
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier: OyHTfS5Kde5jnR0o2EHyYydZDcZ7WbYzx8pqI+IRcn4=
Subject key identifier: BA:8E:B7:7D:CB:D2:E4:3C:DA:3B:DC:40:9C:82:4F:D3:7D:92:C5:4B
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A0C63300F6C80FC25BC7CDDD7A550CD9C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number: 1779
Signing time: Mon 21 Sep 2026 23:00:26 +0000
Manifest this update: Mon 21 Sep 2026 23:00:26 +0000
Manifest next update: Tue 22 Sep 2026 23:00:26 +0000
Files and hashes: 1: 06Sc0eMiZFBHUMpf5oZXoh19f3g.roa (hash: BZKXDhv9T9YgTMEVFOAxa+R6XbC5n20pfmCWfGD92es=)
2: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
3: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
4: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
5: 9fAfolcDbPpkSV1otKIcXendNYA.roa (hash: PBjuHR+AHfo+N5mp1Bxfn4fzOi0CekebUR2R+DEvyuQ=)
6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
7: FQuyyAUwOpoJZfrmRGKK6-ndw40.roa (hash: B/8YuVQUar5Yxjk6MmDzMnSQzJL5WPBrnBmHUNZTs4I=)
8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: hLAaDMUIvo6nwnZOSHeQnHSR/FOOTmwMlRmbJjM+Jr0=)
13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
15: XxesCyVYVVaPIRTpgem_CTm9ZKk.roa (hash: xanv4N1gYNPYLbJXTsbNvnyGPwQdB4ptqGSiKaCbTSs=)
16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
17: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
18: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
19: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
20: lgPq05VsTUhvGsGQ6SSXMVBgkDg.roa (hash: T92tND3IEW1reiuj3gmoUrXVMN89kxo9MEcrKTaBfds=)
21: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
22: utF1Hb3bzsO09sTloqJeLO08SqU.roa (hash: zW94J0vK080nCwGZYwZncOPirWSIzruXkKW5U5VdEH8=)
23: wSS4BJ2U76e4Dyurfaq4avuSQoc.roa (hash: znF5EZMOm9zY/HcSGKCnQAjVgNjtIbUIosdWWRONibw=)
24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:33:00:f6:c8:0f:c2:5b:c7:cd:dd:7a:55:0c:d9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Sep 21 23:00:26 2026 GMT
Not After : Sep 22 23:00:26 2026 GMT
Subject: CN=ba8eb77dcbd2e43cda3bdc409c824fd37d92c54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3d:78:1d:4d:26:3b:b5:20:0c:7a:1e:9f:2a:
13:94:f2:39:3f:d6:c1:c0:25:d5:a9:38:70:2c:18:
e8:a0:a0:03:b0:38:f1:62:ed:b5:8a:05:64:aa:b1:
2d:6b:88:08:c4:13:ab:11:8e:e2:be:ff:e9:5b:f6:
50:06:0e:9c:2c:7e:53:9c:21:02:a7:7d:bb:2f:76:
7b:7e:8c:4b:e1:97:66:2c:e3:27:e8:6c:8e:73:eb:
2f:14:6f:bd:71:d4:96:98:d7:7c:27:51:c1:ac:de:
d6:57:ee:e6:bb:5a:44:8f:b2:7e:e0:dc:cb:fc:60:
5e:39:3b:eb:0f:3c:9a:05:2d:b1:9d:eb:d7:cc:fd:
b8:33:47:8f:55:64:f2:83:24:6d:49:48:84:30:58:
ae:3e:8f:39:21:15:db:79:ed:e6:06:54:25:18:9c:
30:6a:b2:77:4f:b2:8a:ef:51:be:69:e3:08:36:b4:
91:84:00:e1:0a:29:c8:9f:7e:80:55:74:70:91:c7:
c1:8e:e6:61:2e:12:4b:1a:96:1f:f8:9a:17:84:93:
fb:d9:a1:12:cf:c5:5f:4b:05:b3:82:bd:fa:b3:48:
15:5d:6a:ec:f9:e7:07:14:4b:ac:8a:ef:5a:b3:d0:
00:5f:75:58:7b:e2:9e:83:25:ea:af:06:78:45:fa:
e8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8E:B7:7D:CB:D2:E4:3C:DA:3B:DC:40:9C:82:4F:D3:7D:92:C5:4B
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:9d:cf:49:c5:71:c5:16:68:24:ad:38:e6:e8:26:ae:17:3f:
1e:7d:2b:6a:44:d0:e0:3b:2d:e2:7d:97:15:30:e8:94:22:ae:
3e:21:f5:75:79:b2:64:9e:09:6c:30:c2:52:2e:5f:4f:60:da:
2f:a1:e4:86:78:97:6a:2f:10:6c:e8:e7:a4:0f:35:bb:a8:b8:
8c:d5:6a:5d:38:0f:47:17:00:28:fd:54:b1:fd:51:53:bb:93:
5c:bf:fa:c2:d0:03:98:7c:02:77:6f:2b:f9:83:1d:9c:c5:ae:
4f:d6:27:35:90:2c:3c:8a:ae:22:d7:08:8b:65:29:86:18:29:
ed:a3:83:06:7f:1d:8a:07:bc:43:ea:74:24:80:70:4b:cc:15:
6d:fb:21:40:99:e2:78:cf:07:9a:7f:17:c4:3e:d9:b5:02:ba:
ff:c9:81:5d:a2:54:44:8c:95:ca:2a:5d:d4:a4:f2:c1:35:36:
7a:18:72:a9:6e:d3:17:c1:fd:dc:ce:38:d4:fd:47:a4:e0:26:
59:46:a1:58:2c:38:36:ff:e9:cd:03:96:41:89:6e:ae:32:93:
59:9b:ae:8a:03:03:41:15:dc:a4:06:4f:33:63:c9:98:a7:2c:
1e:9f:c7:60:24:18:9d:f8:58:ac:5e:7e:50:9c:11:3e:18:6e:
35:93:e3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:37:28 2026 by rpki-client