Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
File: NQzOG50G3M6IVmWVNkmcFgM5E3A.mft (raw, json)
Hash identifier: Q9xw3ZGafZMgqwHFaXef55meikQtgz/6AaNI1FIjGto=
Subject key identifier: 9A:EF:77:D7:71:90:E3:4C:BE:A7:81:34:AB:D1:EC:E7:9B:3D:C4:19
Authority key identifier: 35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
Certificate issuer: /CN=350cce1b9d06dcce8856659536499c1603391370
Certificate serial: 019D9B19AF5F6B68D830893BA573C0D5A44C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 11:00:44 +0000
Manifest this update: Fri 17 Apr 2026 11:00:44 +0000
Manifest next update: Sat 18 Apr 2026 11:00:44 +0000
Files and hashes: 1: 1-6cYk3IV3azNTDxLV9HIv8JiNNU.roa (hash: 68Lmi8ud6HODb6vZV8sdTwSgFGYMvK/4iVqZEyTtA8M=)
2: NQzOG50G3M6IVmWVNkmcFgM5E3A.crl (hash: KbO/zhj/XX07LW/RW1yLGMaZw3ld2HcYQel+o6nxlAA=)
3: dls_8eGlW5noEKaT1vWyI3L6kis.roa (hash: Pm8+FvhXP2lEJSCgMp+/lPklylAzLJsm9W0xN+5smos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:af:5f:6b:68:d8:30:89:3b:a5:73:c0:d5:a4:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350cce1b9d06dcce8856659536499c1603391370
Validity
Not Before: Apr 17 11:00:44 2026 GMT
Not After : Apr 18 11:00:44 2026 GMT
Subject: CN=9aef77d77190e34cbea78134abd1ece79b3dc419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fa:0b:d8:23:d4:09:fd:24:a9:db:86:6f:3a:
7e:16:1d:e8:c1:88:87:ca:eb:fa:e4:a2:95:1f:52:
2a:5a:72:70:6a:cf:57:37:fe:05:ca:5d:ea:ea:53:
5e:9e:90:da:c5:87:71:31:81:22:05:a7:2d:92:a2:
4b:19:02:5b:87:dd:4b:3a:02:f1:e8:83:f0:2b:4f:
28:7a:85:ad:69:be:65:69:b3:1f:80:ac:57:26:2a:
00:98:97:06:ce:99:93:09:05:b5:f1:2b:04:8e:c6:
fa:47:1d:fd:da:dd:10:8d:30:4a:95:35:ef:bc:b6:
1b:d5:70:e5:7c:99:7b:ad:29:5b:73:78:e8:c2:60:
09:5c:de:31:1e:12:63:9d:71:75:df:c3:f2:5b:d3:
d2:46:61:83:d7:ff:ed:d5:e6:fa:79:f4:e4:81:7d:
29:dd:a7:1c:99:63:f4:ae:97:bb:6b:3f:d6:e8:cb:
5c:80:f5:cc:6a:35:03:65:5c:46:ae:57:e8:7b:06:
2e:10:6a:0b:f3:ac:d4:16:46:f3:7b:bd:96:de:6c:
2d:c5:03:3c:1f:66:31:ce:d9:59:88:8f:82:d3:2a:
40:4a:78:a5:a5:4c:c7:28:48:0f:12:76:a1:2d:35:
d3:38:f2:8d:82:d4:c8:81:de:01:95:47:80:e3:2a:
c3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EF:77:D7:71:90:E3:4C:BE:A7:81:34:AB:D1:EC:E7:9B:3D:C4:19
X509v3 Authority Key Identifier:
keyid:35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:01:be:ac:04:18:ac:1f:49:09:73:c3:a4:0f:c7:c3:2a:40:
95:e6:dd:71:d4:9f:ae:25:3e:3f:23:be:8a:21:00:64:21:09:
d5:3f:89:64:d8:f6:a5:61:5a:a0:b3:8f:56:33:d8:a9:47:b4:
06:4a:44:b4:89:77:74:79:65:37:15:d4:32:e8:30:9d:49:2e:
97:04:7c:d6:d8:96:bd:20:3f:d2:ef:a5:dc:84:5b:3c:40:94:
6c:cb:c5:aa:57:2e:f6:08:4d:29:93:d3:d5:5c:e4:5e:a9:28:
86:3e:30:bd:f8:cd:3f:52:a8:ab:69:67:dd:58:83:d5:63:9d:
ae:5b:e2:b9:70:48:7b:42:74:9f:80:63:e0:f8:f3:a5:14:37:
2e:45:66:13:4d:0c:31:f4:7f:3e:cf:a7:9c:bc:60:22:d0:46:
b9:3c:bd:bf:f3:16:46:01:7a:e9:fa:30:90:5a:ec:00:45:e4:
98:c3:39:cb:74:d2:6e:9e:fa:75:db:d1:cb:1d:de:e9:6e:9a:
04:de:56:5a:11:d4:a5:51:48:12:67:b1:8e:3f:19:66:24:91:
13:c6:f1:01:57:9f:bf:15:5c:03:fc:d8:2c:e1:5c:3a:3b:c7:
0a:36:da:ad:24:41:17:25:8d:d0:d7:26:29:40:16:e6:99:84:
65:31:8a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:07:10 2026 by rpki-client