Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
File: NBSgbayFTb7mCYRYjex7MoS1qlA.mft (raw, json)
Hash identifier: zQ5Nam4NfztWugS7ApkEY5dF+WvdCR0z3X1IWvj4PdQ=
Subject key identifier: 87:44:AA:2C:2C:21:3F:15:94:B4:7C:7A:D0:A7:80:B7:CC:5A:16:E2
Authority key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
Certificate issuer: /CN=3414a06dac854dbee60984588dec7b3284b5aa50
Certificate serial: 019E1D22AFB0E46D20B6631017FD07C34636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
Manifest number: 1896
Signing time: Tue 12 May 2026 17:01:12 +0000
Manifest this update: Tue 12 May 2026 17:01:12 +0000
Manifest next update: Wed 13 May 2026 17:01:12 +0000
Files and hashes: 1: NBSgbayFTb7mCYRYjex7MoS1qlA.crl (hash: 0Gnog8UlMW7s9JSPjgqKJ1ftHu3aRQwg/Iob7EujSt0=)
2: _X5nMX01zIkdocFV_HQBvj4jIFY.roa (hash: 2Fkt6K/RwxywwOu2/bTk9f7aYl/AJ79Q108D3K95Ro8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:af:b0:e4:6d:20:b6:63:10:17:fd:07:c3:46:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3414a06dac854dbee60984588dec7b3284b5aa50
Validity
Not Before: May 12 17:01:12 2026 GMT
Not After : May 13 17:01:12 2026 GMT
Subject: CN=8744aa2c2c213f1594b47c7ad0a780b7cc5a16e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fb:bb:34:61:9c:6d:2a:bf:39:08:43:4d:b7:
80:64:37:bc:3f:ea:95:92:9e:7f:f8:09:cf:09:da:
41:d4:4e:80:02:dc:cf:62:9b:8a:59:99:30:76:65:
32:6d:ed:52:1f:bb:4a:d5:b6:ff:23:1b:8b:bb:68:
a8:95:be:d5:0a:de:e4:1a:35:65:8b:9c:07:ea:f2:
71:6c:ee:4d:1d:fb:cd:f7:d1:2d:f7:dd:d5:5e:9c:
cb:d9:d8:ed:98:a3:ce:64:c7:bd:06:ad:e9:6d:9c:
e0:1f:da:38:79:49:59:d0:63:99:71:0f:74:e5:0f:
95:bd:71:96:63:ad:e8:a2:f0:2f:88:5f:fe:2f:0b:
46:7b:7e:35:9b:32:1c:10:41:5f:e1:7f:fb:f6:0e:
c5:ea:ef:70:6c:15:ad:a5:9c:7a:41:23:a0:fe:d6:
6b:7b:36:3b:f6:06:89:ae:36:a0:46:ea:6f:e5:2c:
3a:df:4e:92:7d:92:39:cc:f2:d6:a6:2c:e5:30:ff:
38:99:18:6f:f9:e0:53:c3:3d:af:77:51:4e:0c:69:
fd:5f:15:2e:13:b1:1f:47:ed:cf:ad:cd:83:0b:e1:
09:99:3e:10:ab:a6:2c:e2:4b:95:ca:18:51:c8:70:
d0:2b:7c:6c:0b:35:dc:6e:b5:b3:74:bc:20:ae:6c:
af:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:44:AA:2C:2C:21:3F:15:94:B4:7C:7A:D0:A7:80:B7:CC:5A:16:E2
X509v3 Authority Key Identifier:
keyid:34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:6f:66:d4:28:ce:fb:92:fe:66:c6:b5:c1:de:c9:a0:ac:98:
90:66:85:01:76:05:f4:ee:8e:55:00:f7:bd:fa:a1:ae:43:4d:
52:26:3b:c3:01:5f:49:e2:1c:98:f4:3d:67:c6:2e:73:48:30:
44:a6:e8:df:ba:fa:c9:2b:b1:b2:48:4a:65:03:6d:3e:55:41:
11:18:ea:06:21:36:9e:39:ed:9f:da:c6:b6:f1:bf:47:6d:81:
a4:6e:f1:b2:f0:ab:1b:3a:4c:f7:5b:66:65:91:16:ad:24:d6:
1a:b3:1f:47:e2:97:b7:4f:b1:cf:e6:29:11:d9:bd:49:c5:30:
4b:4c:a7:fb:d4:4b:90:a6:31:0a:4e:2b:03:26:1d:8f:6b:d8:
fe:b6:0c:7d:83:09:5c:55:b4:d9:40:e8:14:40:3a:42:88:5f:
a6:de:4a:1a:69:d9:37:39:c2:06:20:9a:8d:fc:cb:a4:d1:f9:
c2:d1:a1:c7:2d:fc:e7:0d:04:5d:93:fd:73:1a:0e:28:97:72:
3b:ed:73:a2:01:22:1c:0e:20:3f:4d:ff:f1:e2:87:2c:3c:b8:
17:60:ec:1a:55:e2:e5:f7:b2:8a:76:49:76:08:ab:ee:89:e0:
3c:b8:87:ad:77:81:8f:ec:27:44:35:96:b7:e4:ab:66:93:b1:
9a:6f:91:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:40:24 2026 by rpki-client