Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
File: NQBF99g86xMNjWlf_n1D2zgZ3lU.mft (raw, json)
Hash identifier: URv9DiaaiXdTeXebDwWGG4s3lRBc6Tj/nYBw/45VvxA=
Subject key identifier: C3:7C:0B:EB:F3:DA:55:76:2B:15:AB:79:40:94:E7:B8:E9:2B:93:AB
Authority key identifier: 35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
Certificate issuer: /CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Certificate serial: 019E1EA3156D5EE6207D1BE6654E2AE9C6FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
Manifest number: 17CF
Signing time: Wed 13 May 2026 00:01:04 +0000
Manifest this update: Wed 13 May 2026 00:01:04 +0000
Manifest next update: Thu 14 May 2026 00:01:04 +0000
Files and hashes: 1: NQBF99g86xMNjWlf_n1D2zgZ3lU.crl (hash: TgAYMqdz6eHJtqlUqSiAkndFKRmhU8YMQrnvnSiXVPg=)
2: cl6lci4JzB4m70ik3dAlKuTRGek.roa (hash: UR1yaGuf+Gktwnz/SkjvRQshLYqjDpB+pPtn2/1jM2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:15:6d:5e:e6:20:7d:1b:e6:65:4e:2a:e9:c6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Validity
Not Before: May 13 00:01:04 2026 GMT
Not After : May 14 00:01:04 2026 GMT
Subject: CN=c37c0bebf3da55762b15ab794094e7b8e92b93ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:bd:2d:b3:6e:37:05:55:d9:24:43:97:65:82:
b3:e0:e6:c4:33:db:2a:1f:f7:45:d0:80:05:cf:bc:
87:ad:5f:38:d1:db:49:44:c0:ff:23:59:43:89:df:
16:31:27:4c:3b:4a:05:c4:0c:43:0a:2d:24:f1:82:
9a:01:9d:37:af:bc:69:bd:c6:98:cd:ac:1a:70:6a:
fc:db:a6:de:ec:cd:db:fa:3d:af:24:ca:a5:b4:d1:
1b:67:ed:70:f8:4d:8a:f2:d5:bf:69:b3:6f:35:0c:
ad:ed:1e:ba:ac:74:c4:f2:87:6d:36:5f:65:f5:a9:
bc:57:0a:f6:09:13:7b:4d:b5:f2:70:02:14:5a:9e:
75:3f:c1:1d:c7:87:55:bb:25:b6:10:b5:d2:d6:c5:
23:13:74:b0:0d:41:b7:f9:3d:5c:d7:69:c9:15:46:
86:37:70:ba:a1:ae:8b:ec:09:f6:84:19:b0:23:81:
01:96:d7:10:1d:d7:d5:fd:3c:89:56:79:26:ba:3c:
2c:a5:e1:03:f0:88:a3:6f:c3:15:7f:d7:5b:a7:60:
61:62:b7:b2:31:d3:d9:78:d0:28:d5:e3:7f:0c:27:
d1:a2:27:e2:ce:41:b7:0c:40:fd:ac:d5:c8:ef:dd:
b7:ef:d9:8a:b4:2b:12:2b:8d:3e:ae:4c:69:b1:99:
21:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7C:0B:EB:F3:DA:55:76:2B:15:AB:79:40:94:E7:B8:E9:2B:93:AB
X509v3 Authority Key Identifier:
keyid:35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:56:63:d3:bb:44:6e:e3:ce:7d:c7:90:35:45:b4:79:48:fa:
4f:53:88:b6:5d:ed:1b:82:3a:8b:d8:0f:8a:ad:26:a4:bc:f8:
b7:8f:0c:08:0b:49:f5:33:d6:10:79:bc:5d:c3:2a:ab:1f:42:
26:fa:2f:94:ee:77:5d:fe:8c:c7:cc:df:4e:d9:6a:0a:e8:e8:
3c:3e:fe:98:fb:41:49:b5:68:68:d9:18:22:36:0d:48:6d:49:
d6:fe:2c:c7:3c:d1:9c:a6:d9:6f:57:72:7b:30:23:bb:f2:96:
8b:d6:1a:2a:f7:45:b0:bd:67:f8:87:c6:04:99:dd:22:03:fb:
ce:dd:cd:7d:e8:43:0b:5f:99:0c:44:92:7e:23:34:59:90:33:
1e:f0:48:b4:7e:cd:f9:95:79:9c:a1:d6:33:7e:be:87:90:f0:
27:0b:fe:a1:b0:98:0b:81:5f:52:c4:1b:38:c2:57:cd:68:31:
83:d4:34:35:4c:2b:5e:4e:63:21:2b:7c:ee:5b:9a:70:e6:56:
19:26:d9:09:a6:1b:92:f7:fd:f2:2f:38:c9:d7:6f:21:11:de:
86:06:96:37:50:98:e3:01:79:a4:dd:93:21:29:fc:cf:59:9a:
e6:e2:15:25:90:91:db:ae:c7:bf:c7:23:0f:d5:d7:78:58:a0:
1c:57:b3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:53:54 2026 by rpki-client