Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
File: NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft (raw, json)
Hash identifier: GHqz+xce97jANxISxx+Tkb4Yw0i0XX1yKM4/X0wnr9w=
Subject key identifier: 03:85:6D:FE:3A:6C:98:B9:1B:7A:B0:B7:FC:D1:80:43:5C:07:65:EE
Authority key identifier: 34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA
Certificate issuer: /CN=34921598b6a261aa4c3e67144ac876033253e0aa
Certificate serial: 019E1E6C4EAAB6036BC173B80FF4D49C139E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 23:01:14 +0000
Manifest this update: Tue 12 May 2026 23:01:14 +0000
Manifest next update: Wed 13 May 2026 23:01:14 +0000
Files and hashes: 1: CawyeYNcMjrLuvvbcUuS250xWNk.roa (hash: y+f/df2HILWWbPxsyDOlBpH7jfN1Enb/8oL5EPuvVoU=)
2: NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl (hash: kvZ/Gu12Te/ghwhUEVvCPPfn1umblDu+PTHsw4fCqBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:4e:aa:b6:03:6b:c1:73:b8:0f:f4:d4:9c:13:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34921598b6a261aa4c3e67144ac876033253e0aa
Validity
Not Before: May 12 23:01:14 2026 GMT
Not After : May 13 23:01:14 2026 GMT
Subject: CN=03856dfe3a6c98b91b7ab0b7fcd180435c0765ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:83:12:fd:f1:78:f4:d7:c0:63:e1:85:0e:84:
b2:3f:1c:ba:e0:26:21:e9:64:3c:dd:df:38:a1:ad:
8a:d7:2b:b5:00:1a:07:44:9d:48:ff:4f:91:cb:c6:
21:5a:13:7a:f2:b8:82:ff:b5:b6:70:cb:79:a1:aa:
f9:35:b6:a3:17:b9:0c:3e:f4:64:f2:5e:40:80:23:
fe:91:d4:c4:79:3b:a4:34:d6:b8:35:e8:75:81:20:
20:43:36:27:d5:52:4a:4b:20:ae:dd:1e:db:d8:0a:
c6:04:4c:29:a0:cc:e6:0a:7b:28:05:e4:0b:9e:4f:
ce:d4:e4:01:07:5a:59:eb:5b:69:9f:e5:a2:07:e0:
3b:61:31:1a:30:3e:0e:0c:f4:52:55:68:19:7b:e8:
2a:67:e8:04:dc:db:c0:a3:50:cc:78:6a:c8:83:1c:
95:2f:12:a4:c0:c7:7f:05:aa:1b:9c:aa:f5:3b:6c:
05:88:03:ba:ac:db:45:a6:63:69:16:35:bf:67:75:
75:0d:70:6e:3f:3d:e1:11:3c:92:00:d3:cc:d5:87:
85:95:ed:2b:fc:96:9d:07:c3:ab:15:3e:6a:0e:ee:
33:e2:78:0e:e6:c7:83:5a:bc:7d:62:48:9b:77:7f:
9f:da:a0:4b:9b:b8:06:35:5c:46:e0:f0:58:cf:df:
9a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:85:6D:FE:3A:6C:98:B9:1B:7A:B0:B7:FC:D1:80:43:5C:07:65:EE
X509v3 Authority Key Identifier:
keyid:34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9d:15:ae:03:d6:36:30:31:48:00:84:14:22:35:a5:5e:92:
61:2c:af:2c:8c:6d:d5:b5:f3:6b:72:3b:b1:6a:37:5d:a0:5a:
18:78:bd:3d:45:65:21:55:a4:9a:e4:44:93:39:ca:12:d3:34:
c7:9a:ca:bf:08:34:04:a5:eb:d1:e5:2d:dc:92:0b:44:27:0f:
55:53:f9:48:30:10:24:53:a3:93:6d:44:09:31:d2:92:ca:b1:
56:3d:55:d4:0c:3c:d6:a4:ac:41:3c:f5:96:3d:2b:9b:1b:83:
6f:d9:00:49:24:c0:49:bd:5c:ce:87:93:1a:1e:e3:fe:8e:5b:
9a:a4:c6:dd:f1:74:ea:80:9e:21:05:ec:3c:6a:cb:1a:c3:07:
5c:61:c8:5f:f4:62:e4:1e:79:44:3e:78:aa:a9:a8:00:d0:db:
5c:e3:c9:73:d0:02:54:68:2a:62:cf:b2:76:c9:21:f0:77:eb:
58:07:d0:bf:c3:2c:96:3e:a3:32:8e:d1:c2:52:01:9b:7c:f5:
af:f6:51:08:6f:cb:6c:d9:48:a3:88:db:0b:41:3b:d9:02:e9:
67:1e:80:d1:e7:ea:7e:8e:98:a3:78:58:53:3c:fc:ac:60:8d:
ea:f9:e6:cb:20:b0:2a:05:87:4a:7d:51:7e:ae:8f:e2:d3:8c:
74:15:07:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:50:21 2026 by rpki-client