Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
File: NSFqNgJ3h24-k7Kb1LuckjH60vc.mft (raw, json)
Hash identifier: FLXbDM+0xaf1lnqBWNZwfk4g+x3e6QRm4VLWdcebS3w=
Subject key identifier: 21:C5:F6:6E:4F:12:E3:15:DC:DF:06:21:6B:34:D4:57:05:97:1D:59
Authority key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
Certificate issuer: /CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Certificate serial: 01A10135C857982F75450004E1875893B65A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
Manifest number: 14EA
Signing time: Sat 03 Oct 2026 10:01:04 +0000
Manifest this update: Sat 03 Oct 2026 10:01:04 +0000
Manifest next update: Sun 04 Oct 2026 10:01:04 +0000
Files and hashes: 1: 6_mKfmRyYh_HHt_1AeGy1B2emsw.roa (hash: 71vWDant5UDHMxwkBCq/hUEjKeIJZzb0rpoKSTkfucY=)
2: NSFqNgJ3h24-k7Kb1LuckjH60vc.crl (hash: +Ch6BCjR7nmKu7HRg2CPvk9b1kdjN+BF3Uj0CfFyZNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:35:c8:57:98:2f:75:45:00:04:e1:87:58:93:b6:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Validity
Not Before: Oct 3 10:01:04 2026 GMT
Not After : Oct 4 10:01:04 2026 GMT
Subject: CN=21c5f66e4f12e315dcdf06216b34d45705971d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:38:56:9a:30:9e:15:04:c9:74:64:35:39:
d9:5e:44:e6:c0:cf:86:ea:6b:7f:a3:07:3e:0b:bf:
75:74:30:00:f1:23:20:5b:69:3a:bc:51:ef:3e:e5:
70:53:50:8d:b8:2b:8b:8f:28:14:c2:43:9a:40:ae:
e7:3c:8b:d3:83:fa:42:57:77:fd:31:2d:02:b0:21:
1f:69:fe:ea:6d:e5:91:19:16:bd:e8:f1:3f:28:03:
cd:29:88:6a:0f:c1:4b:ef:9e:63:3b:56:a3:ae:1c:
bb:ad:09:8c:bb:2f:74:b3:a3:5a:ba:99:e1:ba:be:
db:ad:5a:19:47:8e:c1:52:aa:b8:1f:13:99:ad:ef:
e5:45:43:57:67:8c:aa:d1:ac:69:b2:da:64:6b:c2:
0b:a2:cc:98:10:83:18:db:a3:e8:9c:85:fe:1a:56:
7a:f6:fc:b2:35:32:2b:3d:86:6f:2e:65:50:a6:fb:
1c:42:f6:0a:bb:9d:bd:f8:ab:10:0f:d4:6f:e2:ea:
b3:ec:ef:48:fe:38:a1:2b:9f:5f:53:dc:19:42:fb:
36:9c:aa:2a:3e:81:88:03:f8:7d:65:bb:77:79:26:
e8:61:0b:40:a2:51:ab:67:6a:91:34:75:35:d9:ff:
30:8f:32:51:8b:de:5f:58:31:32:1b:3b:e2:01:37:
9a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C5:F6:6E:4F:12:E3:15:DC:DF:06:21:6B:34:D4:57:05:97:1D:59
X509v3 Authority Key Identifier:
keyid:35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:41:e4:7e:38:35:7b:44:5c:38:9e:18:71:b1:f6:b3:4e:78:
fa:ca:ba:4a:27:a7:ae:fd:c4:d5:c2:27:66:95:1e:1c:ad:80:
d1:f7:ef:50:35:96:36:92:69:d3:84:a4:8f:58:51:06:5a:b9:
e6:2d:3f:27:91:a9:d2:73:5b:e6:a3:e2:82:1e:b5:39:8e:9d:
b1:e5:68:ae:fa:ed:75:f2:95:9d:01:5a:4b:2a:6f:22:c9:fc:
c5:d4:1e:99:29:12:bf:92:4e:95:28:d9:9e:4b:ae:1a:86:4e:
e8:26:be:14:e7:4f:f6:df:22:a7:67:f7:18:ba:ca:b2:97:87:
ab:41:ba:58:39:a0:2e:15:b6:e9:1f:5d:dd:8c:e1:e2:95:89:
8e:56:49:57:1c:1c:6e:65:fa:90:0b:5b:19:7f:2f:de:17:f0:
24:e4:08:d8:bc:32:fd:ec:ad:d1:15:e4:84:16:b1:e4:26:a3:
0f:9c:e1:f2:d8:bc:21:d1:f7:ae:dd:fa:44:4f:88:6c:ad:af:
97:93:db:7c:eb:fc:dd:e8:4f:06:31:c3:35:70:02:24:e3:b5:
6a:66:c6:50:a1:b5:30:86:b7:7a:cb:f4:c3:e6:24:30:f4:8d:
7e:67:0b:fb:ea:6a:b9:4c:d7:72:f3:98:a1:0c:b2:62:43:8b:
0a:74:14:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:53:20 2026 by rpki-client