Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
File: NSFqNgJ3h24-k7Kb1LuckjH60vc.mft (raw, json)
Hash identifier: Heiv9btzOpmVr2Bc8/Kwmigrg5VqQAOMxM62NVlT02Y=
Subject key identifier: 3E:30:C6:49:5B:72:79:45:B0:B6:D9:A0:4D:29:19:CD:D1:B5:11:72
Authority key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
Certificate issuer: /CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Certificate serial: 019EC3A4E74A4F27D51EAE0E2962820DC150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
Manifest number: 13C0
Signing time: Sun 14 Jun 2026 01:00:24 +0000
Manifest this update: Sun 14 Jun 2026 01:00:24 +0000
Manifest next update: Mon 15 Jun 2026 01:00:24 +0000
Files and hashes: 1: NSFqNgJ3h24-k7Kb1LuckjH60vc.crl (hash: 9HJrdf4a99NW10kWWDeR2KVsRIWnyIO9Z2J2Lv5//+E=)
2: TM7w-cXB8z85wBN-IZClxGDsneg.roa (hash: emRsf5rqRT9CiCwd3UgGiz4Po2LgcGkGywPIUaBs3bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:a4:e7:4a:4f:27:d5:1e:ae:0e:29:62:82:0d:c1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Validity
Not Before: Jun 14 01:00:24 2026 GMT
Not After : Jun 15 01:00:24 2026 GMT
Subject: CN=3e30c6495b727945b0b6d9a04d2919cdd1b51172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0a:97:98:40:a7:7d:d6:58:fd:19:e1:97:f9:
8f:52:b0:34:0e:3c:d1:3f:4c:22:87:46:77:d4:86:
ef:f6:4d:2a:23:9d:da:bb:d6:1f:0b:c8:ef:9e:a6:
42:7f:bd:ac:fd:00:a8:b3:05:3f:99:9b:24:4a:33:
0a:c8:b2:33:65:9f:ff:eb:02:2d:de:89:8e:b0:8e:
11:2d:07:a2:bc:6a:f4:4f:07:76:f9:cb:1d:52:4f:
5a:4b:a6:f9:d1:0a:55:e8:ae:5a:68:51:8c:0c:80:
a6:1d:12:e7:c3:8c:34:a1:9a:2f:67:1e:48:fc:c4:
5f:fe:2e:95:52:de:88:16:3e:bf:bc:df:9b:b0:f0:
92:41:90:2b:5c:a7:ed:50:ef:43:dd:84:fd:be:37:
2e:d8:ae:cc:13:f2:4a:1f:34:ec:40:f4:b7:1c:08:
4e:42:7d:ce:6b:90:26:c6:3f:7c:75:dc:bb:0b:17:
9c:34:6e:97:9a:25:e8:c5:b5:a1:63:a9:92:72:f8:
24:bf:55:e3:fa:67:35:0d:00:6b:a2:4a:8d:76:3c:
cc:7d:f6:61:b3:b4:6a:65:c7:48:75:66:d4:e8:1b:
03:e5:94:a2:79:03:57:e8:5d:0a:e1:09:98:d9:e7:
9a:43:66:16:0f:09:a8:65:2a:3f:ab:c0:fc:2e:c9:
59:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:30:C6:49:5B:72:79:45:B0:B6:D9:A0:4D:29:19:CD:D1:B5:11:72
X509v3 Authority Key Identifier:
keyid:35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:54:88:c7:e9:56:5c:d1:f6:17:b3:5c:b8:27:14:fa:b2:62:
96:0f:b9:19:a6:3e:cb:41:16:92:04:c1:aa:32:ae:65:09:38:
77:3e:30:65:23:ca:1e:f3:98:63:7b:6f:7e:80:86:05:0c:7c:
24:30:a2:28:3b:8b:eb:f8:82:30:52:29:f1:1f:f2:fb:6b:89:
ce:f5:4b:e4:8d:d2:49:1d:ab:e6:60:8c:7d:7a:07:e6:dc:d2:
11:a4:29:aa:1f:47:fe:23:0c:2a:19:49:1f:ba:36:99:12:c1:
a0:ec:9f:e3:a3:4f:32:66:c4:60:60:fd:dd:5e:9a:07:c6:55:
4b:64:c7:7f:d3:98:7b:9d:49:18:1e:92:f4:bf:c1:86:65:3e:
78:a3:1f:b6:f6:9c:46:a9:f0:ba:d2:57:55:a4:d6:3b:f6:a2:
fd:fc:6f:c0:c9:c1:76:34:89:72:fa:8c:a6:86:b7:6c:3c:bf:
88:63:6f:f2:32:d9:e8:e5:72:58:b8:cf:e6:23:03:4c:54:e2:
7a:56:ae:69:52:0b:89:47:b6:82:90:fc:de:d6:90:39:e4:40:
2f:7b:9d:ba:ea:29:9d:61:dc:25:2c:f3:b3:e8:31:2e:12:0a:
8a:54:b5:6f:67:1b:82:6f:f2:4f:77:f0:08:96:42:08:c6:60:
b7:c3:06:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:03:24 2026 by rpki-client