Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
File: NSFqNgJ3h24-k7Kb1LuckjH60vc.mft (raw, json)
Hash identifier: O6Erz/IWx7mLVDyoy8BEJThxVJmIW8u2q/Z3o4iN+go=
Subject key identifier: 08:31:57:6D:81:27:86:54:79:E8:5D:B4:31:6D:56:1B:23:22:57:61
Authority key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
Certificate issuer: /CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Certificate serial: 019CAD225677CC17C31C758FDC82E090BB9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
Manifest number: 12AB
Signing time: Mon 02 Mar 2026 06:00:34 +0000
Manifest this update: Mon 02 Mar 2026 06:00:34 +0000
Manifest next update: Tue 03 Mar 2026 06:00:34 +0000
Files and hashes: 1: LjrShwCoJZxaBMCU_xgtQ0ssv44.roa (hash: HEF1Y2WFhMnB9/CRA48ookYnYxu+ItuM7lAcrIlWSPE=)
2: NSFqNgJ3h24-k7Kb1LuckjH60vc.crl (hash: J9r8clfOb12QttIW/QXB5dM51ezvUmMMLYLrTiuRDhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:56:77:cc:17:c3:1c:75:8f:dc:82:e0:90:bb:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Validity
Not Before: Mar 2 06:00:34 2026 GMT
Not After : Mar 3 06:00:34 2026 GMT
Subject: CN=0831576d8127865479e85db4316d561b23225761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3c:69:22:ce:5f:48:e9:93:8d:14:79:59:b9:
27:ea:24:44:0b:6f:fa:85:fb:8a:af:86:7a:d6:7f:
6a:e8:b4:7f:16:be:f0:44:8f:25:2b:f4:3f:e0:38:
c4:14:6c:c8:1d:9c:4d:90:7f:3a:58:ad:7b:cc:ab:
0c:0d:a9:b6:24:82:80:a7:22:a6:8a:e7:b2:7a:9c:
f2:cb:30:d7:1b:43:4f:ef:83:a1:2f:e0:ef:f0:bd:
78:88:09:34:8d:33:c8:78:f4:da:b1:f9:58:fd:83:
94:66:3c:b3:4e:37:16:cd:f9:d6:69:40:9e:8c:e7:
16:ba:e4:38:82:68:6b:1c:59:ce:74:7a:5e:dd:c8:
81:45:28:82:cc:20:db:5f:b8:1e:b5:bd:fa:1f:cd:
9b:b0:fa:d1:d0:f9:3e:41:00:28:02:69:27:18:ca:
c6:cc:55:68:fc:ae:9d:43:5e:af:d5:9f:2f:13:ef:
6b:7b:96:3b:8c:24:56:c2:da:f3:a6:86:f3:ee:86:
dd:be:81:4a:01:51:cb:43:c7:95:ec:88:74:c8:34:
a6:57:94:38:2e:1e:32:12:42:63:d7:cc:2c:e4:b2:
69:94:a5:ef:a2:b7:d6:11:71:af:84:ee:95:68:6d:
44:ab:fe:03:f0:01:5b:0d:6f:ff:5b:f1:c7:ca:d4:
ba:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:31:57:6D:81:27:86:54:79:E8:5D:B4:31:6D:56:1B:23:22:57:61
X509v3 Authority Key Identifier:
keyid:35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:01:07:10:25:67:10:95:a5:17:92:e2:d0:c0:29:fe:4d:44:
2e:b1:c8:57:eb:7e:7b:95:2b:60:b6:39:3e:b3:ff:a5:5b:00:
ef:28:41:4d:ef:43:8d:0b:1d:f6:5e:cb:ee:fa:03:ee:f2:68:
5c:af:de:1b:60:0f:d4:b6:7f:67:c9:3f:c1:e1:6b:d0:34:6b:
43:af:44:15:b4:0d:c1:ae:bf:d7:e2:c1:77:97:51:9d:fe:30:
30:29:84:6a:3b:c2:6b:3f:5f:62:f3:d0:30:aa:f7:c9:04:8a:
d2:3f:5d:55:f4:d6:4b:bb:a7:e9:d5:fa:b3:94:1c:2f:7a:82:
14:05:cf:31:c3:a9:fa:88:6b:0d:64:4f:21:5b:52:60:9d:99:
1a:9d:63:37:47:4b:6b:f7:bc:43:cd:6b:56:c5:ee:be:4e:ae:
2f:5f:7d:28:6e:65:f8:60:7c:12:ca:0b:a7:9f:c8:5f:28:9d:
df:7f:9d:c7:56:84:69:7f:e8:70:1e:ad:c7:37:59:ed:50:87:
2a:12:ba:b4:e6:c6:ba:d6:3e:43:56:ef:54:36:cd:51:a2:a6:
14:d7:eb:a2:8f:8f:5a:5d:da:0d:54:6e:e1:79:96:79:91:de:
b9:7a:c0:9d:a2:33:5c:92:1e:b5:bd:fe:a8:f1:c9:2c:16:75:
00:44:ec:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIlZ3zBfDHHWP3ILgkLufMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MjE2YTM2MDI3Nzg3NmUzZTkzYjI5YmQ0YmI5YzkyMzFm
YWQyZjcwHhcNMjYwMzAyMDYwMDM0WhcNMjYwMzAzMDYwMDM0WjAzMTEwLwYDVQQD
EygwODMxNTc2ZDgxMjc4NjU0NzllODVkYjQzMTZkNTYxYjIzMjI1NzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDxpIs5fSOmTjRR5Wbkn6iREC2/6
hfuKr4Z61n9q6LR/Fr7wRI8lK/Q/4DjEFGzIHZxNkH86WK17zKsMDam2JIKApyKm
iueyepzyyzDXG0NP74OhL+Dv8L14iAk0jTPIePTasflY/YOUZjyzTjcWzfnWaUCe
jOcWuuQ4gmhrHFnOdHpe3ciBRSiCzCDbX7getb36H82bsPrR0Pk+QQAoAmknGMrG
zFVo/K6dQ16v1Z8vE+9re5Y7jCRWwtrzpobz7obdvoFKAVHLQ8eV7Ih0yDSmV5Q4
Lh4yEkJj18ws5LJplKXvorfWEXGvhO6VaG1Eq/4D8AFbDW//W/HHytS6AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgxV22BJ4ZUeehdtDFtVhsjIldhMB8GA1UdIwQY
MBaAFDUhajYCd4duPpOym9S7nJIx+tL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlNGcU5nSjNoMjQtazdLYjFMdWNrakg2MHZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mMjU1MDYtNmE2Yy00OTdkLWE0YWIt
MjQ4YzQ3YjNjN2Q4LzEvTlNGcU5nSjNoMjQtazdLYjFMdWNrakg2MHZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9mMjU1MDYtNmE2Yy00OTdkLWE0YWItMjQ4YzQ3YjNjN2Q4
LzEvTlNGcU5nSjNoMjQtazdLYjFMdWNrakg2MHZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGQEHECVn
EJWlF5Li0MAp/k1ELrHIV+t+e5UrYLY5PrP/pVsA7yhBTe9DjQsd9l7L7voD7vJo
XK/eG2AP1LZ/Z8k/weFr0DRrQ69EFbQNwa6/1+LBd5dRnf4wMCmEajvCaz9fYvPQ
MKr3yQSK0j9dVfTWS7un6dX6s5QcL3qCFAXPMcOp+ohrDWRPIVtSYJ2ZGp1jN0dL
a/e8Q81rVsXuvk6uL199KG5l+GB8EsoLp5/IXyid33+dx1aEaX/ocB6txzdZ7VCH
KhK6tObGutY+Q1bvVDbNUaKmFNfroo+PWl3aDVRu4XmWeZHeuXrAnaIzXJIetb3+
qPHJLBZ1AETshQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:32:39 2026 by rpki-client