Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
File: NBSgbayFTb7mCYRYjex7MoS1qlA.mft (raw, json)
Hash identifier: JX+a5NWq057NrYk/2PLHByEJ5uDUcg3kUi4cNE91kjU=
Subject key identifier: 62:8E:11:AB:B5:85:28:B2:28:B4:FF:1B:F1:37:0F:5A:99:A7:95:08
Authority key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
Certificate issuer: /CN=3414a06dac854dbee60984588dec7b3284b5aa50
Certificate serial: 019D99D0475BD18E87897B00272FD4AFE9AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
Manifest number: 1852
Signing time: Fri 17 Apr 2026 05:00:56 +0000
Manifest this update: Fri 17 Apr 2026 05:00:56 +0000
Manifest next update: Sat 18 Apr 2026 05:00:56 +0000
Files and hashes: 1: NBSgbayFTb7mCYRYjex7MoS1qlA.crl (hash: /Pnp/osyYoF3+UQBa7U13aPlsrk28YuQX4wpS+fqtSk=)
2: _X5nMX01zIkdocFV_HQBvj4jIFY.roa (hash: 2Fkt6K/RwxywwOu2/bTk9f7aYl/AJ79Q108D3K95Ro8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:47:5b:d1:8e:87:89:7b:00:27:2f:d4:af:e9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3414a06dac854dbee60984588dec7b3284b5aa50
Validity
Not Before: Apr 17 05:00:56 2026 GMT
Not After : Apr 18 05:00:56 2026 GMT
Subject: CN=628e11abb58528b228b4ff1bf1370f5a99a79508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b5:88:89:d2:66:bd:fd:8e:de:82:0e:39:8e:
65:bb:a2:94:77:1f:97:1a:f8:77:d5:d2:8e:3d:32:
40:09:5f:b6:37:13:c7:a2:cb:31:cd:78:2e:28:0b:
fd:1f:48:be:19:4c:96:a1:cf:04:d0:64:f3:e4:8a:
58:52:8a:38:b2:b8:8c:36:d3:b1:ed:2a:f1:21:36:
5d:b3:af:e7:7f:6d:55:7b:93:a7:bd:b6:40:e9:df:
89:4f:2f:13:7a:c3:77:96:af:24:7f:85:e1:88:dc:
f1:57:8f:05:3c:c4:20:bc:52:0d:b9:49:2c:a9:5a:
60:47:eb:40:ba:6a:02:99:1f:c0:fe:13:ee:ad:83:
a4:f0:9c:46:10:cc:bd:ab:45:c2:d0:8d:96:b4:a1:
9a:2f:cb:dc:ee:03:db:92:a4:b3:35:16:7b:76:e8:
08:b3:5c:18:80:17:e3:0a:01:d5:ad:32:b3:ac:de:
ac:5e:3f:94:6c:44:b8:c8:ed:ed:a5:03:3b:2c:8b:
5d:dd:ad:91:27:b9:d2:7f:b0:5c:52:df:31:4d:98:
93:75:70:7e:61:df:cd:61:5e:ea:66:3f:0e:76:5c:
e4:b9:b4:69:84:a3:96:bd:02:f3:63:26:08:c9:74:
90:04:55:eb:e5:0a:3e:fd:ad:8f:10:dc:54:97:85:
ba:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8E:11:AB:B5:85:28:B2:28:B4:FF:1B:F1:37:0F:5A:99:A7:95:08
X509v3 Authority Key Identifier:
keyid:34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:60:de:04:60:2e:51:78:8a:21:c5:d0:40:b2:19:8c:f8:5b:
a4:0a:4a:8a:cc:14:c6:10:7c:bd:48:d0:1f:ed:32:6c:4b:1c:
57:b2:3f:e2:98:9e:1b:c2:8d:77:79:bf:42:3e:78:aa:24:22:
8a:3f:51:59:8b:47:42:a5:c7:27:8e:83:79:38:2b:8e:e2:40:
a2:c5:6b:31:72:9c:25:26:1d:22:4c:8f:9f:d3:05:54:c6:3f:
63:5b:c8:28:2f:17:e4:78:2c:66:4f:db:91:e5:24:84:03:9c:
b0:d4:e6:9a:cd:de:a7:53:97:50:61:5d:8b:99:c2:34:5b:25:
07:02:86:00:bb:5d:6c:3e:d2:c0:d0:cc:53:cd:a7:7f:49:e9:
60:c3:9c:a1:a4:47:73:9a:16:fd:54:65:c2:99:d7:97:d2:77:
2a:71:33:cd:66:87:be:bc:c8:ea:02:a1:b1:9a:58:19:c2:21:
60:a9:7c:a8:4d:68:f7:d5:25:eb:ea:3b:28:8a:81:09:61:23:
9d:5e:2f:e7:39:2a:18:6e:1c:73:34:35:3d:cb:84:fd:98:7f:
46:1d:e0:78:1e:f2:70:71:74:ff:2d:ad:f5:9f:20:dc:34:88:
ae:17:48:b8:21:29:ad:63:c2:b3:c1:05:37:09:52:b6:7e:fc:
0d:7a:36:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:46:34 2026 by rpki-client