Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
File: NBSgbayFTb7mCYRYjex7MoS1qlA.mft (raw, json)
Hash identifier: aNGeJaYILncziCT5/lAZrd39ebz3FNOafmxosrQa080=
Subject key identifier: 0F:A3:AC:8F:97:EF:E4:26:D2:07:EE:E2:D9:D7:50:28:32:39:12:2A
Authority key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
Certificate issuer: /CN=3414a06dac854dbee60984588dec7b3284b5aa50
Certificate serial: 01A0C2FAC3BE52A2D66018BCD8DC22426D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
Manifest number: 19F5
Signing time: Mon 21 Sep 2026 08:00:08 +0000
Manifest this update: Mon 21 Sep 2026 08:00:08 +0000
Manifest next update: Tue 22 Sep 2026 08:00:08 +0000
Files and hashes: 1: NBSgbayFTb7mCYRYjex7MoS1qlA.crl (hash: uEOwtwnsCDTFG4r0cAnM6+8u+VviNlfApDFzLWPYJb4=)
2: _X5nMX01zIkdocFV_HQBvj4jIFY.roa (hash: 2Fkt6K/RwxywwOu2/bTk9f7aYl/AJ79Q108D3K95Ro8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fa:c3:be:52:a2:d6:60:18:bc:d8:dc:22:42:6d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3414a06dac854dbee60984588dec7b3284b5aa50
Validity
Not Before: Sep 21 08:00:08 2026 GMT
Not After : Sep 22 08:00:08 2026 GMT
Subject: CN=0fa3ac8f97efe426d207eee2d9d750283239122a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c9:c2:b4:18:af:65:fa:15:89:c4:47:e9:17:
fe:87:f8:7d:96:c9:ea:02:c6:88:a3:01:98:5e:88:
c7:aa:9a:6b:3b:fd:18:54:17:3d:6d:18:10:55:19:
9c:a7:c6:a7:e0:45:0d:7c:6d:40:cd:11:ca:50:6d:
25:0b:4d:61:a6:3f:2d:90:c6:5e:60:7f:b7:b3:dd:
b2:68:40:4b:ae:93:5d:17:9c:89:c3:7f:fc:95:31:
5f:ad:89:63:d8:70:1c:7d:54:e3:45:8b:fb:ce:dd:
65:0d:99:3f:0f:d3:3d:8e:50:e8:e1:e3:d6:d0:93:
01:41:2b:5f:3a:7a:56:48:37:44:5f:e6:ed:4c:4a:
5e:c2:1f:7b:89:ab:fd:ed:9a:a2:bd:b9:c0:50:56:
b3:17:38:7e:ca:be:0c:0f:c4:fb:d5:ec:a8:9a:bd:
a3:dc:34:2c:8f:33:50:a8:f4:b0:8b:42:a9:29:fb:
0b:49:2a:7a:30:6f:87:d9:65:86:c4:08:6f:69:69:
eb:ba:f4:53:d5:b6:46:41:c9:1f:d8:82:af:26:88:
bd:79:4e:d6:87:7b:6f:17:d2:6b:0e:0f:98:9e:48:
37:a0:b9:10:08:34:48:76:be:9b:b5:d4:d7:b2:64:
ba:01:56:51:a6:1d:f5:66:cd:28:cc:dd:c5:5e:0f:
d9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A3:AC:8F:97:EF:E4:26:D2:07:EE:E2:D9:D7:50:28:32:39:12:2A
X509v3 Authority Key Identifier:
keyid:34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:4f:26:4a:fd:0c:55:73:9d:6c:a8:27:d6:4b:b9:07:87:64:
38:fe:e0:2c:55:2f:c7:da:e5:c9:51:23:4f:d2:41:da:ff:d9:
89:0d:2e:7c:cc:e0:3c:68:c1:3f:69:cf:f4:34:91:f2:8e:99:
a2:e2:e2:a5:ac:fa:bc:f2:c4:04:87:bf:2d:7b:e2:d3:6a:67:
e6:7e:2b:76:72:8d:23:34:4b:f6:57:c2:80:53:20:34:28:8d:
d7:e9:95:f1:7f:be:d4:36:fe:e6:ae:ac:d7:c2:6f:0d:fa:bf:
44:98:60:52:42:f1:e4:11:1c:32:66:6c:41:2f:aa:eb:9c:26:
de:57:2a:ed:32:97:1f:18:94:96:75:c2:4d:3f:0c:3f:5a:7a:
3f:5b:20:94:43:ea:f5:ff:28:88:05:75:17:f1:0f:4a:51:d7:
83:a9:0c:7d:15:67:ca:e3:f8:ca:c3:34:68:ed:da:ff:70:c9:
21:a7:f3:53:19:1e:45:1e:e9:a1:6b:79:99:f6:1c:4a:29:0d:
c5:c0:fe:f3:70:09:4a:c2:1a:49:77:63:88:31:81:01:45:03:
4e:12:5b:f0:75:e5:14:6a:57:08:3d:07:6a:18:a8:ed:1e:2b:
84:a8:d4:18:33:c3:70:3c:d0:b8:2d:a0:1c:d5:1f:7d:f6:f1:
ec:0b:41:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDC+sO+UqLWYBi82NwiQm1EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MTRhMDZkYWM4NTRkYmVlNjA5ODQ1ODhkZWM3YjMyODRi
NWFhNTAwHhcNMjYwOTIxMDgwMDA4WhcNMjYwOTIyMDgwMDA4WjAzMTEwLwYDVQQD
EygwZmEzYWM4Zjk3ZWZlNDI2ZDIwN2VlZTJkOWQ3NTAyODMyMzkxMjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cnCtBivZfoVicRH6Rf+h/h9lsnq
AsaIowGYXojHqpprO/0YVBc9bRgQVRmcp8an4EUNfG1AzRHKUG0lC01hpj8tkMZe
YH+3s92yaEBLrpNdF5yJw3/8lTFfrYlj2HAcfVTjRYv7zt1lDZk/D9M9jlDo4ePW
0JMBQStfOnpWSDdEX+btTEpewh97iav97ZqivbnAUFazFzh+yr4MD8T71eyomr2j
3DQsjzNQqPSwi0KpKfsLSSp6MG+H2WWGxAhvaWnruvRT1bZGQckf2IKvJoi9eU7W
h3tvF9JrDg+Ynkg3oLkQCDRIdr6btdTXsmS6AVZRph31Zs0ozN3FXg/ZvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+jrI+X7+Qm0gfu4tnXUCgyORIqMB8GA1UdIwQY
MBaAFDQUoG2shU2+5gmEWI3sezKEtapQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkJTZ2JheUZUYjdtQ1lSWWpleDdNb1MxcWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8wM2RjNmUtODUyNC00NWQ3LWFjYzUt
ZTY1OWZkZTA1Mjg5LzEvTkJTZ2JheUZUYjdtQ1lSWWpleDdNb1MxcWxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8wM2RjNmUtODUyNC00NWQ3LWFjYzUtZTY1OWZkZTA1Mjg5
LzEvTkJTZ2JheUZUYjdtQ1lSWWpleDdNb1MxcWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANE8mSv0M
VXOdbKgn1ku5B4dkOP7gLFUvx9rlyVEjT9JB2v/ZiQ0ufMzgPGjBP2nP9DSR8o6Z
ouLipaz6vPLEBIe/LXvi02pn5n4rdnKNIzRL9lfCgFMgNCiN1+mV8X++1Db+5q6s
18JvDfq/RJhgUkLx5BEcMmZsQS+q65wm3lcq7TKXHxiUlnXCTT8MP1p6P1sglEPq
9f8oiAV1F/EPSlHXg6kMfRVnyuP4ysM0aO3a/3DJIafzUxkeRR7poWt5mfYcSikN
xcD+83AJSsIaSXdjiDGBAUUDThJb8HXlFGpXCD0Hahio7R4rhKjUGDPDcDzQuC2g
HNUfffbx7AtBiw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:49:09 2026 by rpki-client