Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
File: NLQZ-koKFgUYgxjN9KIESZKFO5U.mft (raw, json)
Hash identifier: S7Bl1GZdyDlUh+U2SSyQy9aH/9vYur48jTmla2xJM8M=
Subject key identifier: 7C:9C:CE:43:94:4E:C7:49:80:D5:D6:08:40:5F:6E:6C:BB:91:39:83
Authority key identifier: 34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
Certificate issuer: /CN=34b419fa4a0a1605188318cdf4a2044992853b95
Certificate serial: 01A104A51109074B88F682E29BD2408F5702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
Manifest number: 134B
Signing time: Sun 04 Oct 2026 02:01:28 +0000
Manifest this update: Sun 04 Oct 2026 02:01:28 +0000
Manifest next update: Mon 05 Oct 2026 02:01:28 +0000
Files and hashes: 1: 5RqGEtRwKfBBtUM2GiJcfgd8IHM.roa (hash: cxvR146rATBiq7ER+urJkUdPx5qaULwVkMFPi3LbDWg=)
2: CXpfYBeROwqKk6wPP8obU4SkW0c.roa (hash: eH5Dz/cn97xfby/TCzcXeuSIcb3N3axo2YR3ovzvm14=)
3: NLQZ-koKFgUYgxjN9KIESZKFO5U.crl (hash: a/xE6n0bteKNHnIyW+Dzl0EDOTTJEn6QKxxMHIsOiKA=)
4: lwYSlpTcrkiQkDzeOQ8BoLNseFE.roa (hash: 5tgpdt7/xmiOrPEu2MALXWkNE2cqkUWOYBS+UkJ1nT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:a5:11:09:07:4b:88:f6:82:e2:9b:d2:40:8f:57:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b419fa4a0a1605188318cdf4a2044992853b95
Validity
Not Before: Oct 4 02:01:28 2026 GMT
Not After : Oct 5 02:01:28 2026 GMT
Subject: CN=7c9cce43944ec74980d5d608405f6e6cbb913983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c0:eb:f7:e4:24:31:98:b2:a3:52:a7:e9:d0:
ea:2a:4d:88:2e:99:a5:41:01:c2:96:39:a1:7d:3b:
d5:b3:7f:a6:34:b8:cd:51:a8:14:77:1f:69:04:17:
ef:95:27:da:76:eb:5e:4d:66:91:37:af:29:02:2f:
75:04:c7:4a:11:60:07:77:56:17:b5:0a:07:6b:ea:
ab:09:ea:60:06:5a:af:50:1d:6b:01:c9:3c:aa:cf:
64:80:ce:c5:d6:df:3d:e3:25:69:2c:f9:17:93:e4:
8b:09:2e:f9:f1:55:9d:42:ff:d3:c1:34:bc:51:6b:
72:72:ad:e3:ad:22:ca:31:00:1a:e0:7b:ba:d1:1d:
2e:91:e0:d1:3a:c6:8b:38:06:3d:3c:d6:53:44:cb:
ef:73:b3:ff:17:40:51:46:66:48:94:c3:e5:f6:09:
ec:86:af:d1:72:f4:7a:7d:57:ce:90:bd:e4:33:d3:
28:42:e2:3e:93:56:b4:0c:43:1e:98:71:a6:3f:87:
49:51:15:7a:17:fd:02:cd:3d:80:c3:bf:07:7e:ba:
a8:01:83:9d:2b:77:05:7d:36:39:8c:ab:28:7b:23:
dc:47:bd:4f:1d:61:51:8d:00:f1:1e:ca:63:ca:80:
3b:36:34:6f:89:e5:40:11:cd:8c:9f:3a:38:49:4a:
bd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9C:CE:43:94:4E:C7:49:80:D5:D6:08:40:5F:6E:6C:BB:91:39:83
X509v3 Authority Key Identifier:
keyid:34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:46:68:a9:c3:83:22:52:09:01:7f:b5:bc:ee:39:db:26:49:
2a:15:1a:2c:da:86:18:dc:0f:5a:8b:89:53:f8:44:6c:77:7d:
ff:b8:f7:57:fa:90:fa:3b:bd:2a:8a:72:31:82:79:31:a4:4e:
83:cd:f9:c4:27:db:ff:34:73:51:bb:26:4b:0b:35:67:ec:1d:
fd:e3:27:a9:6b:dc:1f:7f:5e:4f:b7:18:1f:88:e9:05:2a:2e:
c1:04:53:ce:23:15:7a:2e:11:97:2f:e5:16:b2:82:4e:51:28:
7d:79:7f:11:9b:d9:75:38:99:ef:7b:83:5c:fe:fa:60:13:3b:
3e:02:ed:5e:fa:14:fd:f9:97:5b:5c:06:76:f2:db:25:46:10:
b3:d8:52:6e:37:d0:67:8f:c0:0b:e1:a3:f6:01:48:60:67:8d:
ea:91:e9:87:63:c4:60:35:44:d2:55:41:f3:9c:7d:ba:f8:29:
6e:a9:9f:34:4b:77:58:dd:28:e1:ad:8c:b0:ff:19:62:0f:95:
a7:07:c5:e6:58:38:02:ad:f6:14:a4:a6:7c:0b:21:31:16:f4:
3c:ec:88:65:a1:e7:88:a6:fe:e8:0f:71:42:a4:d4:72:3f:06:
c2:5f:a5:46:89:02:22:d4:41:61:0d:83:3e:43:3e:dd:fa:30:
99:a0:ca:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 12:24:27 2026 by rpki-client