:92:9C:8C:F5:6B:05:47:34:40:0A:58:30:68:78:6F:67:79
Authority key identifier: 9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
Certificate issuer: /CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Certificate serial: 019D292980794D877E5BE8223D1AE04A4828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
Manifest number: 14A7
Signing time: Thu 26 Mar 2026 08:01:18 +0000
Manifest this update: Thu 26 Mar 2026 08:01:18 +0000
Manifest next update: Fri 27 Mar 2026 08:01:18 +0000
Files and hashes: 1: 2V-Naz0jnwf8V8dIgYhxF_-rK-o.roa (hash: XdSVxHJfUXdEh13NSWMZmFTpZfOjmyPDnSsH+zDSqy0=)
2: njApS35GRarttUZy1IBlsbHOvGI.crl (hash: fNMu7XiGggH/KmQgkkRi5D2Ahge6Xn2BiU4qabewVfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:80:79:4d:87:7e:5b:e8:22:3d:1a:e0:4a:48:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Validity
Not Before: Mar 26 08:01:18 2026 GMT
Not After : Mar 27 08:01:18 2026 GMT
Subject: CN=1b9186929c8cf56b054734400a583068786f6779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ad:52:46:fa:c4:12:1e:b1:75:12:56:a1:50:
31:9d:da:ed:29:be:ad:5b:0a:7d:9e:af:e7:33:39:
24:63:28:06:9f:b6:82:e6:f5:3a:bb:07:05:33:85:
ec:1b:31:2c:43:86:05:0d:80:00:ba:cc:17:28:de:
3a:67:a3:56:2d:02:dc:16:d1:bd:aa:07:fc:a3:fd:
37:fb:8f:df:0b:f2:82:cf:8d:72:e9:67:ff:ee:20:
46:8f:2d:a5:35:3b:87:11:2e:06:a1:88:07:49:e4:
a9:6d:82:1c:7a:e8:8e:f3:4d:f4:bc:fa:0b:dd:bb:
fd:1a:30:bb:0c:83:1d:89:a8:c0:69:01:a6:7f:02:
24:ee:b9:eb:f9:ce:85:0f:96:85:d4:d4:a4:53:57:
6c:5b:ba:e7:60:c1:2e:bf:4a:75:52:ce:f6:e4:4d:
b1:c3:9d:0b:04:84:f7:b8:24:52:7d:5d:b5:22:8b:
ce:96:5a:86:d6:ed:38:a0:9e:fe:a7:f5:1e:6c:8e:
a0:e5:e6:c3:e1:3a:05:54:f8:bd:1d:28:d2:bc:d8:
82:2d:0b:c5:0b:54:60:ef:e0:17:06:71:cd:5b:4b:
a7:28:4f:af:2b:cb:fa:cd:63:6f:70:82:ab:eb:4f:
52:ff:0d:4d:3e:ea:65:0d:e1:cf:c6:40:29:d4:d9:
c0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:91:86:92:9C:8C:F5:6B:05:47:34:40:0A:58:30:68:78:6F:67:79
X509v3 Authority Key Identifier:
keyid:9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4b:cd:6c:2d:89:38:ef:a3:18:48:e7:e3:08:ba:d5:9b:3b:
95:eb:c1:6f:c7:ae:9d:a5:5e:30:82:3c:da:ed:91:e1:82:07:
61:fc:b8:b0:fa:3a:83:4a:72:a2:32:7a:74:27:e2:b7:93:98:
81:ce:06:16:4a:a8:3a:9a:88:f0:b2:ea:52:5f:09:bd:70:9c:
fb:f6:c4:a1:0c:80:be:3d:40:8f:e2:35:80:3d:ae:19:20:95:
ff:f2:53:12:2e:1d:53:6a:ea:23:2a:6c:35:a5:df:eb:69:b7:
d7:11:aa:4f:21:2c:01:27:c5:bc:a0:4e:52:11:9c:25:50:1e:
b4:79:b2:1c:58:e1:90:72:ca:ac:26:c0:e2:05:9f:06:38:7b:
03:81:06:e9:2f:16:ad:34:70:4d:4a:8b:d3:33:6a:bf:a5:be:
3d:ee:f0:c6:6b:72:7a:fc:7f:02:41:38:3d:47:39:7f:aa:0f:
58:36:8d:35:aa:ab:cd:79:3a:0a:87:a7:1a:0c:ce:fd:54:a9:
14:8d:8f:57:41:c7:0b:ec:66:39:e9:e1:58:42:17:a7:ed:af:
f3:e5:98:ac:94:84:58:f2:8e:bb:b2:7d:8b:14:8c:cf:8d:33:
3d:28:49:2a:55:24:00:6f:4f:0d:92:6e:ce:ec:30:ce:16:87:
18:f1:fd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:47:26 2026 by rpki-client