Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
File: NBSgbayFTb7mCYRYjex7MoS1qlA.mft (raw, json)
Hash identifier: ThV8+MNOZUUUQgfy9Qyo2W9qIxrxOKU3GKHz4tIeTTQ=
Subject key identifier: F9:46:92:2C:F1:2C:50:CB:36:AB:5E:81:B7:9A:37:80:77:F2:A8:75
Authority key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
Certificate issuer: /CN=3414a06dac854dbee60984588dec7b3284b5aa50
Certificate serial: 019FAAF532D86A2C7A3E8CC1ECE1900321BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
Manifest number: 1964
Signing time: Tue 28 Jul 2026 23:00:23 +0000
Manifest this update: Tue 28 Jul 2026 23:00:23 +0000
Manifest next update: Wed 29 Jul 2026 23:00:23 +0000
Files and hashes: 1: NBSgbayFTb7mCYRYjex7MoS1qlA.crl (hash: tuFh8UNBjV7IBzWlC8GuocBBAfQipkm6CRJk0ZLQfBE=)
2: _X5nMX01zIkdocFV_HQBvj4jIFY.roa (hash: 2Fkt6K/RwxywwOu2/bTk9f7aYl/AJ79Q108D3K95Ro8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:32:d8:6a:2c:7a:3e:8c:c1:ec:e1:90:03:21:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3414a06dac854dbee60984588dec7b3284b5aa50
Validity
Not Before: Jul 28 23:00:23 2026 GMT
Not After : Jul 29 23:00:23 2026 GMT
Subject: CN=f946922cf12c50cb36ab5e81b79a378077f2a875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:86:09:53:43:f1:31:19:98:0d:4c:5e:aa:4d:
bc:1e:fd:59:ab:ae:90:f0:ac:86:80:26:2e:9b:31:
f9:10:27:53:7b:7e:6e:e0:0d:da:48:a4:81:cb:e8:
1c:7b:c6:c8:ed:c1:da:76:4f:c6:ff:f3:16:89:d0:
30:ba:58:04:9d:fb:21:11:50:82:a1:e6:ae:09:ba:
85:2c:42:dd:3d:1c:70:9b:fc:1d:eb:a5:ca:d3:81:
6a:7e:d9:72:f7:f1:bd:2a:3c:16:06:9f:e6:8f:39:
80:1c:37:a3:ea:63:81:31:5b:a8:dd:a4:5f:1a:8a:
af:9a:72:ca:7d:1e:b7:55:20:30:93:1e:cc:81:f0:
ec:38:c1:4f:a5:cd:27:b8:19:79:b5:d6:2c:cf:31:
08:1e:3e:32:0c:03:d4:a9:de:04:f0:0b:b3:c4:ca:
ba:a3:eb:b6:3d:82:03:7f:a0:47:8b:aa:31:7e:4c:
41:e6:37:76:a6:44:db:a7:c6:27:c5:02:2c:17:8a:
fd:86:30:62:6f:0c:d9:35:69:d4:e6:62:ad:99:7a:
ce:bb:69:e3:6c:7c:49:6d:79:cc:1d:0c:29:e0:de:
6e:63:7b:e4:a8:86:8a:56:44:e2:0f:f0:01:35:d5:
73:9c:d0:c8:1d:0d:c9:5b:fc:0a:3c:77:8b:7c:bd:
df:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:46:92:2C:F1:2C:50:CB:36:AB:5E:81:B7:9A:37:80:77:F2:A8:75
X509v3 Authority Key Identifier:
keyid:34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:1c:57:17:51:c9:c9:51:a7:86:a3:02:e2:7e:60:93:98:db:
02:a0:ec:a9:f4:ff:75:37:c7:ad:aa:d2:99:80:c6:1b:1f:dd:
b5:44:fc:5e:6d:b6:f3:6e:3d:fd:c4:97:22:65:25:4f:0d:25:
dd:f4:25:37:b5:e6:62:2f:bc:c8:3f:7e:3b:05:7c:cc:14:2f:
1d:82:bb:6f:06:a7:21:c5:55:c0:0d:d2:92:d6:85:3e:e6:eb:
80:7f:62:93:ed:29:c7:b3:65:e9:13:72:41:65:42:89:16:9a:
2c:0e:50:65:e5:29:fe:03:69:26:2e:0b:a4:0d:51:d1:1d:05:
4e:e0:68:73:5c:62:ae:2a:13:b3:b6:cd:d7:a5:7d:af:ad:f3:
2d:51:ff:73:86:ed:16:ef:01:1c:12:68:bf:87:dd:c8:49:86:
2d:b4:ef:f8:ff:f7:24:7b:82:3d:62:6c:90:1b:b1:9b:73:1b:
2d:e5:63:01:46:ab:ad:40:00:8b:8c:b6:69:0f:bf:7d:c1:1f:
7c:bd:f5:fb:88:9e:f5:87:a9:be:97:33:79:d0:06:8b:00:ef:
5e:58:7a:e9:c8:ab:5b:29:6b:b2:c9:a4:0e:bc:7d:f0:58:4e:
c6:7a:7e:90:70:57:12:d2:bf:12:94:0a:75:7b:12:35:4f:12:
cb:93:df:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:24:36 2026 by rpki-client