Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
File: NQzOG50G3M6IVmWVNkmcFgM5E3A.mft (raw, json)
Hash identifier: zlRnpk242Sdrn0/0FjA5T3YDqFXd4jxaQvliw+y1QHM=
Subject key identifier: A3:38:1B:12:67:40:C0:A9:F0:94:E5:C8:07:5A:AD:01:D4:E4:71:E3
Authority key identifier: 35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
Certificate issuer: /CN=350cce1b9d06dcce8856659536499c1603391370
Certificate serial: 01A0CFDB47C5E271ABD97D6F49E854494317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 20:00:49 +0000
Manifest this update: Wed 23 Sep 2026 20:00:49 +0000
Manifest next update: Thu 24 Sep 2026 20:00:49 +0000
Files and hashes: 1: 1-6cYk3IV3azNTDxLV9HIv8JiNNU.roa (hash: 68Lmi8ud6HODb6vZV8sdTwSgFGYMvK/4iVqZEyTtA8M=)
2: NQzOG50G3M6IVmWVNkmcFgM5E3A.crl (hash: 6naXEgt9oEQDgS6fTFPN7j3efx9T97pNY/WPer2OADY=)
3: dls_8eGlW5noEKaT1vWyI3L6kis.roa (hash: Pm8+FvhXP2lEJSCgMp+/lPklylAzLJsm9W0xN+5smos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:db:47:c5:e2:71:ab:d9:7d:6f:49:e8:54:49:43:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350cce1b9d06dcce8856659536499c1603391370
Validity
Not Before: Sep 23 20:00:49 2026 GMT
Not After : Sep 24 20:00:49 2026 GMT
Subject: CN=a3381b126740c0a9f094e5c8075aad01d4e471e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bd:5b:39:fd:bd:45:40:9a:5a:7e:95:98:12:
ea:04:1d:c9:be:fe:8d:d6:1d:ea:6f:98:b0:3c:af:
ca:45:a9:b0:34:c5:b2:94:8f:67:39:a7:b9:ac:3f:
e7:5f:85:b5:d3:cb:43:c0:b2:d1:1f:ef:1e:45:04:
35:ad:cd:87:68:2d:f8:c6:18:fe:fc:e7:6a:63:4a:
c9:7b:3a:93:ed:69:9f:6f:0c:0d:f1:0b:d2:ac:77:
1d:a0:c8:75:9d:49:f8:d7:ec:cd:20:21:4c:ac:23:
8d:75:c8:4f:31:29:7f:dd:ed:16:53:a7:e4:07:82:
ff:c4:af:c4:02:dd:be:cc:a5:33:96:70:10:84:dc:
da:28:1a:0b:5c:bb:5a:3e:51:d2:6f:e2:2e:59:d0:
05:3e:66:c9:11:1b:7d:71:a1:0a:ca:16:4e:f4:5e:
bf:ed:af:d7:d1:dd:79:f9:c2:c6:8a:a2:de:d3:52:
54:f5:55:41:63:f8:3c:62:da:04:01:9d:b5:a8:06:
0c:24:70:53:a1:87:fe:04:2e:87:ff:7b:e6:72:d5:
c4:e0:46:d9:9a:80:78:d2:8f:89:a5:28:2e:9d:ae:
75:ff:e9:e9:87:9c:03:ba:4c:15:29:c7:11:81:86:
23:bb:a0:51:46:da:3c:5f:a1:8e:2c:9d:ce:7d:ad:
e7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:38:1B:12:67:40:C0:A9:F0:94:E5:C8:07:5A:AD:01:D4:E4:71:E3
X509v3 Authority Key Identifier:
keyid:35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f5:b9:2c:19:b1:18:ca:96:80:af:3c:01:a7:86:4a:d3:ed:
46:8f:a9:0f:44:ef:a3:1a:de:22:38:00:e9:23:9b:5a:56:7d:
fa:36:18:d1:6f:87:3f:45:61:b4:fd:a5:58:13:4d:29:a3:9f:
09:39:61:a0:16:c5:77:d5:49:bf:c3:34:6e:b1:9d:10:dc:01:
f7:15:bb:65:08:b4:cb:c0:a7:e7:19:14:4b:6b:16:6f:f4:1b:
e4:15:0d:c4:8c:58:d1:09:b5:90:40:c8:40:d7:6c:0a:7f:54:
37:c6:57:26:b0:6e:1e:1d:0e:3e:b8:b4:48:9a:c2:6e:98:d3:
77:3c:29:dd:c3:3a:cc:59:3c:cf:02:06:ea:ca:39:91:90:a0:
e8:79:3b:0b:1b:6f:63:f3:6a:1c:4d:9e:5f:fa:54:5a:a3:7c:
d0:db:96:77:2d:5e:c4:73:c8:61:41:0c:d3:0c:a9:76:d1:2c:
32:39:f6:e3:f5:62:20:ab:f1:42:a8:0f:da:9b:41:3b:c8:39:
1c:28:c1:72:8c:4d:13:ed:d6:a5:8e:e7:84:4f:81:c1:25:6f:
17:6f:1c:ec:18:78:d4:d5:18:f2:f0:28:00:40:f6:d0:e7:6f:
24:28:2a:32:d4:22:9f:47:7f:92:b7:b3:c9:56:c9:cd:51:18:
73:50:01:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:19:36 2026 by rpki-client