Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
File: NQzOG50G3M6IVmWVNkmcFgM5E3A.mft (raw, json)
Hash identifier: TA4gebm0eA3ceHnGtdfYSwOUjfbiuAo+QVQrLFg1+lk=
Subject key identifier: 2C:C0:7D:14:F9:A8:35:6D:7C:01:6C:41:B7:63:E1:1F:D9:BD:EC:F5
Authority key identifier: 35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
Certificate issuer: /CN=350cce1b9d06dcce8856659536499c1603391370
Certificate serial: 019F9323BA9A00B6441164CB2FEA5D64D631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 08:00:20 +0000
Manifest this update: Fri 24 Jul 2026 08:00:20 +0000
Manifest next update: Sat 25 Jul 2026 08:00:20 +0000
Files and hashes: 1: 1-6cYk3IV3azNTDxLV9HIv8JiNNU.roa (hash: 68Lmi8ud6HODb6vZV8sdTwSgFGYMvK/4iVqZEyTtA8M=)
2: NQzOG50G3M6IVmWVNkmcFgM5E3A.crl (hash: M6zszMdc79/AW7dCoFanuZdCWYB3onM3eF5ylyjXKGw=)
3: dls_8eGlW5noEKaT1vWyI3L6kis.roa (hash: Pm8+FvhXP2lEJSCgMp+/lPklylAzLJsm9W0xN+5smos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:ba:9a:00:b6:44:11:64:cb:2f:ea:5d:64:d6:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350cce1b9d06dcce8856659536499c1603391370
Validity
Not Before: Jul 24 08:00:20 2026 GMT
Not After : Jul 25 08:00:20 2026 GMT
Subject: CN=2cc07d14f9a8356d7c016c41b763e11fd9bdecf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6c:5b:6b:52:45:1d:ed:06:37:9b:af:f4:af:
7b:80:5f:d8:64:2f:9f:26:da:42:0a:1c:b6:dc:86:
27:c6:ce:bf:0e:d8:2b:62:bf:a7:8b:49:83:55:39:
97:fb:2a:dc:32:23:65:fe:fa:00:b9:d5:ad:d1:4e:
4b:9a:5d:68:e1:8b:26:5a:98:81:b2:e4:6f:85:ac:
70:74:cd:f1:c6:6c:31:86:43:bd:7c:e5:64:a0:f7:
cb:ac:6b:b5:30:7f:0d:60:ec:5b:a5:51:86:6c:25:
77:fb:5d:91:03:7b:d3:3e:d7:94:99:57:e6:db:c1:
84:64:c4:3b:49:40:20:7b:b7:84:84:b7:0f:4a:98:
b9:80:52:d0:58:5f:a6:be:60:f6:69:e7:b1:58:b0:
bd:ac:d1:8a:94:d8:55:e4:08:69:cb:76:76:3f:53:
ee:79:64:fa:c9:35:05:aa:15:ef:3b:db:2a:ef:72:
48:2e:7f:4e:e1:d4:86:f4:ea:80:3d:10:24:82:a0:
0c:77:63:47:7e:c9:aa:78:52:7e:0e:fc:5c:45:69:
29:7b:a2:c8:d1:47:ba:4f:55:3a:20:0e:36:6c:c0:
f2:1c:02:1f:7d:1b:c6:e3:c0:6f:1c:13:63:68:7c:
6b:0c:27:4d:2e:05:dd:6b:fb:cf:7e:ce:60:20:e0:
42:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C0:7D:14:F9:A8:35:6D:7C:01:6C:41:B7:63:E1:1F:D9:BD:EC:F5
X509v3 Authority Key Identifier:
keyid:35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b4:1d:68:a7:b2:31:df:89:03:b6:fa:49:35:7e:40:36:6b:
66:10:6c:d6:8b:c6:b6:66:16:c7:0f:30:64:6c:fd:d5:bd:f5:
a7:73:6a:01:29:11:cd:c6:79:44:94:07:4d:39:3e:dc:b1:79:
bb:be:f0:63:5c:3b:ae:34:94:c4:d3:8b:6a:e7:bf:d2:97:a8:
e4:61:d5:00:1a:56:dc:74:36:b5:97:9a:45:00:38:91:ee:26:
52:8f:a2:57:78:2b:ff:05:dc:92:65:0d:50:0b:27:5c:99:4c:
59:d9:30:be:9e:fc:e9:52:cc:dd:da:15:75:0b:5d:cb:63:e2:
41:87:27:54:ed:e8:2f:7b:62:9e:c2:99:84:b9:16:85:3a:d1:
be:9b:68:3a:7f:c9:07:f4:db:33:5b:a0:79:af:6c:31:67:b6:
3a:e8:22:32:42:6c:a2:ce:3e:35:e0:01:c3:39:d8:80:b0:87:
cd:83:cf:35:f9:fa:bb:f1:de:f3:dc:6e:da:be:6b:3a:bc:ae:
b1:65:73:cd:d4:99:d7:dd:e1:46:c8:bb:1b:02:27:24:6a:07:
98:a3:12:94:c6:75:48:95:a0:3b:94:95:0a:b5:6c:91:f0:bb:
b0:ad:63:cd:99:a2:0d:dd:83:f0:44:98:ca:c9:00:46:dd:19:
5a:b3:56:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:23:18 2026 by rpki-client