Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft
File: NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft (raw, json)
Hash identifier: ZCB2UAqx+Ky11UGOTtw9cZnG3Yfg2ABg0vnnMSZlQ4Y=
Subject key identifier: 28:CE:D3:6D:13:2C:06:D8:91:F0:4A:CB:25:1E:1D:CB:9A:32:04:5C
Authority key identifier: 35:01:77:24:57:E0:F8:27:B9:E9:20:B0:0C:D1:14:82:4A:5F:A6:21
Certificate issuer: /CN=3501772457e0f827b9e920b00cd114824a5fa621
Certificate serial: 019CAA58E7D08FC46CEC5EA27DF6F89D180F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQF3JFfg-Ce56SCwDNEUgkpfpiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 17:01:19 +0000
Manifest this update: Sun 01 Mar 2026 17:01:19 +0000
Manifest next update: Mon 02 Mar 2026 17:01:19 +0000
Files and hashes: 1: CDtNseOhTSyvHnBtVtY8_yl_mqo.roa (hash: QVByv0+71qydMndfr8rOHWUwhEqYjIZJsdGpilbLsSU=)
2: NQF3JFfg-Ce56SCwDNEUgkpfpiE.crl (hash: em9jIikeMG/B+VSkIfJo/OfUvDn2fH3SsvtBGeVgFIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQF3JFfg-Ce56SCwDNEUgkpfpiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:e7:d0:8f:c4:6c:ec:5e:a2:7d:f6:f8:9d:18:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3501772457e0f827b9e920b00cd114824a5fa621
Validity
Not Before: Mar 1 17:01:19 2026 GMT
Not After : Mar 2 17:01:19 2026 GMT
Subject: CN=28ced36d132c06d891f04acb251e1dcb9a32045c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8b:29:1e:24:72:e6:5a:b3:75:40:b8:46:9d:
cd:62:92:ac:1d:e6:74:f4:fc:fc:d5:16:a0:da:27:
32:fc:21:9f:c7:20:74:25:0e:4a:7a:2d:39:cd:6e:
83:74:ca:83:7a:f0:4d:b5:ea:31:9a:4c:c3:28:5d:
37:48:76:d4:61:82:5a:58:93:f1:47:53:92:7a:ae:
c5:a8:4a:5a:2d:65:0f:2b:27:42:dc:9c:f9:cf:03:
05:11:b4:08:0b:6a:63:cf:86:34:ef:1c:be:e8:eb:
35:99:b3:16:85:78:13:08:13:3d:7d:c3:ba:a0:36:
c6:4c:7f:c8:76:43:7b:3c:42:27:34:56:c4:78:ca:
7f:c3:95:fb:ad:23:a6:b6:13:b6:fc:ab:57:0e:e6:
65:a4:fc:ab:94:6d:52:97:5c:01:d6:35:44:8c:9b:
b6:1f:f5:15:f6:9e:fc:23:2c:e2:8d:2b:4a:7e:68:
16:30:5a:e7:a5:73:d9:aa:cb:74:1c:f9:97:b5:d8:
ac:ab:71:00:93:60:89:f0:cf:48:b5:c9:5f:3c:5e:
43:a8:e1:a1:8a:69:69:fd:8a:9e:49:f7:57:06:b4:
fa:71:00:32:df:d1:88:7c:73:71:63:93:a9:39:3f:
ea:8a:00:8d:8f:c9:55:79:14:49:69:e6:d4:9f:9c:
bc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CE:D3:6D:13:2C:06:D8:91:F0:4A:CB:25:1E:1D:CB:9A:32:04:5C
X509v3 Authority Key Identifier:
keyid:35:01:77:24:57:E0:F8:27:B9:E9:20:B0:0C:D1:14:82:4A:5F:A6:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQF3JFfg-Ce56SCwDNEUgkpfpiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:e1:3a:f8:d0:e6:de:4a:f7:2a:c6:1a:e9:ad:c0:3a:69:ab:
a8:aa:ef:6e:d3:37:b6:1c:aa:e5:4d:02:59:e3:7a:e6:9b:77:
7b:6e:e6:3b:41:fb:87:f5:70:39:62:48:bc:b7:93:32:ae:db:
ad:81:b4:2b:7e:99:66:31:d7:bf:a5:1c:91:48:d7:8e:db:43:
f8:6f:3d:0b:b5:a6:77:f3:9b:5d:80:5e:89:ca:2e:4a:4e:0d:
da:4d:b2:da:d3:29:90:2e:4e:86:57:23:77:14:c9:89:14:de:
01:28:09:d6:23:a2:f2:53:d5:25:bb:2b:9f:23:d6:0c:46:32:
79:c6:a4:cf:35:39:f4:a9:5d:79:fb:24:8a:a7:fa:4b:06:8f:
7b:ee:1f:49:5f:67:b6:73:b4:a2:e8:de:34:b3:f4:60:54:68:
a7:0c:53:7a:8b:ee:4b:ad:37:db:81:78:1a:4a:94:2e:d0:1c:
db:45:75:f1:1f:a3:ef:19:97:8c:28:0b:f0:9a:4e:e1:1d:3e:
2d:41:55:6a:bd:42:c2:8b:7b:7b:da:82:76:cd:ac:ea:57:cb:
63:d8:2e:cb:5b:f5:85:76:37:66:a2:a2:43:c6:57:33:85:42:
57:2f:b7:1f:f2:d1:10:22:17:96:ce:96:61:ae:46:42:f3:33:
46:a2:aa:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:51 2026 by rpki-client