Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
File: NBSgbayFTb7mCYRYjex7MoS1qlA.mft (raw, json)
Hash identifier: qpXkgUQKe441wsiqDTW3UAtAXEFMzlxxdoPX2X0hCxY=
Subject key identifier: 23:28:B0:7F:0D:CE:5C:33:2D:24:A3:4D:39:B4:93:E8:DD:C7:9A:33
Authority key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
Certificate issuer: /CN=3414a06dac854dbee60984588dec7b3284b5aa50
Certificate serial: 019CAC47349743C1E943D5148EE4D7FFA8F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
Manifest number: 17D7
Signing time: Mon 02 Mar 2026 02:01:13 +0000
Manifest this update: Mon 02 Mar 2026 02:01:13 +0000
Manifest next update: Tue 03 Mar 2026 02:01:13 +0000
Files and hashes: 1: NBSgbayFTb7mCYRYjex7MoS1qlA.crl (hash: eSVqk3aPPoUHs2amW7F2uLXIZ+/SsZ92RmrN66rGG7g=)
2: _X5nMX01zIkdocFV_HQBvj4jIFY.roa (hash: 2Fkt6K/RwxywwOu2/bTk9f7aYl/AJ79Q108D3K95Ro8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:34:97:43:c1:e9:43:d5:14:8e:e4:d7:ff:a8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3414a06dac854dbee60984588dec7b3284b5aa50
Validity
Not Before: Mar 2 02:01:13 2026 GMT
Not After : Mar 3 02:01:13 2026 GMT
Subject: CN=2328b07f0dce5c332d24a34d39b493e8ddc79a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e5:82:73:70:14:60:4e:bd:e5:9e:a7:a9:09:
03:29:14:d4:12:b9:bb:62:39:8b:a9:7a:e3:10:bb:
33:eb:40:86:60:ee:8b:99:45:db:4e:78:25:d1:a3:
46:90:86:0f:d4:db:b4:7c:bd:e4:d1:d5:59:be:0c:
5a:63:fe:46:64:13:2e:46:45:12:e8:05:12:63:7a:
7f:9d:b2:0e:e8:bb:67:84:b8:ab:d2:2a:65:e9:24:
56:a2:fc:87:02:05:79:de:f4:a3:98:3a:a7:d3:78:
60:05:17:0e:9e:c8:91:9b:e1:38:a4:f2:ea:ad:bc:
ee:b0:eb:29:23:57:81:25:ee:21:8a:ac:a9:96:78:
bd:b4:fb:b2:04:84:ea:cd:11:97:27:26:a2:25:04:
c1:d1:90:36:cc:ba:c8:8e:08:d7:d1:91:34:4a:75:
c8:ff:a5:41:ee:64:5b:51:67:09:fc:af:f3:09:b3:
fe:1c:09:5a:56:d4:a1:e2:3b:b8:59:a8:ec:fd:83:
36:ba:4b:6f:7d:d5:48:0e:e8:77:61:47:87:d7:18:
ac:f8:c6:a6:4e:dd:95:4e:7f:22:82:06:4f:28:cf:
c4:f7:1b:92:21:2a:bb:97:f2:7c:1c:5e:8c:db:90:
33:c1:b8:41:0d:f4:de:b6:bd:5e:75:36:90:63:da:
ed:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:28:B0:7F:0D:CE:5C:33:2D:24:A3:4D:39:B4:93:E8:DD:C7:9A:33
X509v3 Authority Key Identifier:
keyid:34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d1:60:dc:0d:49:87:44:03:2c:c1:ff:01:ed:85:c1:2d:9c:
33:30:c7:40:c8:73:47:b4:ff:ed:de:36:08:f3:9b:bb:59:63:
ce:97:b2:0d:13:d0:6a:8a:b1:e5:d3:b3:12:90:12:58:d5:9f:
b7:e6:5e:ea:7f:48:a9:b4:e8:d4:db:96:4e:47:17:bb:45:d4:
bf:40:04:c4:83:34:3f:7b:a5:37:c3:61:ef:02:e1:64:b6:24:
59:bf:7f:e5:43:62:8f:fb:b1:0d:83:26:07:b1:3d:30:47:0a:
57:bb:af:c8:f4:12:9f:0f:ea:33:e6:26:19:0a:fc:7c:70:36:
4a:60:9f:83:19:1e:aa:11:c4:4a:53:0c:5a:b4:5e:09:1a:11:
1e:72:26:61:a1:1f:2d:44:3a:1c:a1:53:db:83:45:e8:4b:9d:
45:e6:35:97:4f:26:f5:e3:6c:f0:64:9c:c1:69:17:36:77:9e:
c8:cd:06:b0:d9:95:f3:aa:92:00:e2:6f:62:1f:2e:02:4f:a4:
17:e6:00:91:9e:0c:b4:34:fa:87:cc:ad:42:f3:ce:84:b7:77:
6c:4f:77:1d:94:f8:42:30:a4:08:ab:53:5b:db:a2:09:b3:be:
87:d3:70:9e:b5:ad:9b:e1:b3:27:d8:dd:46:01:cc:72:12:07:
fe:99:70:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:58:43 2026 by rpki-client