Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
File: NQBF99g86xMNjWlf_n1D2zgZ3lU.mft (raw, json)
Hash identifier: VhMFcEmBTt5fRqN0NEyEYNJJypyKWNbFuNdhGDA2owg=
Subject key identifier: BE:4A:68:42:74:27:F9:50:54:83:CA:9C:59:3E:D2:EF:AA:8A:82:D8
Authority key identifier: 35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
Certificate issuer: /CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Certificate serial: 019CABD9D1726B1957768D6B18F04281D784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
Manifest number: 170F
Signing time: Mon 02 Mar 2026 00:01:44 +0000
Manifest this update: Mon 02 Mar 2026 00:01:44 +0000
Manifest next update: Tue 03 Mar 2026 00:01:44 +0000
Files and hashes: 1: NQBF99g86xMNjWlf_n1D2zgZ3lU.crl (hash: eXBbAtNUtYg5aTWdE4r/PCiVWyqd9pSnqvo2pjWEJRs=)
2: cl6lci4JzB4m70ik3dAlKuTRGek.roa (hash: UR1yaGuf+Gktwnz/SkjvRQshLYqjDpB+pPtn2/1jM2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:d1:72:6b:19:57:76:8d:6b:18:f0:42:81:d7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Validity
Not Before: Mar 2 00:01:44 2026 GMT
Not After : Mar 3 00:01:44 2026 GMT
Subject: CN=be4a68427427f9505483ca9c593ed2efaa8a82d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e2:b7:0e:50:8f:3f:74:b4:e8:25:76:57:10:
bc:92:9e:74:db:5f:5b:0e:ee:5c:fa:77:b4:00:11:
52:75:98:6b:d9:b4:b6:0d:a2:64:73:7a:9e:c6:f0:
c7:f0:72:31:7b:78:f8:a1:14:ea:1e:4f:91:36:72:
a9:4e:34:ea:d7:91:6d:da:dd:88:bd:9c:c4:4d:a7:
1e:58:5d:ff:9e:b8:05:1a:7a:63:45:db:fc:5c:a3:
c8:d7:00:44:f7:2f:e5:9d:80:4f:ac:df:63:b9:8f:
a6:30:20:69:9b:74:df:4d:fd:75:32:96:b8:41:57:
af:80:0f:fa:03:cf:9f:da:a2:db:79:a9:c7:ba:f2:
29:f5:92:aa:31:4e:44:96:b6:9a:c0:49:29:37:5b:
77:68:45:ac:93:1f:9e:ac:54:81:22:93:80:2a:52:
0e:37:82:47:8a:a8:b4:a4:90:15:ef:51:8c:b7:16:
73:7a:03:b5:7f:ff:9b:f5:c9:22:46:8f:d1:dc:86:
c8:3b:31:87:7c:33:55:f3:cc:db:bc:5c:45:71:03:
30:63:c2:2a:cf:0c:f4:1c:71:2e:44:22:20:21:7e:
d0:56:61:06:1d:77:62:46:d1:bb:93:bc:be:e3:2d:
a7:a5:a1:36:5a:10:c8:c0:76:6b:cf:85:47:38:fb:
5d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4A:68:42:74:27:F9:50:54:83:CA:9C:59:3E:D2:EF:AA:8A:82:D8
X509v3 Authority Key Identifier:
keyid:35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:3b:30:12:b0:99:eb:4b:ee:c6:5c:52:dc:59:97:fa:bb:b3:
a9:c3:d7:8c:26:9a:f0:f3:88:b6:de:0a:22:8f:03:b5:ed:7f:
91:50:c9:2b:85:5d:46:e8:f4:21:19:05:e1:69:c8:df:33:c9:
b2:98:0a:0c:42:6b:df:32:c9:13:0c:00:05:e1:b8:c8:34:00:
a3:0e:99:60:8e:88:0d:59:f8:12:39:7f:dc:cd:e8:b6:84:f6:
9b:51:1d:d4:e6:40:6d:e5:23:fc:fb:40:f2:81:e9:81:d0:fb:
19:5b:11:da:93:55:32:c9:11:a2:9d:05:15:b7:f1:78:11:dd:
08:a8:da:00:72:25:1d:78:cf:b2:e4:87:fc:32:85:c7:13:2e:
5f:49:54:bb:de:b4:ee:a6:b8:87:e2:fa:ae:c6:6c:db:59:d0:
09:96:3e:63:0b:54:bc:cd:6e:17:9e:5d:64:ab:50:d9:c7:89:
44:ef:35:87:93:70:07:67:c4:31:9d:9d:e4:99:3b:43:bf:5a:
ba:cb:ee:5f:b8:b2:c8:b1:1d:59:e3:2c:36:68:c8:e3:ce:d4:
a6:8f:4d:35:bd:0e:84:24:c8:6c:2c:96:ea:be:34:a2:6d:74:
1e:ea:c5:7e:1e:47:ad:f3:1e:cd:fd:f1:85:0e:b3:ab:54:41:
aa:7d:b1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:26 2026 by rpki-client