Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
File: NQzOG50G3M6IVmWVNkmcFgM5E3A.mft (raw, json)
Hash identifier: k3KeV2BkRMt55XzNj8CWTUDnfYSCh47Y5CL5QT/6Rrw=
Subject key identifier: D2:30:E3:16:90:4E:81:87:26:3A:3E:20:65:5B:85:D3:8A:67:20:6B
Authority key identifier: 35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
Certificate issuer: /CN=350cce1b9d06dcce8856659536499c1603391370
Certificate serial: 019FAC3EB67EF653DD64007234DD426A19F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 05:00:18 +0000
Manifest this update: Wed 29 Jul 2026 05:00:18 +0000
Manifest next update: Thu 30 Jul 2026 05:00:18 +0000
Files and hashes: 1: 1-6cYk3IV3azNTDxLV9HIv8JiNNU.roa (hash: 68Lmi8ud6HODb6vZV8sdTwSgFGYMvK/4iVqZEyTtA8M=)
2: NQzOG50G3M6IVmWVNkmcFgM5E3A.crl (hash: v5LuoSMI4vGqSKpjUHiEZDzfBIrksOXztoKKDGLpwT4=)
3: dls_8eGlW5noEKaT1vWyI3L6kis.roa (hash: Pm8+FvhXP2lEJSCgMp+/lPklylAzLJsm9W0xN+5smos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:b6:7e:f6:53:dd:64:00:72:34:dd:42:6a:19:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350cce1b9d06dcce8856659536499c1603391370
Validity
Not Before: Jul 29 05:00:18 2026 GMT
Not After : Jul 30 05:00:18 2026 GMT
Subject: CN=d230e316904e8187263a3e20655b85d38a67206b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:65:df:bd:2d:01:b4:a6:1e:09:5f:17:2a:dc:
4e:28:4c:ad:fd:3f:e4:63:34:bc:91:8c:62:2f:d9:
8f:b0:74:af:02:bb:0d:53:5a:4e:8b:05:a0:72:2c:
23:ab:ad:2e:76:7e:fe:b2:2c:08:0b:c8:77:df:0a:
d1:0f:2b:39:cc:f0:cd:42:cb:d3:2d:93:6d:05:2b:
db:94:c2:1c:19:89:d2:ad:b6:df:ec:0c:95:b4:82:
ea:3a:5f:33:5b:f7:33:ed:8e:ff:0c:d5:2a:80:ce:
40:4a:af:ee:05:c8:73:d8:7c:92:e7:9d:bb:c6:0c:
87:54:97:d6:7d:79:81:9a:2e:89:72:ba:aa:2c:65:
61:36:7e:7d:34:a6:90:54:87:15:25:73:16:11:d5:
d4:ef:15:d3:84:4b:c3:b9:ed:32:7a:02:54:b8:e3:
a6:59:b6:a5:70:11:5f:e3:e0:f5:13:05:37:68:ea:
1f:8c:c7:2a:4a:6a:72:73:12:cf:f7:a7:2c:ea:0b:
b7:35:ec:ea:ca:90:a7:e4:65:c9:17:c9:5d:d7:d6:
0a:7a:cb:e7:ed:4d:d1:65:49:eb:5f:a1:7f:1d:49:
e6:76:90:f8:72:06:8f:12:f9:5d:39:1c:10:b2:5b:
19:0b:11:ee:d5:e5:ed:11:51:f6:ad:71:f5:d9:1a:
72:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:30:E3:16:90:4E:81:87:26:3A:3E:20:65:5B:85:D3:8A:67:20:6B
X509v3 Authority Key Identifier:
keyid:35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:35:72:76:32:73:01:ed:74:7f:7a:6c:28:64:2a:8e:0e:d7:
25:55:a8:18:d8:d8:d6:5b:30:7b:11:f5:21:35:76:4c:2a:30:
9a:ce:41:cf:63:32:00:30:b4:a2:f8:d5:43:ee:b9:eb:27:6e:
52:96:5d:65:3b:9e:29:e4:69:3c:66:63:de:96:02:bd:63:21:
7a:14:46:28:fd:2e:c8:ce:d5:5e:2b:1f:56:df:59:0e:51:0a:
03:81:56:44:57:cd:7d:33:92:0a:53:be:fc:96:7d:eb:27:b3:
02:22:82:c9:e3:40:3f:f2:ff:ef:68:af:d0:5f:1c:52:96:8a:
86:10:9e:d4:73:8b:ca:5b:3f:71:cb:89:9e:3b:bf:a8:35:06:
a8:41:45:0b:e3:97:77:7e:d7:85:cb:4e:00:cc:b2:bc:fe:3b:
b5:ea:ec:d8:df:bf:95:31:03:22:52:c3:5e:ba:81:ff:38:12:
db:99:3f:f3:e4:0a:aa:9e:82:28:e2:62:cb:c9:e4:66:61:92:
6c:d7:aa:d7:d0:4d:c2:3f:7d:81:37:2d:5f:fd:43:1f:8a:63:
6b:de:18:de:d1:c1:2b:0e:37:2a:c3:45:82:f6:e2:4a:fa:05:
f6:1e:a1:6a:a3:1f:d7:15:15:98:01:b4:0f:05:3f:7c:de:81:
71:2c:25:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:44 2026 by rpki-client