Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
File: NQBF99g86xMNjWlf_n1D2zgZ3lU.mft (raw, json)
Hash identifier: I7DBATiRIDdbQxfT7kgyoP3vQY3FwWexuWVvsw1uD+8=
Subject key identifier: 9B:BD:42:28:6A:8C:F7:78:75:FD:C5:FB:B5:FF:1F:E8:6D:58:9C:3C
Authority key identifier: 35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
Certificate issuer: /CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Certificate serial: 019CA9EA8DE68755727985BCCCCDA615B524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
Manifest number: 170E
Signing time: Sun 01 Mar 2026 15:00:46 +0000
Manifest this update: Sun 01 Mar 2026 15:00:46 +0000
Manifest next update: Mon 02 Mar 2026 15:00:46 +0000
Files and hashes: 1: NQBF99g86xMNjWlf_n1D2zgZ3lU.crl (hash: A03sJffviRx0qUc1E37z3PxJ+MUS4gXQoTf1RwjSec8=)
2: cl6lci4JzB4m70ik3dAlKuTRGek.roa (hash: UR1yaGuf+Gktwnz/SkjvRQshLYqjDpB+pPtn2/1jM2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:8d:e6:87:55:72:79:85:bc:cc:cd:a6:15:b5:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Validity
Not Before: Mar 1 15:00:46 2026 GMT
Not After : Mar 2 15:00:46 2026 GMT
Subject: CN=9bbd42286a8cf77875fdc5fbb5ff1fe86d589c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d0:9f:38:a7:6f:bd:bb:56:52:06:f2:32:88:
ad:39:51:12:b6:cc:fc:e0:09:2e:dc:68:cd:35:3b:
74:a3:c6:14:08:93:f0:61:06:d7:12:22:9e:1d:75:
6f:bf:67:77:86:77:5b:13:7b:ba:80:51:1b:21:4f:
17:05:36:44:72:74:98:bb:36:6a:47:54:85:b7:63:
66:5e:5b:ad:df:43:0a:17:ae:f0:fb:f0:08:6e:4b:
d3:ae:b5:b4:5e:9e:97:dc:3a:12:72:ce:fa:9f:cd:
5a:ac:5c:fe:f2:96:68:eb:8a:9e:da:de:3b:e2:4f:
77:67:ea:e7:08:57:6f:69:b2:e8:14:f4:fe:b0:1c:
23:36:68:dc:45:c6:79:a4:ef:96:fb:98:18:78:0e:
6c:54:b4:28:71:2b:9a:37:24:e9:2c:cb:b2:2f:6f:
ab:be:3d:82:52:94:ad:b6:46:fc:c9:83:6b:0b:6b:
f8:45:89:fe:89:94:d4:cd:2f:00:19:22:da:53:bb:
4c:d7:a6:ab:16:3f:80:2f:75:a7:ce:ec:2b:a0:51:
85:5f:39:9a:2e:0a:3f:fe:9c:88:fc:9e:16:a4:f5:
13:1f:0b:01:8c:6d:31:b1:e1:87:b2:c6:91:93:79:
08:3b:31:30:01:aa:75:91:0b:d2:8f:15:9f:82:92:
13:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BD:42:28:6A:8C:F7:78:75:FD:C5:FB:B5:FF:1F:E8:6D:58:9C:3C
X509v3 Authority Key Identifier:
keyid:35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:cc:b7:63:5a:45:05:76:58:0b:26:6c:5d:c9:f7:eb:ac:f0:
93:16:b0:dc:26:f1:cc:15:6e:b3:58:5f:88:15:85:3b:a6:85:
01:82:3b:ad:6b:88:81:2e:21:ed:4d:f4:e8:59:1a:26:37:c8:
5c:7a:3f:47:94:55:f7:5e:0a:3b:b9:e2:75:8a:71:7d:a2:75:
a4:85:38:cf:df:23:54:fe:d8:40:03:3f:8f:cf:15:0f:76:f0:
70:aa:d9:d8:18:21:4f:96:6a:ba:2f:23:b4:7b:7d:d2:19:e9:
02:82:ea:e1:a5:32:fb:05:6a:4a:90:61:02:bb:68:d9:97:78:
a9:74:97:2c:b4:43:35:15:4a:bd:90:09:c1:7f:09:b1:57:2b:
22:5b:f2:0f:40:bb:12:6a:66:37:20:b4:ee:14:d0:e4:70:68:
a1:66:10:f7:a0:bc:37:4f:c0:17:86:dd:47:89:32:51:58:7c:
b9:11:56:c5:05:01:a7:c9:79:da:14:ea:ab:c9:e2:a1:b2:16:
15:7a:72:ff:4f:d1:86:60:53:62:d0:aa:e1:6e:63:0d:69:8f:
e8:74:67:f5:4e:c5:9e:5f:cd:9b:ab:fd:0f:9d:a2:57:12:34:
7e:07:86:56:2d:b2:e9:f1:d4:93:85:34:0f:dc:57:8b:d9:ff:
8f:ff:6f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:08:08 2026 by rpki-client