Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
File: NSFqNgJ3h24-k7Kb1LuckjH60vc.mft (raw, json)
Hash identifier: EIRth/7mFngQGHA2WPGOIbNsfJr0MO9OvYrPNxdQh5A=
Subject key identifier: 85:6E:B2:50:60:CC:6D:56:04:17:AF:C4:88:51:D2:9B:A6:7F:6D:31
Authority key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
Certificate issuer: /CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Certificate serial: 01A10700EC43D8957AD3BFE7D617FE5183F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
Manifest number: 14ED
Signing time: Sun 04 Oct 2026 13:01:03 +0000
Manifest this update: Sun 04 Oct 2026 13:01:03 +0000
Manifest next update: Mon 05 Oct 2026 13:01:03 +0000
Files and hashes: 1: 6_mKfmRyYh_HHt_1AeGy1B2emsw.roa (hash: 71vWDant5UDHMxwkBCq/hUEjKeIJZzb0rpoKSTkfucY=)
2: NSFqNgJ3h24-k7Kb1LuckjH60vc.crl (hash: pbxnzXUsiZ4Hfm2VlLwW+Fns9+aaQ/3+UVwEpk4yOGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:00:ec:43:d8:95:7a:d3:bf:e7:d6:17:fe:51:83:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Validity
Not Before: Oct 4 13:01:03 2026 GMT
Not After : Oct 5 13:01:03 2026 GMT
Subject: CN=856eb25060cc6d560417afc48851d29ba67f6d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:64:10:35:73:8d:a7:ec:77:fe:41:8f:59:ba:
2c:ab:42:15:52:c5:39:99:10:53:b4:35:cb:e8:c6:
ad:2d:d4:96:0d:5d:ef:d6:81:e5:3b:f7:9f:9c:41:
0c:98:2c:ef:1c:59:ce:fb:30:46:e7:ce:3b:64:a3:
11:6e:60:d4:95:45:5d:fc:e7:06:89:9f:66:7f:e3:
0c:69:6f:67:14:f4:37:0c:6d:cc:4e:3a:87:90:22:
71:77:5f:81:47:96:0d:b9:5a:70:05:27:6e:b8:1a:
d9:ce:05:3b:d6:eb:c5:fa:9b:52:ad:5f:13:b7:64:
f3:32:73:78:ab:41:2d:ce:07:3d:77:1f:79:90:08:
dc:20:54:41:cb:03:67:57:d7:b2:d3:c6:10:d1:b6:
fc:63:36:62:4b:e3:cf:e0:c9:89:ef:c3:38:3b:ad:
10:fe:85:94:b4:7f:6a:2b:0d:b0:65:b1:37:cd:61:
21:1e:72:3a:0c:27:8e:05:74:5d:d0:0d:92:6a:29:
0c:6c:0a:55:ab:8d:28:52:ee:ad:ae:0a:f2:90:2f:
9a:56:ba:96:bf:37:98:9c:a2:50:84:25:1a:40:02:
d2:4d:c4:22:95:9c:0c:d3:55:9a:ac:8d:84:df:ba:
ff:2c:b4:0a:65:26:70:3a:0f:d6:1a:c8:5d:95:35:
79:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6E:B2:50:60:CC:6D:56:04:17:AF:C4:88:51:D2:9B:A6:7F:6D:31
X509v3 Authority Key Identifier:
keyid:35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ca:7f:cf:8c:cd:57:d9:7d:7c:ee:78:6a:53:49:8a:25:96:
a1:3c:97:66:8e:44:c2:24:9d:01:7c:e2:c2:50:53:a3:66:85:
c7:18:f8:37:db:1d:06:6d:72:77:13:df:06:2d:9a:86:76:fd:
8f:38:4e:c7:97:05:4d:63:09:6c:c2:8c:45:fa:5f:a5:bc:17:
6f:72:8e:76:36:79:0d:2c:47:7d:b7:6d:89:05:de:6c:0f:0c:
b4:61:c6:b7:df:43:6e:d3:7e:d8:fb:5e:f8:50:19:d6:6c:65:
35:33:d7:3f:ec:04:30:7e:aa:bb:f3:b8:a1:f5:40:0f:d0:60:
0d:3f:ad:5c:69:8f:16:c7:a5:4a:d5:f8:f8:03:d3:cd:66:98:
50:a7:95:ac:81:db:5b:d0:26:01:48:45:8a:94:6a:0b:a7:d0:
a0:b3:87:59:11:35:71:14:17:de:c1:7a:76:41:86:05:0e:03:
e3:82:51:29:04:b9:b4:99:89:01:a2:fa:be:ed:c6:8d:87:75:
85:17:d8:6e:9b:37:0d:4c:67:08:7a:26:32:f6:6d:e3:4d:c4:
df:f5:fe:6d:e7:7e:8c:74:7c:3c:be:c4:65:24:f3:11:74:e4:
2e:e2:ea:55:d8:c0:1e:49:ce:36:fa:94:ea:26:bf:7e:90:51:
df:12:d2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:35:16 2026 by rpki-client