Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
File: NSFqNgJ3h24-k7Kb1LuckjH60vc.mft (raw, json)
Hash identifier: TeYMMQ16XkdtEpAdv4p2luu5/ibGnixqs5U9oUd22gI=
Subject key identifier: CB:00:D3:07:31:CD:F4:30:E6:7F:AC:5F:32:68:9C:2C:88:6E:6E:6A
Authority key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
Certificate issuer: /CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Certificate serial: 019FAD5164660900891B15DE9C5FD2D741D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
Manifest number: 1439
Signing time: Wed 29 Jul 2026 10:00:20 +0000
Manifest this update: Wed 29 Jul 2026 10:00:20 +0000
Manifest next update: Thu 30 Jul 2026 10:00:20 +0000
Files and hashes: 1: NSFqNgJ3h24-k7Kb1LuckjH60vc.crl (hash: +5tJ2R+Ne6iF5Axu4GTNCrtzGCP7nlQF+chcwbq+UE8=)
2: TM7w-cXB8z85wBN-IZClxGDsneg.roa (hash: emRsf5rqRT9CiCwd3UgGiz4Po2LgcGkGywPIUaBs3bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:51:64:66:09:00:89:1b:15:de:9c:5f:d2:d7:41:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Validity
Not Before: Jul 29 10:00:20 2026 GMT
Not After : Jul 30 10:00:20 2026 GMT
Subject: CN=cb00d30731cdf430e67fac5f32689c2c886e6e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:25:62:46:fd:4b:e3:fe:f9:89:c6:64:c9:7c:
de:5e:fe:6d:34:7d:47:53:8c:cd:c2:64:b4:ba:29:
64:47:39:06:b2:86:1f:74:3d:a8:dd:50:64:28:27:
d9:c1:fe:81:78:8b:29:60:5e:9a:2a:9a:1a:b8:59:
8e:1a:9e:8c:b8:1f:b9:8d:df:d4:0d:44:4b:ae:ba:
56:4c:b3:23:b9:7d:e5:31:9c:c3:60:c0:6c:b0:fc:
06:5c:2b:80:02:56:68:c6:56:c4:33:ed:8e:a4:84:
eb:71:89:3d:47:61:99:13:0b:a4:b2:c1:39:c1:50:
ae:d3:dd:ec:bb:7c:2f:e4:91:fd:1e:e3:06:a9:92:
db:2d:21:7d:95:37:f2:eb:64:ae:d4:ae:19:b0:cd:
ba:e3:63:d5:16:13:19:c2:96:21:55:2e:90:1f:d6:
8d:06:d8:b1:16:e1:7d:96:bc:fd:af:0e:57:13:9b:
54:b7:8b:ec:05:65:85:dd:9a:13:9a:67:5d:bd:08:
62:1b:b6:54:e8:de:6f:8f:5c:60:37:11:4a:cd:8b:
19:09:ea:af:2c:5a:fa:3d:34:a5:42:03:79:b2:a8:
f9:8f:2a:7d:a0:89:46:8b:09:65:c8:52:8d:11:d7:
47:72:29:bf:bf:ba:15:23:a1:d3:06:4f:69:bc:ef:
3f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:00:D3:07:31:CD:F4:30:E6:7F:AC:5F:32:68:9C:2C:88:6E:6E:6A
X509v3 Authority Key Identifier:
keyid:35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:db:1f:92:03:81:b3:79:7e:9a:0b:49:72:5d:e4:cc:df:5e:
bb:7a:a3:07:da:99:39:fc:4a:a2:28:72:53:eb:0b:99:34:ca:
54:90:a5:69:1c:29:4c:99:16:ae:96:fd:f2:04:b8:5d:4a:e4:
0d:79:6d:89:32:32:69:bb:a7:f9:24:1c:4a:a8:69:87:4d:84:
9e:7a:7f:32:48:3a:ee:f6:95:5d:c7:50:b6:74:84:01:61:c4:
f8:87:fa:8e:20:8e:e7:f2:c6:09:2f:5f:59:2e:0d:8e:e6:9e:
bb:46:dd:4e:9d:96:ff:85:be:7f:75:2b:d8:05:22:43:c6:0b:
1f:4a:0e:70:23:19:06:45:4e:d4:c7:cf:5b:64:81:1a:52:e5:
22:95:c2:b2:28:a3:0e:94:81:4a:3e:d6:11:a4:d8:2c:a5:84:
73:d1:d8:f8:10:72:a6:c3:e9:22:34:d3:9e:8e:03:bc:9a:4a:
85:ba:6b:3a:c0:ac:a6:dc:ff:2d:83:11:ca:7a:39:38:d2:ef:
67:bd:18:d2:26:bc:39:99:a2:3c:8e:61:59:71:fc:d3:94:5c:
8a:9e:ea:d1:ba:9b:05:c7:e7:7c:a4:55:eb:6e:2a:eb:64:c0:
d8:00:33:63:f9:89:94:57:dd:6c:4b:1d:b7:f3:7e:b1:a2:98:
24:21:fd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:46:00 2026 by rpki-client