Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
File: NQBF99g86xMNjWlf_n1D2zgZ3lU.mft (raw, json)
Hash identifier: Pr9k2lqs/iKAQf7Gc0IrpyHNiTn5TRbbq5Wjjl5GzCg=
Subject key identifier: A6:5A:C2:2E:FE:EE:AE:44:6E:05:34:D4:A2:B4:20:97:9B:EF:89:93
Authority key identifier: 35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
Certificate issuer: /CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Certificate serial: 019D2583D928CE45E7FB83102ED76824A233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
Manifest number: 174E
Signing time: Wed 25 Mar 2026 15:01:30 +0000
Manifest this update: Wed 25 Mar 2026 15:01:30 +0000
Manifest next update: Thu 26 Mar 2026 15:01:30 +0000
Files and hashes: 1: NQBF99g86xMNjWlf_n1D2zgZ3lU.crl (hash: gGeEz70hx3AUwd4f0lZLu30F1wirWRC8qYHeIk+kZBY=)
2: cl6lci4JzB4m70ik3dAlKuTRGek.roa (hash: UR1yaGuf+Gktwnz/SkjvRQshLYqjDpB+pPtn2/1jM2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:d9:28:ce:45:e7:fb:83:10:2e:d7:68:24:a2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Validity
Not Before: Mar 25 15:01:30 2026 GMT
Not After : Mar 26 15:01:30 2026 GMT
Subject: CN=a65ac22efeeeae446e0534d4a2b420979bef8993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:68:fa:de:81:5c:6e:86:f6:47:82:81:09:df:
5a:52:16:a9:b6:a8:2d:46:6e:4e:a0:f6:c0:47:c9:
c5:2b:68:d4:94:fe:d9:64:a0:ba:fb:66:a2:31:8d:
2e:8f:8b:45:56:30:2e:f1:a0:f9:de:fb:12:1e:e1:
10:c1:29:bb:d3:07:8f:2e:0a:d5:5b:5a:9d:e4:ff:
94:b1:71:93:44:e2:91:1a:fb:c5:b4:ef:8a:39:4b:
f8:14:ea:67:c1:80:32:be:1e:39:21:c3:bf:f9:31:
7c:48:91:e9:1b:f2:01:f3:d4:bd:d1:2c:9e:a4:14:
d6:bb:f0:fb:f3:fc:60:e7:f8:84:2a:10:33:28:3a:
21:bb:68:ea:19:9c:15:f0:64:c2:46:44:bd:84:e5:
a3:77:d5:75:34:69:8b:59:2c:bc:a7:d1:ed:3e:98:
0f:c9:ef:15:a7:2c:a2:21:dd:80:ff:6f:67:57:ff:
8f:d0:ae:6b:be:88:01:ed:57:64:37:b3:f5:e7:6d:
db:3c:9e:cf:d6:59:ca:41:d9:ff:24:ea:2b:d3:af:
86:ec:42:50:51:d0:e5:6d:9d:37:24:b6:5c:68:27:
44:1f:83:0d:70:7e:b4:7c:2d:ce:28:6c:9e:61:c5:
9d:6b:fd:5e:cb:0f:a6:99:af:77:35:c5:50:8e:01:
a0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5A:C2:2E:FE:EE:AE:44:6E:05:34:D4:A2:B4:20:97:9B:EF:89:93
X509v3 Authority Key Identifier:
keyid:35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e7:55:18:23:af:bc:0c:05:4e:5a:28:be:5b:d1:65:0c:38:
cb:1b:7c:df:8b:4c:da:6d:de:75:ae:56:2d:9c:ce:40:bc:29:
15:35:44:a9:e9:c9:a1:b3:7f:b8:40:71:87:d7:93:11:52:d3:
dd:06:1e:4f:2c:73:cf:77:d2:6b:2f:e6:1f:19:98:be:55:1b:
1b:77:5f:98:0e:48:d0:fb:23:98:47:6d:88:35:27:87:8c:68:
c9:76:2d:d5:60:a1:f4:a2:4f:4c:e7:dd:71:a6:96:08:c7:57:
f5:24:09:47:cb:ea:17:92:91:85:8c:7c:ab:50:c9:93:77:0f:
ae:8d:0d:17:e7:1c:bb:e0:75:f5:52:84:48:5b:3a:c4:61:aa:
3e:fe:45:d5:16:6d:d1:b3:d9:6f:7f:03:5f:c5:f0:ed:81:e2:
c1:f1:a0:ab:82:d7:b9:28:00:41:ac:ab:c6:96:31:a3:9c:6c:
1c:a9:48:4b:25:c3:b7:c6:09:ab:59:de:95:55:14:e7:28:cd:
09:e5:2d:20:5b:0c:da:fb:4e:52:16:56:30:6f:68:d6:d4:af:
86:b5:2c:32:7e:1a:7d:f7:1f:46:9b:40:30:18:70:57:69:c0:
28:4d:61:58:61:a5:b0:d0:f0:be:97:6a:85:68:07:15:0c:6b:
9a:8e:1c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:38:16 2026 by rpki-client