Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
File: NQzOG50G3M6IVmWVNkmcFgM5E3A.mft (raw, json)
Hash identifier: T+vp6uK3+2Y0cSGNT4kpe/hWuZ5YYerqw8nMF7x6czY=
Subject key identifier: D4:8D:E3:36:30:D5:F2:5D:DC:F9:A2:9E:2A:52:8E:EA:3D:06:47:B4
Authority key identifier: 35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
Certificate issuer: /CN=350cce1b9d06dcce8856659536499c1603391370
Certificate serial: 019CABA25BF07B16A78FCBECDBCDEF307DC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 23:01:10 +0000
Manifest this update: Sun 01 Mar 2026 23:01:10 +0000
Manifest next update: Mon 02 Mar 2026 23:01:10 +0000
Files and hashes: 1: 1-6cYk3IV3azNTDxLV9HIv8JiNNU.roa (hash: 68Lmi8ud6HODb6vZV8sdTwSgFGYMvK/4iVqZEyTtA8M=)
2: NQzOG50G3M6IVmWVNkmcFgM5E3A.crl (hash: Ck/J2Grc67tYI1CsTG30lj3FQSVBCPqQqHm3u68lxlY=)
3: dls_8eGlW5noEKaT1vWyI3L6kis.roa (hash: Pm8+FvhXP2lEJSCgMp+/lPklylAzLJsm9W0xN+5smos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:5b:f0:7b:16:a7:8f:cb:ec:db:cd:ef:30:7d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350cce1b9d06dcce8856659536499c1603391370
Validity
Not Before: Mar 1 23:01:10 2026 GMT
Not After : Mar 2 23:01:10 2026 GMT
Subject: CN=d48de33630d5f25ddcf9a29e2a528eea3d0647b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:97:e5:5c:86:31:98:27:a2:27:1d:88:86:72:
2e:85:c1:26:58:3b:4c:4d:22:0c:b0:64:cc:70:5d:
c9:19:28:11:d2:83:df:55:fe:bc:ec:b8:dc:24:41:
71:e6:b7:02:29:9e:c6:fe:35:91:01:1f:1b:a8:2a:
3c:8f:c6:39:0e:83:f4:2a:75:b8:9f:dc:e4:3f:b7:
20:c3:77:f9:99:83:42:96:0a:00:08:d0:d2:53:be:
4e:92:cf:f8:08:03:ca:2a:62:ad:7b:a5:81:de:c0:
87:72:4e:6e:c0:99:31:9b:78:68:16:1a:b5:2c:d3:
56:9b:d4:2a:5a:50:36:68:04:ef:b5:7d:36:4c:62:
70:42:3f:91:98:eb:0b:7c:de:c7:1e:0e:a9:c8:cd:
ba:7e:fb:49:3e:02:55:4e:8d:ad:f2:dd:ca:98:6a:
8e:40:a7:8a:b4:48:1d:db:80:f1:c6:9d:ab:3d:87:
e3:c1:ba:98:dd:09:d2:4f:ba:dd:d7:8c:0b:c6:31:
47:5a:39:bc:56:dc:e4:64:ad:c6:d2:8d:82:bc:28:
25:03:20:e1:da:fa:ee:aa:8b:9f:f2:7d:63:e1:27:
9a:ce:a3:6d:28:7a:d0:ec:2a:d1:51:2a:cc:08:1b:
47:70:d0:6d:08:0f:b2:8e:7c:8a:4f:de:56:04:e2:
85:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8D:E3:36:30:D5:F2:5D:DC:F9:A2:9E:2A:52:8E:EA:3D:06:47:B4
X509v3 Authority Key Identifier:
keyid:35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:b2:1e:eb:b0:2f:bb:18:10:b6:d1:fa:a4:8d:dd:c6:e2:9b:
60:27:44:f6:88:73:5b:05:fb:3e:e5:2f:a2:49:e3:0d:20:cc:
21:03:e7:08:e4:78:3f:f7:41:ff:6b:c3:17:bb:f6:96:6e:a7:
ac:7b:45:cf:ea:8e:40:79:46:af:9b:0f:c0:a8:0b:e7:19:47:
ed:25:48:6d:31:d5:f9:2c:f1:b3:aa:7d:bb:6e:3f:9a:1c:18:
8f:e5:74:6d:6c:d6:ba:d1:6d:d9:5d:65:c3:26:4a:c6:b9:3e:
ab:94:cb:74:d2:65:4f:82:c1:80:c8:64:02:b6:3e:d8:3d:60:
bc:3f:93:83:d7:da:30:3e:55:3b:7c:2a:0d:c9:a1:f7:f6:17:
83:fc:a5:31:c9:80:d7:cc:86:c0:d1:8d:be:31:9a:fd:56:48:
b7:78:40:c5:3c:47:11:f4:02:0d:9f:2c:36:13:81:18:01:63:
5d:40:35:34:22:2f:4a:8c:7f:cc:33:04:e9:5b:fa:6f:84:34:
67:a3:e1:8f:9e:0f:92:2f:a7:d6:90:b8:64:0a:2a:a7:5c:96:
57:b3:30:e9:17:ce:67:d4:71:36:c2:f5:e6:39:ba:db:cd:30:
a8:a5:49:3e:6d:2e:9b:d5:27:6c:ec:79:98:63:3b:a2:c0:a0:
dc:cc:ec:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:41 2026 by rpki-client