Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
File: NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft (raw, json)
Hash identifier: og98SNuMuCU07PGdVbnpQgED5n02PSra2eNUocVH/fw=
Subject key identifier: AC:8E:F3:EC:E3:B9:E3:6D:2C:54:08:D6:A1:56:C6:3A:6C:AD:47:CF
Authority key identifier: 34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA
Certificate issuer: /CN=34921598b6a261aa4c3e67144ac876033253e0aa
Certificate serial: 019D2928ECA7337B950025E42037467D163A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 08:00:40 +0000
Manifest this update: Thu 26 Mar 2026 08:00:40 +0000
Manifest next update: Fri 27 Mar 2026 08:00:40 +0000
Files and hashes: 1: CawyeYNcMjrLuvvbcUuS250xWNk.roa (hash: y+f/df2HILWWbPxsyDOlBpH7jfN1Enb/8oL5EPuvVoU=)
2: NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl (hash: 0UA5enGNt1QKx74/X2T2eAbIAJr1Nc0PJ47mgNpBz7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:28:ec:a7:33:7b:95:00:25:e4:20:37:46:7d:16:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34921598b6a261aa4c3e67144ac876033253e0aa
Validity
Not Before: Mar 26 08:00:40 2026 GMT
Not After : Mar 27 08:00:40 2026 GMT
Subject: CN=ac8ef3ece3b9e36d2c5408d6a156c63a6cad47cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:aa:f0:b3:2f:b1:4c:d7:30:95:14:37:7d:cb:
dc:29:21:a8:21:cf:b0:3d:7e:2f:2f:10:a4:cd:19:
19:dc:30:b2:28:9a:2e:a3:97:ec:51:78:ce:cf:f0:
76:04:d7:ce:b3:f0:b3:77:77:eb:39:7f:39:58:59:
49:44:5f:af:59:b6:ea:83:d6:30:cf:ef:25:cf:49:
15:06:da:9b:92:a4:4b:d2:5b:51:bb:d5:60:33:1e:
3f:9a:b6:89:81:d3:cb:68:7e:8b:5a:70:8f:7b:e1:
81:0d:41:cf:ee:3c:d0:2e:c1:84:11:d3:38:16:26:
be:00:34:08:68:e6:fb:5f:d3:cc:27:89:ee:41:95:
51:f4:c4:9c:1a:c7:d9:e4:f6:96:e8:ec:ed:21:c3:
3d:4b:da:2e:32:72:3d:e7:03:60:1a:d7:83:b4:1d:
e1:7d:fc:a4:9c:ba:db:b7:3a:33:13:e2:b2:ed:91:
09:64:9b:89:cf:0d:51:1d:be:80:a9:53:73:f1:6b:
29:3e:1f:c5:ab:cc:ee:e1:67:5b:31:a3:6c:8d:2b:
ea:15:e0:4e:47:8f:98:4b:15:f7:ae:a4:fa:b2:f3:
c0:ce:1b:cd:9b:23:34:61:30:cc:7f:a7:41:6f:59:
54:05:ac:5f:38:63:2f:84:8c:5f:17:ca:34:3e:55:
67:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8E:F3:EC:E3:B9:E3:6D:2C:54:08:D6:A1:56:C6:3A:6C:AD:47:CF
X509v3 Authority Key Identifier:
keyid:34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:0e:60:66:5e:f5:a7:a0:37:9f:05:96:e5:10:1c:c4:a1:3c:
88:38:9c:9a:31:d2:ae:42:e2:90:79:24:e7:fd:bf:8a:71:ad:
0b:2c:56:01:07:6d:be:9c:17:68:20:3d:56:dd:ad:ed:e9:d3:
48:97:4a:89:47:73:68:ee:b0:48:a8:8f:8e:1a:04:8f:0e:51:
77:d0:24:8f:68:65:e9:55:e5:2c:0e:e9:10:6c:6a:38:71:bd:
73:b8:51:01:3f:d8:4d:15:d2:96:4c:92:1f:41:03:b8:de:aa:
24:71:ff:06:eb:12:ee:ac:7c:39:4a:bf:89:04:6f:43:ed:51:
76:4b:49:aa:85:7b:d6:04:6c:f3:d8:05:0c:fd:01:6e:32:b5:
30:61:02:e5:8c:66:28:3c:08:b9:d6:a0:42:ff:f2:ac:d8:d9:
94:70:53:74:ee:74:f2:4a:41:b5:f4:61:1a:fa:cd:b4:0c:44:
15:20:53:57:d6:91:e9:6e:29:44:78:e5:fa:7d:c9:be:7b:d9:
9e:23:18:8f:70:9b:49:ce:0c:76:7e:89:80:e4:d2:8e:7a:41:
76:fc:e3:ae:51:99:56:e2:8d:a6:4d:e9:1f:fb:af:4f:5d:22:
85:56:eb:0f:36:3a:06:ea:42:f5:b7:32:c5:d6:eb:87:8f:fd:
df:41:dc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:45:42 2026 by rpki-client