Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
File: NBSgbayFTb7mCYRYjex7MoS1qlA.mft (raw, json)
Hash identifier: jQ2K6o5kIWGPUUfMhGq3iPa6WvC1bgD5kOYH/VzjLUA=
Subject key identifier: FB:8E:D6:66:35:62:9F:B9:3B:3D:13:27:E1:5B:A3:E9:73:7E:09:35
Authority key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
Certificate issuer: /CN=3414a06dac854dbee60984588dec7b3284b5aa50
Certificate serial: 019F93C918F3923B51D86CA750E813B26B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
Manifest number: 1958
Signing time: Fri 24 Jul 2026 11:00:57 +0000
Manifest this update: Fri 24 Jul 2026 11:00:57 +0000
Manifest next update: Sat 25 Jul 2026 11:00:57 +0000
Files and hashes: 1: NBSgbayFTb7mCYRYjex7MoS1qlA.crl (hash: 1Mm6mXmc3QdTLxj96A5vppg/L3Yp+xElwJkI4DvaNOU=)
2: _X5nMX01zIkdocFV_HQBvj4jIFY.roa (hash: 2Fkt6K/RwxywwOu2/bTk9f7aYl/AJ79Q108D3K95Ro8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:18:f3:92:3b:51:d8:6c:a7:50:e8:13:b2:6b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3414a06dac854dbee60984588dec7b3284b5aa50
Validity
Not Before: Jul 24 11:00:57 2026 GMT
Not After : Jul 25 11:00:57 2026 GMT
Subject: CN=fb8ed66635629fb93b3d1327e15ba3e9737e0935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c2:05:84:93:e5:5e:11:6f:0b:26:96:24:1c:
7c:ff:69:1b:a3:65:15:93:f5:4f:4a:2f:ad:69:d3:
c1:9b:68:2e:b5:1f:f6:f7:b0:cd:14:46:c3:e7:15:
99:5a:b5:95:ed:5b:c8:15:b5:6c:9d:fe:58:2e:7f:
ce:e3:1f:27:a6:8d:be:c2:68:e5:37:6b:2c:41:b3:
70:f0:6d:aa:ac:1a:2b:8c:7f:81:ef:a0:d0:6d:3a:
77:20:9d:2e:e1:5d:62:46:1c:76:a8:e7:d7:82:66:
25:e7:cc:3c:2a:80:63:1c:3f:d3:86:03:f3:bb:70:
6e:7b:fe:19:2d:43:9a:91:f9:3d:5f:77:7b:00:86:
d4:19:77:36:84:24:94:a6:23:91:34:77:9b:a0:3b:
f3:fd:24:7d:c0:25:90:58:f4:e4:77:d6:b2:96:b2:
d1:e5:24:0f:3d:d1:4a:34:de:29:6a:25:38:92:86:
d4:d4:d7:55:ed:3c:14:cc:e7:a6:01:f3:a9:19:3b:
a9:e4:cf:a2:90:b0:ce:38:60:b3:09:b9:83:cf:6f:
e5:8c:c5:17:e6:df:63:31:98:de:74:8d:53:03:0a:
be:22:44:ff:6b:09:80:03:19:32:7a:dd:f3:20:ae:
ce:a4:79:b2:eb:7e:c3:ca:b2:ea:88:eb:e8:7b:6c:
2e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8E:D6:66:35:62:9F:B9:3B:3D:13:27:E1:5B:A3:E9:73:7E:09:35
X509v3 Authority Key Identifier:
keyid:34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:41:9d:fb:cc:e2:0f:c0:8c:cb:37:79:4d:0c:4c:a0:55:0a:
66:b1:6a:43:e9:7c:c3:d1:a2:39:88:e8:5a:fb:86:9b:65:7e:
b5:ee:df:02:33:0e:f7:94:d4:99:18:9d:d1:90:f7:3c:e0:67:
db:d9:0e:d6:29:7d:38:c5:ee:59:34:db:df:a1:c1:5b:3f:cc:
4b:a7:da:07:c5:35:d8:9b:a9:16:5a:71:3c:2f:fb:91:1c:11:
31:86:95:8d:3b:34:61:c4:4a:d2:e3:ca:c3:80:36:6c:42:6f:
65:f0:0d:16:61:27:dd:f2:32:d0:1f:3d:63:9e:73:9b:10:5a:
26:d6:93:50:0b:2b:65:46:b1:d6:87:a7:8c:2a:7b:68:9e:02:
cf:63:5f:f0:40:6a:40:ec:0a:f8:06:a2:7d:0a:f2:da:f0:f7:
9f:82:85:6e:b5:2d:93:d0:8d:50:b8:3d:5f:21:ad:b6:98:89:
b4:20:2f:e8:41:db:8e:df:6e:7c:d2:84:60:31:03:0b:7e:0e:
75:1e:63:a2:65:42:b2:21:f6:00:43:0d:66:60:be:99:c5:18:
9d:c3:fd:81:22:bd:29:01:9b:38:4a:4e:74:72:56:55:ca:1b:
35:b3:2e:7e:33:40:52:db:b4:35:a3:60:33:7e:99:b3:79:a2:
03:f0:19:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:37:47 2026 by rpki-client