Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
File: NBSgbayFTb7mCYRYjex7MoS1qlA.mft (raw, json)
Hash identifier: fD+WAci0pg+hFntT/BLxIGu2dqCwquWtNUZjwHQUHkI=
Subject key identifier: 69:70:D1:0D:2A:F8:4C:2A:AC:9F:7C:A4:BE:74:89:75:98:B3:C6:3E
Authority key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
Certificate issuer: /CN=3414a06dac854dbee60984588dec7b3284b5aa50
Certificate serial: 019D25F13FAEB2264215A834A0F5E6AA57F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
Manifest number: 1816
Signing time: Wed 25 Mar 2026 17:01:00 +0000
Manifest this update: Wed 25 Mar 2026 17:01:00 +0000
Manifest next update: Thu 26 Mar 2026 17:01:00 +0000
Files and hashes: 1: NBSgbayFTb7mCYRYjex7MoS1qlA.crl (hash: MbrXVMF78YZHASp/tLhR9+r6ZoNthsFrY3bqeiKFxew=)
2: _X5nMX01zIkdocFV_HQBvj4jIFY.roa (hash: 2Fkt6K/RwxywwOu2/bTk9f7aYl/AJ79Q108D3K95Ro8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:3f:ae:b2:26:42:15:a8:34:a0:f5:e6:aa:57:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3414a06dac854dbee60984588dec7b3284b5aa50
Validity
Not Before: Mar 25 17:01:00 2026 GMT
Not After : Mar 26 17:01:00 2026 GMT
Subject: CN=6970d10d2af84c2aac9f7ca4be74897598b3c63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:37:35:51:06:aa:e4:87:48:67:49:de:d7:
70:89:ca:a5:15:6f:f0:59:8e:ae:0f:34:d3:73:2c:
ad:0f:51:99:f5:b4:38:c6:8d:a5:7d:2b:2d:a8:09:
83:08:5e:3e:7b:ab:0b:ba:87:d8:b9:02:97:73:1b:
87:0a:d8:94:d9:52:14:17:55:4b:ed:35:bb:78:0d:
42:85:d5:1a:24:94:cf:91:be:0b:96:7a:b9:d2:11:
71:70:82:30:20:d5:65:2c:e4:03:62:08:d3:c8:8d:
ca:c0:07:44:21:8b:71:f8:ce:c3:61:bb:79:db:20:
1c:28:1a:a6:16:a9:c2:42:be:b4:e2:16:bd:0b:28:
29:8a:08:99:b0:6d:92:2c:ae:87:14:1f:5a:54:25:
d4:bf:1e:bd:44:cb:e1:95:6b:0d:d9:9b:ce:d9:5f:
d1:a9:c3:0f:fb:3f:59:fa:ec:74:89:98:94:68:6c:
99:fd:7b:ef:1d:53:17:0d:20:8c:f3:0c:33:b6:c7:
6f:1c:3b:63:7b:1d:a0:32:c5:c6:cf:2a:94:87:fd:
fc:8e:a8:b0:31:30:70:1b:29:39:fa:f9:87:89:39:
5e:5d:86:cb:29:b8:18:0e:86:41:67:3c:90:53:76:
29:49:a4:a4:d9:d1:02:c7:1f:28:eb:89:3b:e8:9d:
aa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:70:D1:0D:2A:F8:4C:2A:AC:9F:7C:A4:BE:74:89:75:98:B3:C6:3E
X509v3 Authority Key Identifier:
keyid:34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a3:2e:8b:67:6f:16:de:d2:4d:c2:b4:eb:55:b8:6f:e0:9c:
92:24:24:9e:84:35:80:bb:9c:6a:d2:a0:f7:0f:e1:bf:42:57:
8d:c0:14:6d:cc:8b:91:52:ed:f4:0d:69:5c:0a:6a:c5:14:02:
26:de:ca:0e:12:e8:27:b9:72:3f:b9:3a:b8:bd:61:35:f9:a5:
87:89:ca:45:b6:bd:03:eb:42:52:85:53:68:78:b8:94:3b:19:
dc:6a:6a:b7:b3:6b:cb:b6:28:d6:c5:d9:7b:56:6c:bf:c8:69:
eb:12:af:4a:08:77:ae:77:68:de:52:2a:3e:16:29:c8:1b:b7:
b9:63:4b:a8:95:4c:20:94:b6:a0:de:36:29:00:79:8c:1f:dd:
fb:30:78:54:8f:34:6c:09:6a:73:c0:17:d1:9d:76:3f:2f:b4:
40:9a:02:c3:0c:1b:65:1b:2b:c0:91:7e:3d:a6:90:86:24:80:
40:0b:1d:14:0f:78:db:ec:49:b4:e4:8e:b6:2f:0d:87:31:53:
41:4f:b0:eb:ef:8a:bd:ae:5d:88:b1:27:61:4a:be:20:d5:03:
c9:34:07:b5:cd:49:5c:6f:db:01:b3:26:4d:e7:e4:da:dc:49:
d6:08:42:d9:f4:d7:3d:4b:f2:f2:38:62:20:20:6d:89:b6:76:
3d:d1:77:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:10 2026 by rpki-client