Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
File: NBSgbayFTb7mCYRYjex7MoS1qlA.mft (raw, json)
Hash identifier: TDLh02H4+Xe3375bOgJPUxcseT04gghrnjWGP1utoXY=
Subject key identifier: FA:B1:8C:AF:A0:5D:33:43:BB:35:9A:1A:CF:A8:C9:61:59:E0:A5:E5
Authority key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
Certificate issuer: /CN=3414a06dac854dbee60984588dec7b3284b5aa50
Certificate serial: 01A0D08054BF97B6105D84F2B165638F46FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
Manifest number: 19FC
Signing time: Wed 23 Sep 2026 23:01:06 +0000
Manifest this update: Wed 23 Sep 2026 23:01:06 +0000
Manifest next update: Thu 24 Sep 2026 23:01:06 +0000
Files and hashes: 1: NBSgbayFTb7mCYRYjex7MoS1qlA.crl (hash: ALJKf93+YXmVe9EmnTRXW0+3Cx4ABwQwS65mwuGSwFM=)
2: _X5nMX01zIkdocFV_HQBvj4jIFY.roa (hash: 2Fkt6K/RwxywwOu2/bTk9f7aYl/AJ79Q108D3K95Ro8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:80:54:bf:97:b6:10:5d:84:f2:b1:65:63:8f:46:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3414a06dac854dbee60984588dec7b3284b5aa50
Validity
Not Before: Sep 23 23:01:06 2026 GMT
Not After : Sep 24 23:01:06 2026 GMT
Subject: CN=fab18cafa05d3343bb359a1acfa8c96159e0a5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:75:5e:26:1e:74:38:7f:ad:72:e3:5d:93:f8:
cc:54:3e:81:6e:12:5a:43:e6:e0:9d:8a:4c:42:b3:
47:8c:cf:9a:dc:21:7d:b3:bb:4c:a3:bd:42:7a:c8:
04:fe:db:16:83:95:0e:3f:ed:70:fe:f4:90:68:ea:
22:91:fd:d8:06:7a:06:90:8b:07:88:30:59:93:7f:
2d:49:be:bc:bb:f1:98:58:5c:31:8e:b6:b3:7c:ba:
54:3f:fe:4b:73:a0:74:49:81:08:02:7b:a4:81:da:
b1:67:14:b7:44:27:55:11:e6:92:d4:ac:a7:02:e7:
7c:95:2a:10:c7:9c:71:81:19:7b:83:bd:34:3d:e7:
38:24:86:80:95:ef:3f:fd:e4:12:b7:d3:58:1b:e9:
a2:5f:89:b7:94:88:cb:b9:2f:f0:fa:4a:d1:c1:55:
ae:a6:5d:6c:e6:18:fb:3d:22:a9:bc:53:ea:8c:50:
5d:6a:f9:b2:80:38:7f:13:d9:3e:c9:a1:75:54:02:
a6:a4:3b:e7:0a:a3:7a:44:68:11:f5:c7:ad:03:32:
cd:11:d5:d8:5d:b6:80:19:c0:9c:39:c7:c4:1d:89:
78:6d:e2:76:5b:36:0d:c3:c7:8e:5e:8e:1d:1d:8f:
35:5a:15:e9:22:cb:13:03:ab:7d:15:e5:79:c5:39:
70:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B1:8C:AF:A0:5D:33:43:BB:35:9A:1A:CF:A8:C9:61:59:E0:A5:E5
X509v3 Authority Key Identifier:
keyid:34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:0f:01:00:89:cd:0a:fc:85:0e:2e:ef:1e:af:56:d6:68:97:
3d:df:8f:d3:09:1c:47:f7:8b:56:66:48:1b:d3:72:52:be:a1:
51:21:cc:74:6d:9b:89:cd:20:d1:ea:67:b1:67:aa:3e:b4:55:
3c:5e:ec:26:c0:22:18:d7:a1:28:f3:ec:ab:07:e6:fb:3a:18:
82:a6:ad:9f:86:32:03:f8:3a:67:37:e8:a1:e8:d2:7e:12:27:
54:b3:3d:56:80:87:39:74:cf:e5:83:45:be:57:7e:1c:44:24:
6c:d9:9f:94:2d:b0:18:7f:62:9e:4c:66:af:e4:7a:80:a4:c3:
36:cb:a5:3f:46:66:c5:ff:f9:80:fd:36:7f:c7:89:f6:70:d9:
50:11:37:11:5e:ca:b9:77:fa:3e:e7:81:b7:b0:ca:ac:4e:1c:
fc:4b:37:ff:46:c5:a0:af:43:e4:53:86:7d:fe:e8:23:7f:14:
22:6f:dd:7b:e4:15:a1:b7:a3:f5:b8:56:ea:66:5a:51:fe:0e:
4c:42:a9:92:bf:be:33:e8:49:83:fb:aa:c6:5f:e8:6a:14:7d:
eb:f1:82:9e:43:9c:34:fa:8e:db:04:a0:16:9d:6f:74:2c:e1:
85:74:51:97:0e:8d:c0:79:37:da:6b:66:a1:04:37:eb:8f:7c:
ba:d9:bf:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:34:36 2026 by rpki-client