Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft
File: NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft (raw, json)
Hash identifier: 18p9v3R5TNOUdSv96i6pu1gBoniNWoLUjc+pSvOfQbY=
Subject key identifier: 98:C4:5E:8E:CD:7D:58:D4:6D:FF:3E:41:29:48:67:14:90:1A:68:51
Authority key identifier: 35:01:77:24:57:E0:F8:27:B9:E9:20:B0:0C:D1:14:82:4A:5F:A6:21
Certificate issuer: /CN=3501772457e0f827b9e920b00cd114824a5fa621
Certificate serial: 019D27E0280CC3E9A65A1BE2DD6B323905A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQF3JFfg-Ce56SCwDNEUgkpfpiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:01:34 +0000
Manifest this update: Thu 26 Mar 2026 02:01:34 +0000
Manifest next update: Fri 27 Mar 2026 02:01:34 +0000
Files and hashes: 1: CDtNseOhTSyvHnBtVtY8_yl_mqo.roa (hash: QVByv0+71qydMndfr8rOHWUwhEqYjIZJsdGpilbLsSU=)
2: NQF3JFfg-Ce56SCwDNEUgkpfpiE.crl (hash: Sk4LKiq9zpk1HxONt1B43sJ5Y9FmC6Wr/HiqtG0yS2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQF3JFfg-Ce56SCwDNEUgkpfpiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:28:0c:c3:e9:a6:5a:1b:e2:dd:6b:32:39:05:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3501772457e0f827b9e920b00cd114824a5fa621
Validity
Not Before: Mar 26 02:01:34 2026 GMT
Not After : Mar 27 02:01:34 2026 GMT
Subject: CN=98c45e8ecd7d58d46dff3e4129486714901a6851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:73:0c:6b:3f:9f:4d:94:53:92:bb:64:f4:32:
60:b4:51:a8:4c:ca:65:d8:16:e8:0a:e0:57:32:a7:
c4:57:ba:1c:1b:97:20:d6:7a:ad:b6:e8:1e:bc:f1:
a8:1a:ab:59:c0:cd:b2:cd:22:da:f2:a4:3b:36:1a:
1c:2f:48:af:40:49:8c:12:d2:23:de:7d:9d:5e:8c:
cb:81:f2:2e:76:01:12:c8:e1:01:57:f7:12:c7:fe:
9a:c8:cd:ed:d1:98:7e:5b:be:c5:c9:3a:eb:23:4b:
45:64:9d:be:5d:5e:ce:3c:a0:b2:21:98:15:33:a3:
e4:46:b8:82:92:f2:8a:59:af:bd:5d:b6:c1:47:b7:
fb:d7:d3:b0:db:a4:5c:ee:c1:f4:2b:f1:97:f5:c8:
97:02:0e:26:74:82:2e:33:c4:4d:56:4a:a2:00:36:
47:f9:fc:ae:fa:44:6d:79:91:0e:35:bc:db:44:d8:
4e:b7:26:f9:51:1c:c2:3b:1a:27:96:36:ca:0f:f6:
89:e3:7a:d4:fc:2e:b6:2c:00:c3:da:1b:bd:67:ad:
1b:fe:a4:88:71:93:4d:11:b7:b8:20:08:e0:dc:b9:
5b:64:59:d2:89:68:d2:47:52:6d:1e:0c:64:d7:48:
ff:f3:94:58:6c:c3:ea:06:c7:c4:46:1d:2b:0a:1a:
5d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C4:5E:8E:CD:7D:58:D4:6D:FF:3E:41:29:48:67:14:90:1A:68:51
X509v3 Authority Key Identifier:
keyid:35:01:77:24:57:E0:F8:27:B9:E9:20:B0:0C:D1:14:82:4A:5F:A6:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQF3JFfg-Ce56SCwDNEUgkpfpiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:eb:cb:bc:9d:dd:ee:dd:fa:e7:6b:9e:7f:0b:c9:24:33:2b:
54:00:89:47:92:e8:a5:b1:e5:9f:3d:87:5e:ab:a4:c9:21:cd:
1d:73:aa:04:5e:ed:bd:e1:97:38:84:1e:f8:a0:fd:af:2d:0a:
08:0d:03:80:e6:14:38:13:5f:8c:fe:1c:e9:7c:be:54:88:51:
de:5a:52:58:14:59:38:f7:6f:30:11:07:f7:9a:33:30:a7:92:
27:3d:30:d8:f5:9f:d0:a6:c5:9d:6d:2f:80:b9:03:00:28:65:
1f:d1:90:46:e1:08:2f:2c:86:b4:78:91:8e:b5:03:02:e9:d4:
fe:c8:d4:b1:f4:9c:ee:d7:1a:a2:09:47:63:c7:73:76:35:9f:
39:f6:33:a8:76:9c:d7:9b:9c:86:37:a0:f0:7c:2e:6b:0f:cd:
61:52:52:5e:11:54:17:56:93:0c:5d:11:7e:5d:0e:22:85:c2:
bc:67:1d:66:6d:0c:ae:ce:79:a3:6e:8f:04:59:f3:40:df:de:
64:3c:46:6f:8d:5e:4e:0d:3c:8b:a8:66:1c:f4:32:8a:64:11:
11:70:c0:b0:30:47:d6:08:3e:19:76:b0:19:65:b0:2f:0a:16:
c5:a8:6a:a1:7f:63:93:86:2e:a5:cb:5b:f9:aa:a1:11:53:b3:
f5:d9:3b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:05:56 2026 by rpki-client