Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
File: NLQZ-koKFgUYgxjN9KIESZKFO5U.mft (raw, json)
Hash identifier: cfutQm5Q5fJ484Fdadax5JCXXdP8odgeoNJzRPgXRPM=
Subject key identifier: BE:AF:FF:64:8F:D9:F9:65:1C:E4:33:3D:5C:89:87:C9:27:A9:0E:EC
Authority key identifier: 34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
Certificate issuer: /CN=34b419fa4a0a1605188318cdf4a2044992853b95
Certificate serial: 019E1FED0F08B1D754063BCB1534CBFC30E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
Manifest number: 11CB
Signing time: Wed 13 May 2026 06:01:30 +0000
Manifest this update: Wed 13 May 2026 06:01:30 +0000
Manifest next update: Thu 14 May 2026 06:01:30 +0000
Files and hashes: 1: CXpfYBeROwqKk6wPP8obU4SkW0c.roa (hash: eH5Dz/cn97xfby/TCzcXeuSIcb3N3axo2YR3ovzvm14=)
2: NLQZ-koKFgUYgxjN9KIESZKFO5U.crl (hash: mBw39FY683vO2LrCvcpV7mlkHi3On0bsNTHRpn8ACvY=)
3: lwYSlpTcrkiQkDzeOQ8BoLNseFE.roa (hash: 5tgpdt7/xmiOrPEu2MALXWkNE2cqkUWOYBS+UkJ1nT0=)
4: sgMcau3D-EQEi1zB4j-31e-AG0g.roa (hash: feRutTx2W38pnuALKbaPopDGRLCZYDeeC1Z2bMCEyeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ed:0f:08:b1:d7:54:06:3b:cb:15:34:cb:fc:30:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b419fa4a0a1605188318cdf4a2044992853b95
Validity
Not Before: May 13 06:01:30 2026 GMT
Not After : May 14 06:01:30 2026 GMT
Subject: CN=beafff648fd9f9651ce4333d5c8987c927a90eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:76:e9:00:54:5a:51:24:8e:2a:f3:5e:c7:2d:
e9:12:9d:e0:d6:31:ab:0a:80:ad:b2:fd:07:ba:e2:
ad:8b:7a:ec:72:97:c4:f7:4e:f4:72:5d:89:c8:2c:
8d:e5:4f:0d:78:63:e0:28:74:8e:18:29:15:09:a2:
9d:3e:25:9c:e5:a8:ff:38:6e:6c:4e:85:76:7f:69:
fb:86:7f:19:1e:7b:1c:70:4b:95:f8:8f:4b:06:95:
ac:a8:e6:90:99:e7:1c:42:83:bc:c3:07:dc:a4:9c:
ff:93:10:4d:0c:84:94:4d:0d:b9:db:94:80:d2:10:
4b:31:98:a9:76:ee:19:fa:20:c7:05:e1:c7:42:da:
6d:ef:bf:f8:9e:17:7a:f5:d3:38:6d:e1:f1:05:8e:
62:27:fa:7b:c6:f7:10:98:17:78:71:13:c5:26:96:
09:84:8f:58:ee:9f:83:e0:b3:43:cc:af:12:95:e5:
7a:8d:74:67:c1:88:26:4c:7c:27:18:92:6c:07:1b:
d6:5b:85:59:45:5b:e0:86:4a:4c:45:19:f7:c7:18:
bf:00:34:f1:67:27:c1:a8:33:6b:f4:a5:dc:ce:74:
88:25:0c:10:70:45:6d:9e:ba:32:4d:6c:4c:27:cb:
0a:d5:94:8e:98:44:a0:08:91:b3:f9:0b:52:42:fa:
ad:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AF:FF:64:8F:D9:F9:65:1C:E4:33:3D:5C:89:87:C9:27:A9:0E:EC
X509v3 Authority Key Identifier:
keyid:34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:25:d0:14:a6:e1:f1:8e:8b:93:64:5f:7d:0f:ed:d0:48:23:
2f:1c:28:89:76:47:fa:25:5c:20:cf:0a:d5:96:18:ee:2d:ef:
6b:05:15:c8:68:38:26:bf:7b:6a:08:2d:4b:b6:f4:72:a7:c8:
39:f7:26:45:7d:9e:41:16:7b:66:c4:60:95:9f:fc:a3:03:73:
0d:4b:7c:fc:4c:c7:fd:1a:46:23:14:a3:7a:61:72:ce:68:dc:
5e:82:4b:32:bb:c3:21:34:6d:a1:ea:5e:ba:83:24:3a:e5:ca:
d0:df:4c:14:98:65:04:b5:a2:5f:bc:10:e2:92:aa:44:90:7a:
77:53:5b:a5:52:00:04:64:13:dd:44:84:cb:65:d2:8e:24:50:
3d:ae:4b:ec:6e:73:16:e5:e8:c5:d7:a5:92:e5:b6:56:37:59:
69:a2:37:a2:e2:1f:4f:32:9d:af:b2:81:f5:e5:c6:13:06:5b:
62:42:b0:17:df:07:09:6e:d0:c9:18:57:1b:26:1e:95:1b:03:
7e:16:9d:84:f1:11:5d:3b:8a:6f:d3:e8:d9:06:ce:3b:bf:52:
cb:2c:8b:17:aa:bb:08:d5:4d:f5:3c:4e:f8:24:71:08:c3:52:
06:f3:e0:78:49:4d:14:8c:12:0f:55:c8:e5:68:ab:22:21:fc:
37:3b:9c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:38:12 2026 by rpki-client