Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
File: NBSgbayFTb7mCYRYjex7MoS1qlA.mft (raw, json)
Hash identifier: iTNi5eDmVEk4iaYg2J9rNT4NFMTcBrgaQXzQ8JlOJLA=
Subject key identifier: AD:E8:AF:D5:BC:19:C2:7E:1D:10:66:EC:FF:03:BA:82:62:F8:CB:D5
Authority key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
Certificate issuer: /CN=3414a06dac854dbee60984588dec7b3284b5aa50
Certificate serial: 01A1DB01598E1095220D483722A35906DF00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
Manifest number: 1A86
Signing time: Sat 14 Nov 2026 17:01:01 +0000
Manifest this update: Sat 14 Nov 2026 17:01:01 +0000
Manifest next update: Sun 15 Nov 2026 17:01:01 +0000
Files and hashes: 1: NBSgbayFTb7mCYRYjex7MoS1qlA.crl (hash: D6Lgzp4I9745nSFkKu3UwpBI4wFU/NO4rON9/EIxras=)
2: _X5nMX01zIkdocFV_HQBvj4jIFY.roa (hash: 2Fkt6K/RwxywwOu2/bTk9f7aYl/AJ79Q108D3K95Ro8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 17:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:01:59:8e:10:95:22:0d:48:37:22:a3:59:06:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3414a06dac854dbee60984588dec7b3284b5aa50
Validity
Not Before: Nov 14 17:01:01 2026 GMT
Not After : Nov 15 17:01:01 2026 GMT
Subject: CN=ade8afd5bc19c27e1d1066ecff03ba8262f8cbd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:96:42:9a:b5:57:35:d8:e7:f6:c9:ad:74:04:
00:b8:a8:1b:50:4e:40:1b:4c:5f:04:25:00:68:c4:
72:a4:e8:1c:f4:d4:04:e9:2e:fa:a7:8d:37:35:cf:
5c:b2:9d:4f:59:58:9c:43:d6:be:42:00:30:4f:41:
00:77:75:19:d7:05:16:8c:9c:78:4b:a1:23:e0:38:
fd:15:30:63:1b:26:83:03:67:7d:e6:f6:dd:5f:e0:
56:42:02:82:d2:bd:8a:60:97:5c:35:51:eb:77:a7:
3c:5f:85:68:90:13:75:2e:30:32:53:37:11:4e:a3:
c7:f9:f3:e2:3b:3e:ef:9f:9d:c1:6a:e5:8a:ae:24:
90:c4:df:ac:be:36:fe:97:7d:f8:fe:a3:07:d5:48:
da:c5:44:16:88:48:89:df:d0:be:ef:5e:6e:77:e9:
15:78:61:86:c5:5b:41:3b:b4:eb:83:a6:96:b0:3f:
db:7d:b7:71:be:31:4e:d4:ab:a3:0a:87:8c:e1:3c:
6c:56:6b:20:ce:e8:3a:0a:4c:b8:cb:77:5c:cf:48:
e2:84:de:cb:83:a8:39:e7:5a:1d:47:6b:6f:72:2f:
f1:78:ed:80:ad:4a:bd:75:a5:9f:39:59:7d:f4:34:
25:11:f6:c7:e2:72:eb:3b:28:4a:d3:aa:10:fb:29:
d7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E8:AF:D5:BC:19:C2:7E:1D:10:66:EC:FF:03:BA:82:62:F8:CB:D5
X509v3 Authority Key Identifier:
keyid:34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e3:ff:9d:9a:3f:88:0d:51:d3:4d:5e:11:bc:65:0d:d0:bc:
8f:66:19:27:c3:8e:e0:13:02:30:37:ce:b2:20:99:46:e8:c0:
6c:56:81:4f:83:ee:d5:05:21:33:1e:30:ff:c1:02:42:03:25:
9e:1a:03:00:bb:bc:ee:da:ed:f7:f8:0a:bd:b0:0a:da:ed:1a:
8a:e4:53:92:8e:c1:39:b7:19:5d:50:ef:76:20:eb:c2:61:15:
07:47:83:e7:04:b1:d8:48:98:b8:7b:18:3e:5f:7f:0c:82:93:
d4:bf:db:9e:28:86:6a:ad:cb:eb:24:d3:dd:84:6c:6d:fa:86:
c1:00:1c:1f:6d:10:4c:ef:ed:76:0d:da:c6:d1:5d:4d:7f:41:
42:e7:a4:d4:03:8b:cb:f5:98:5e:a3:78:c9:fb:52:22:0c:fa:
56:fe:e5:21:df:c1:2c:5e:bf:5d:aa:16:c3:e3:ae:04:68:bb:
bf:ec:bf:d7:67:6f:3c:09:fe:3e:70:75:c6:6b:2f:c1:d6:8b:
80:90:4a:d5:41:4f:e7:a1:63:b5:6d:e9:3d:17:93:18:6b:3f:
42:2f:e4:63:0e:d8:d0:e1:1d:da:ed:80:9b:25:47:f8:81:22:
ba:eb:a3:74:ba:01:6d:a2:54:18:28:c2:d5:e0:eb:ee:a2:cc:
01:7e:ab:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:13:58 2026 by rpki-client