Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
File: NQzOG50G3M6IVmWVNkmcFgM5E3A.mft (raw, json)
Hash identifier: F4tyfebNO/U4U0QUySzfjA25IT4eWsHoui5hRxqz5y8=
Subject key identifier: 8E:56:F1:05:1A:E8:51:EE:81:39:70:83:C3:50:82:46:74:F8:CA:3A
Authority key identifier: 35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
Certificate issuer: /CN=350cce1b9d06dcce8856659536499c1603391370
Certificate serial: 01A0E13D9D9D179888651E8AB6B9AE2E1780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
Manifest number: 1A76
Signing time: Sun 27 Sep 2026 05:01:46 +0000
Manifest this update: Sun 27 Sep 2026 05:01:46 +0000
Manifest next update: Mon 28 Sep 2026 05:01:46 +0000
Files and hashes: 1: 1-6cYk3IV3azNTDxLV9HIv8JiNNU.roa (hash: 68Lmi8ud6HODb6vZV8sdTwSgFGYMvK/4iVqZEyTtA8M=)
2: NQzOG50G3M6IVmWVNkmcFgM5E3A.crl (hash: ke826fmCxu115zTgcllAK37dPAIM7YcKzKFVRk5Ac4s=)
3: dls_8eGlW5noEKaT1vWyI3L6kis.roa (hash: Pm8+FvhXP2lEJSCgMp+/lPklylAzLJsm9W0xN+5smos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:3d:9d:9d:17:98:88:65:1e:8a:b6:b9:ae:2e:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350cce1b9d06dcce8856659536499c1603391370
Validity
Not Before: Sep 27 05:01:46 2026 GMT
Not After : Sep 28 05:01:46 2026 GMT
Subject: CN=8e56f1051ae851ee81397083c350824674f8ca3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fb:a5:e0:67:0b:fe:f9:f2:2c:c4:65:a4:9f:
59:da:91:ef:1c:00:ac:10:4e:d2:4e:6d:3b:55:62:
47:e1:0c:b7:62:8a:7e:d4:3e:0b:26:ea:4d:a9:52:
5e:8b:f1:7d:91:81:1a:a8:72:61:0d:cd:ca:ba:99:
16:26:96:ce:c5:a7:c9:48:e4:0d:34:f6:a2:bc:f0:
2d:4c:47:f1:50:97:a0:3a:77:9e:a7:57:56:4f:fc:
27:9c:02:0f:58:f6:15:9e:54:d1:86:f0:18:88:22:
5a:ee:cb:84:23:5e:d8:b2:2e:2c:29:21:40:d5:db:
c7:43:b1:d5:03:b9:55:58:d7:1e:2d:5e:94:7a:56:
20:3a:f7:24:31:cd:8e:3c:e9:25:62:1e:84:ba:93:
23:2e:fd:f6:79:db:b4:1e:36:c1:8e:31:09:51:d7:
4d:bd:9c:9a:31:82:bb:8b:d2:8c:7e:b3:e1:80:39:
54:8d:7e:1c:31:26:34:17:72:13:3f:f6:3e:cc:0e:
3f:67:05:fd:63:59:4c:1a:a6:63:fe:28:bd:26:c0:
f9:8c:d1:df:48:0e:f2:1c:39:a0:f8:69:00:14:7b:
bb:71:e4:96:0a:e5:0d:e2:ed:e6:78:f4:97:60:7c:
38:9c:bf:7b:2a:5e:f0:df:b7:80:76:c1:fe:be:37:
e5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:56:F1:05:1A:E8:51:EE:81:39:70:83:C3:50:82:46:74:F8:CA:3A
X509v3 Authority Key Identifier:
keyid:35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:56:9f:22:2f:bb:b8:78:05:17:53:8f:68:24:45:53:25:81:
67:04:89:9e:a0:8e:3b:7c:3a:61:b1:60:ba:cc:8a:b2:8b:82:
b0:e8:dd:5d:0a:93:2c:73:17:14:8e:3e:36:f3:4d:1c:d7:c2:
47:56:2d:1b:8d:f0:be:40:c5:a7:7b:f7:86:a7:8b:ba:6f:9a:
36:04:4b:ad:4a:cd:96:d7:81:47:16:38:1f:46:39:9a:25:36:
80:0e:03:c8:00:d8:46:ee:bb:a2:e8:3d:98:df:e7:a8:cc:4a:
d1:df:0a:d2:f5:9d:04:b3:58:56:4a:c1:32:ed:96:4c:75:53:
1d:a3:a1:39:cc:09:18:54:7b:69:b9:7d:9a:e4:46:61:47:47:
ca:cc:f7:ea:b6:68:b0:0d:cb:2d:c5:51:7d:0a:be:73:7f:9c:
6c:d0:d9:38:e6:18:7f:0d:6d:59:85:db:e6:22:48:d5:b4:f1:
97:94:6e:94:e3:60:8d:2f:94:0f:97:f7:32:11:19:6d:98:d4:
2d:2e:66:ba:10:8f:28:67:37:69:e3:4d:35:8b:dd:11:6d:99:
f7:2b:d4:cd:0f:bb:c2:fb:36:76:a8:81:cd:13:43:28:c4:f4:
4c:74:07:69:41:2a:4a:27:5d:7d:b7:b4:bf:9f:62:91:39:7a:
77:6d:1f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:15:37 2026 by rpki-client