Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
File: NSFqNgJ3h24-k7Kb1LuckjH60vc.mft (raw, json)
Hash identifier: 4vIsaI/L9TbibTJ1htuHr2qO+pC60E6p2I3j0gyI3R8=
Subject key identifier: D5:FB:EB:D3:1A:10:3F:89:F9:99:93:C1:43:B6:AA:8F:FA:2B:DE:72
Authority key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
Certificate issuer: /CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Certificate serial: 019D9A3EBEBEF6BA6B13ADB270A6EC776FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
Manifest number: 1326
Signing time: Fri 17 Apr 2026 07:01:36 +0000
Manifest this update: Fri 17 Apr 2026 07:01:36 +0000
Manifest next update: Sat 18 Apr 2026 07:01:36 +0000
Files and hashes: 1: NSFqNgJ3h24-k7Kb1LuckjH60vc.crl (hash: OPrPNZYF+MmDBfNJ1jZCulzgxGF4RUhSbj0TUNjm+xw=)
2: TM7w-cXB8z85wBN-IZClxGDsneg.roa (hash: emRsf5rqRT9CiCwd3UgGiz4Po2LgcGkGywPIUaBs3bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:be:be:f6:ba:6b:13:ad:b2:70:a6:ec:77:6f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Validity
Not Before: Apr 17 07:01:36 2026 GMT
Not After : Apr 18 07:01:36 2026 GMT
Subject: CN=d5fbebd31a103f89f99993c143b6aa8ffa2bde72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:40:8c:9f:d8:2f:ad:c7:df:0a:87:75:8a:65:
a5:2b:69:33:33:bd:f5:d7:e6:d8:fc:ef:a5:99:05:
46:05:7f:09:07:be:cc:b5:68:97:16:86:12:24:68:
ec:c7:2e:dc:e0:a3:ec:df:bd:3e:03:95:c8:1f:78:
5a:42:a2:f9:7d:2d:f1:b4:5d:e6:82:88:ed:a6:a4:
16:1c:d2:ae:a4:c7:77:77:c3:f1:4e:37:b5:b5:07:
6a:b0:bf:54:12:48:7a:df:94:64:11:9f:cd:14:d3:
e1:5e:1c:94:57:75:ab:3e:8e:68:8e:fa:82:af:ed:
02:8c:2f:9b:06:fc:97:f1:b8:cc:c8:e1:9a:19:f0:
e6:bc:de:7f:b2:56:1f:cf:70:8c:f0:e9:d6:5e:97:
3c:6d:f7:f7:63:a4:44:fa:41:a8:d3:18:cf:15:f7:
f0:be:63:ce:23:f0:ac:00:8b:a4:45:a9:17:89:4a:
53:45:a4:75:74:6d:85:e6:3e:c0:e6:d2:fa:a6:f1:
f0:54:3b:16:ec:49:12:48:fd:90:d7:fe:f1:97:53:
0c:7d:72:c6:b3:be:46:41:3e:a5:3f:5c:3f:3b:38:
03:fd:51:ef:6d:95:2b:e1:8e:8b:ad:ca:af:e1:16:
c1:58:c4:75:cb:dd:9b:38:38:4c:be:60:b1:f8:64:
e3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FB:EB:D3:1A:10:3F:89:F9:99:93:C1:43:B6:AA:8F:FA:2B:DE:72
X509v3 Authority Key Identifier:
keyid:35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:81:80:95:12:06:0f:e0:94:e0:c9:28:4c:0d:80:d9:37:59:
19:16:58:5a:46:72:05:a8:90:9b:f5:4f:0a:50:21:07:5d:21:
5e:40:c7:69:0a:dc:8e:25:bd:3e:a6:f7:9a:af:67:51:e4:e0:
35:05:80:6b:71:ac:f3:9d:5e:53:79:86:56:91:b6:d9:9f:b8:
89:ac:2d:d9:b7:59:f5:ca:62:64:cb:cf:b4:1d:d4:81:28:52:
04:7b:58:e8:b7:11:2c:f9:03:6c:84:4a:6c:b7:35:b5:ac:60:
9b:1c:88:e5:83:3a:f9:99:25:4b:ba:da:e8:eb:e0:68:9d:e1:
b9:26:65:95:28:ea:28:42:e9:3d:22:7f:10:f3:eb:fb:a2:33:
a8:fb:e3:8e:e2:8a:3d:83:ca:1b:ee:10:53:a1:dc:bf:95:9d:
44:6b:2e:06:e3:7d:67:0d:28:df:fb:ce:88:ba:64:36:f1:f0:
5f:b0:98:9f:7d:83:9b:6f:33:99:12:1b:61:a3:5a:dc:18:3f:
f2:ce:be:84:8f:93:b3:46:2b:ce:b8:33:6f:db:f1:0a:b0:6c:
f7:c1:f7:ab:a0:75:3f:01:1a:cc:ec:b6:d8:1c:59:2f:1d:7a:
0e:34:18:69:b9:ff:ed:59:76:fd:00:e0:35:63:3b:ff:a3:cf:
79:e2:fa:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:20:33 2026 by rpki-client