Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
File: NQzOG50G3M6IVmWVNkmcFgM5E3A.mft (raw, json)
Hash identifier: 6v9IlHj4c2asWMDeE5K5RXXrsbgSTVvJhWrcyMglfb4=
Subject key identifier: 40:29:8A:EA:E7:19:36:FB:53:C8:5E:71:F8:22:06:8F:C5:D3:70:2E
Authority key identifier: 35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
Certificate issuer: /CN=350cce1b9d06dcce8856659536499c1603391370
Certificate serial: 019EC0A433BB553FBFA35957F452BAFA2F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 11:00:46 +0000
Manifest this update: Sat 13 Jun 2026 11:00:46 +0000
Manifest next update: Sun 14 Jun 2026 11:00:46 +0000
Files and hashes: 1: 1-6cYk3IV3azNTDxLV9HIv8JiNNU.roa (hash: 68Lmi8ud6HODb6vZV8sdTwSgFGYMvK/4iVqZEyTtA8M=)
2: NQzOG50G3M6IVmWVNkmcFgM5E3A.crl (hash: IH4HdjrJPPsIIin81MS64CXYEKGH/ZceiX+oD8H8ojY=)
3: dls_8eGlW5noEKaT1vWyI3L6kis.roa (hash: Pm8+FvhXP2lEJSCgMp+/lPklylAzLJsm9W0xN+5smos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:33:bb:55:3f:bf:a3:59:57:f4:52:ba:fa:2f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350cce1b9d06dcce8856659536499c1603391370
Validity
Not Before: Jun 13 11:00:46 2026 GMT
Not After : Jun 14 11:00:46 2026 GMT
Subject: CN=40298aeae71936fb53c85e71f822068fc5d3702e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:16:ef:4c:73:97:c6:86:01:1e:cf:6a:50:25:
9e:69:c0:c5:9e:a6:17:9b:53:3c:e8:93:d8:7a:85:
50:b9:ed:73:68:f9:6d:4d:a3:60:09:d3:07:31:87:
97:33:75:a4:b7:72:69:2a:c3:11:a8:24:57:b4:51:
42:30:bc:d9:ab:c0:4f:3c:6d:d7:99:09:6a:ca:c9:
a9:87:1f:00:b3:29:ce:e9:59:63:c7:7c:a7:61:0c:
ab:a9:80:39:3d:13:3e:ac:c6:32:6f:6c:df:a4:e1:
83:4d:94:81:ac:4a:1c:b7:f8:25:ef:6e:c6:5e:86:
c6:fb:4c:5f:18:56:74:3e:30:d5:ba:d4:2a:dc:02:
82:31:20:9a:1d:9c:55:68:2e:cf:19:55:49:69:3e:
7c:e2:27:4b:81:15:b5:ef:9f:5d:a0:bf:83:97:2a:
92:a1:1f:f8:81:05:0d:bb:24:f4:bb:ae:d6:b4:f0:
6c:e0:a5:65:af:7f:70:54:0c:90:f6:fc:43:30:67:
0d:e8:e3:46:1f:35:14:a6:26:26:21:2d:7f:bb:8b:
9d:40:b2:ff:fe:fb:33:21:42:d9:6c:ba:cc:d2:bc:
23:d0:fe:8e:69:3f:0d:13:ba:7e:8a:e1:fd:90:44:
f7:d2:0c:0c:03:eb:75:d1:0e:a8:7e:e2:5e:86:a7:
82:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:29:8A:EA:E7:19:36:FB:53:C8:5E:71:F8:22:06:8F:C5:D3:70:2E
X509v3 Authority Key Identifier:
keyid:35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:81:0f:76:8e:67:77:19:26:26:a4:88:43:f4:86:0a:67:07:
fb:50:20:94:77:15:04:15:f4:93:05:30:88:6c:bb:c2:f9:12:
8e:a1:2f:8c:8a:51:3c:02:7c:3b:b4:90:c9:ec:6c:89:1f:d5:
9b:b3:93:73:b8:08:8c:00:d2:7d:15:81:bf:33:da:33:98:56:
8e:fd:02:da:a9:e4:80:03:16:fa:a4:36:53:c1:97:af:76:39:
9b:7a:12:73:a7:19:ac:d9:27:76:dc:86:dc:47:c2:7b:85:08:
9b:8e:de:85:ff:76:ed:81:1e:cb:3a:1b:cc:ef:e4:c1:56:05:
03:41:42:4a:c3:1b:f2:a0:b6:5b:66:dd:b6:20:2c:88:c7:0c:
87:d9:5d:c5:cd:0a:84:63:64:15:e3:c3:b2:02:01:7e:66:7c:
16:7c:d0:ac:91:e0:61:1f:54:28:30:ef:db:1a:e9:e9:9f:a1:
e1:5e:30:ef:6e:c4:19:5b:f4:5c:cc:17:c2:4a:ec:69:b6:26:
d7:11:a3:30:05:ad:7b:4a:b1:a0:3f:48:51:ca:0c:9b:b7:1f:
9b:d3:4d:9c:6f:d9:10:ff:81:24:67:73:55:03:62:21:3d:fb:
17:64:ef:d5:c1:50:6c:03:a7:8d:20:cc:dc:9d:bc:48:fa:72:
80:f9:c2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:58:56 2026 by rpki-client