Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
File: NBSgbayFTb7mCYRYjex7MoS1qlA.mft (raw, json)
Hash identifier: cn7jHzX6Ia8vGtY64jo6YI+iaJ8DPv6SfGtRrYjzi2o=
Subject key identifier: 28:11:C5:AB:A3:25:AC:A1:D1:A0:57:EB:62:23:F4:59:F0:27:7E:DE
Authority key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
Certificate issuer: /CN=3414a06dac854dbee60984588dec7b3284b5aa50
Certificate serial: 01A1DCF02E3FE05E528E2E6609BCB084DADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
Manifest number: 1A87
Signing time: Sun 15 Nov 2026 02:01:30 +0000
Manifest this update: Sun 15 Nov 2026 02:01:30 +0000
Manifest next update: Mon 16 Nov 2026 02:01:30 +0000
Files and hashes: 1: NBSgbayFTb7mCYRYjex7MoS1qlA.crl (hash: Xz9MENZFBuYDBohsuknUkv8UvN111Np5IRsP+2I1VFU=)
2: _X5nMX01zIkdocFV_HQBvj4jIFY.roa (hash: 2Fkt6K/RwxywwOu2/bTk9f7aYl/AJ79Q108D3K95Ro8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:f0:2e:3f:e0:5e:52:8e:2e:66:09:bc:b0:84:da:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3414a06dac854dbee60984588dec7b3284b5aa50
Validity
Not Before: Nov 15 02:01:30 2026 GMT
Not After : Nov 16 02:01:30 2026 GMT
Subject: CN=2811c5aba325aca1d1a057eb6223f459f0277ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:13:f4:8e:ed:a6:50:67:30:50:8b:68:b9:66:
c8:76:d3:5b:4b:31:89:73:37:c9:0d:eb:a5:ab:87:
c8:cf:bf:be:39:81:cf:84:d6:34:e0:9a:10:8e:27:
da:59:9a:db:ee:54:1e:6f:35:4a:1a:a3:9d:33:09:
e1:2f:bd:83:3a:8b:e5:1d:dd:d3:be:97:11:d6:0e:
aa:52:b2:34:bb:b4:14:30:34:37:ef:f1:97:96:57:
10:1e:31:ca:e5:fa:1f:3a:09:5c:63:7c:4c:98:8f:
23:d6:b3:3c:0d:0b:7f:76:f9:65:dc:b4:50:6a:1c:
dd:14:a6:fe:61:a1:58:ef:95:64:54:66:99:31:f2:
dd:36:c7:2e:55:4a:43:49:83:c8:d0:7c:91:90:1d:
67:4b:00:64:cc:1d:e5:ba:c4:ef:c6:eb:0a:2f:dc:
ff:6d:4e:34:bc:cf:1f:75:6e:90:52:59:56:6e:17:
52:38:fc:52:0b:06:53:c8:5e:59:43:47:dc:61:5a:
9a:5a:ee:97:a1:62:23:b2:b8:62:a9:73:d6:4b:98:
e2:2a:9d:56:b1:4f:da:8b:f9:92:ee:d1:27:a6:e4:
2f:19:9d:ac:08:91:e8:90:06:07:fd:b4:98:77:14:
70:c8:55:9a:09:90:29:c2:35:27:1a:07:e9:96:4e:
de:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:11:C5:AB:A3:25:AC:A1:D1:A0:57:EB:62:23:F4:59:F0:27:7E:DE
X509v3 Authority Key Identifier:
keyid:34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c0:99:2f:f1:d4:47:fd:56:32:8f:a7:13:22:98:b0:41:d0:
13:62:c5:63:a6:3d:ff:1e:4a:32:cc:ba:1d:13:b2:1c:8c:a9:
3c:94:3c:a8:8a:6d:95:52:85:89:a8:1e:a5:2b:3b:de:3e:17:
18:00:b7:10:14:82:7d:7c:56:9a:75:49:f8:9f:11:35:4f:c5:
87:56:a0:e6:4f:5c:1c:85:3f:c6:93:a1:74:0e:44:fa:75:ba:
96:c8:d0:79:80:34:c2:ff:9d:68:b5:5c:32:e7:cd:1e:60:97:
3d:a1:0d:42:20:bb:09:0d:36:58:9b:0e:65:a9:e5:fb:96:54:
58:ea:14:f4:7f:a0:10:07:16:7e:2e:72:ff:24:34:b4:9d:c1:
e4:ad:00:a7:b4:b7:1f:a9:0a:30:f5:e2:da:2c:f2:1f:8e:50:
93:0b:fd:12:e0:83:60:a3:9f:ff:7c:a0:02:ff:68:a7:1c:8c:
ee:cb:9f:41:18:e2:ff:7c:d8:3a:9e:c4:68:e3:5c:50:46:0a:
1e:d3:8d:a5:91:d5:78:41:54:7c:50:8d:fd:63:a3:40:c0:04:
2d:c4:42:e2:49:da:4d:13:e2:0c:13:df:d4:8e:89:7c:f2:80:
2d:de:c1:50:92:a3:3c:9c:fe:2c:63:db:5e:93:d9:41:bc:d2:
ea:ca:67:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:30:58 2026 by rpki-client