Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
File: NSFqNgJ3h24-k7Kb1LuckjH60vc.mft (raw, json)
Hash identifier: vy2OvBLQjoSC2fQJG12uj/ZRuQCdZMZiCyAwZDsDkBg=
Subject key identifier: 63:B6:54:6D:61:87:B2:9C:F6:EC:7D:A2:AC:D1:6C:D5:8D:F3:95:FC
Authority key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
Certificate issuer: /CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Certificate serial: 019D2A3BF3DBCA60CA103ED72AB32674C548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
Manifest number: 12EC
Signing time: Thu 26 Mar 2026 13:01:05 +0000
Manifest this update: Thu 26 Mar 2026 13:01:05 +0000
Manifest next update: Fri 27 Mar 2026 13:01:05 +0000
Files and hashes: 1: NSFqNgJ3h24-k7Kb1LuckjH60vc.crl (hash: YxG7ltORw627g/7tNIBaOfSglXQN1BXD9SSJtmyCpco=)
2: TM7w-cXB8z85wBN-IZClxGDsneg.roa (hash: emRsf5rqRT9CiCwd3UgGiz4Po2LgcGkGywPIUaBs3bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:f3:db:ca:60:ca:10:3e:d7:2a:b3:26:74:c5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Validity
Not Before: Mar 26 13:01:05 2026 GMT
Not After : Mar 27 13:01:05 2026 GMT
Subject: CN=63b6546d6187b29cf6ec7da2acd16cd58df395fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c6:a4:00:b8:4e:8f:2c:93:94:a1:bc:72:f1:
5c:29:6e:f5:0b:50:6c:62:86:52:d3:8d:ee:65:d2:
fc:96:e1:22:15:91:d9:34:2c:67:bf:3b:04:77:03:
97:43:b4:98:0f:ac:ad:90:dc:9f:85:27:23:aa:01:
6b:28:78:e2:9c:7e:ac:3e:6a:20:54:be:20:26:40:
9b:07:46:70:b6:9e:13:ad:6c:32:5f:f8:28:55:ad:
51:15:de:e6:f6:37:15:2a:94:25:16:ba:f6:19:91:
51:a2:a2:cf:b3:b5:c6:83:a0:c8:38:a7:fb:43:52:
0b:57:08:e1:f0:12:82:8e:cf:f1:87:c9:55:35:69:
8b:4f:07:4b:6e:68:d5:20:85:9c:94:0a:95:88:ee:
34:dc:3f:1f:0e:23:dd:1b:6e:2d:27:9f:93:6a:9a:
b9:25:6c:c3:e6:b6:7d:71:8b:d7:f1:52:7f:60:15:
64:b5:d2:b6:83:74:a3:7a:05:da:77:ab:b1:b4:9e:
98:0a:8b:c2:bc:b5:63:9b:9c:9c:c1:03:93:91:11:
04:ba:4d:e6:1d:4e:08:56:9c:da:72:ca:91:c5:8d:
03:ca:40:60:73:09:c2:60:41:0c:f4:ae:1d:e6:22:
3a:a4:f4:01:58:fe:b9:40:fc:d6:2d:69:1d:ab:25:
5d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B6:54:6D:61:87:B2:9C:F6:EC:7D:A2:AC:D1:6C:D5:8D:F3:95:FC
X509v3 Authority Key Identifier:
keyid:35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:79:77:92:02:44:d4:52:3f:07:ee:03:bb:08:96:38:7f:f8:
7f:c6:33:ba:42:3e:2c:8a:30:5e:c9:fa:c7:8e:96:be:f4:a7:
46:9f:04:5c:1a:15:e4:31:cc:3e:62:e9:a7:fb:3a:56:86:2e:
31:bc:1f:42:82:a8:2a:fc:dd:fd:d2:87:44:21:43:9c:8a:4d:
6e:8c:74:86:64:58:02:65:87:c1:6f:d0:06:a8:10:ce:b3:72:
0f:a7:49:b1:31:40:dc:5c:38:4e:ab:8c:f8:18:36:67:3f:a7:
02:2f:03:7b:84:47:16:4a:b2:f1:42:b4:a7:51:0b:1e:0f:ec:
b7:c1:b9:13:19:ff:00:02:53:53:99:e4:20:1a:b3:55:03:5e:
29:06:b7:52:2c:97:8a:c8:4f:41:b3:b6:3b:a1:02:e2:ed:f3:
37:2e:94:15:c3:53:1f:d4:86:be:d6:ac:d4:b0:81:36:85:bc:
cd:bc:b3:68:c9:28:c2:bd:77:2e:21:8f:2a:74:a6:2c:a0:c7:
e2:6b:a8:a0:88:19:86:de:55:db:3c:10:cb:f9:20:26:79:a0:
e3:8b:70:99:6a:28:26:98:7b:62:21:01:c8:65:1e:c6:2b:08:
bd:83:cf:c1:c7:5c:8a:d9:a4:25:7f:00:2d:c9:21:21:1e:b4:
b9:09:7e:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO/PbymDKED7XKrMmdMVIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MjE2YTM2MDI3Nzg3NmUzZTkzYjI5YmQ0YmI5YzkyMzFm
YWQyZjcwHhcNMjYwMzI2MTMwMTA1WhcNMjYwMzI3MTMwMTA1WjAzMTEwLwYDVQQD
Eyg2M2I2NTQ2ZDYxODdiMjljZjZlYzdkYTJhY2QxNmNkNThkZjM5NWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycakALhOjyyTlKG8cvFcKW71C1Bs
YoZS043uZdL8luEiFZHZNCxnvzsEdwOXQ7SYD6ytkNyfhScjqgFrKHjinH6sPmog
VL4gJkCbB0Zwtp4TrWwyX/goVa1RFd7m9jcVKpQlFrr2GZFRoqLPs7XGg6DIOKf7
Q1ILVwjh8BKCjs/xh8lVNWmLTwdLbmjVIIWclAqViO403D8fDiPdG24tJ5+Tapq5
JWzD5rZ9cYvX8VJ/YBVktdK2g3SjegXad6uxtJ6YCovCvLVjm5ycwQOTkREEuk3m
HU4IVpzacsqRxY0DykBgcwnCYEEM9K4d5iI6pPQBWP65QPzWLWkdqyVdqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGO2VG1hh7Kc9ux9oqzRbNWN85X8MB8GA1UdIwQY
MBaAFDUhajYCd4duPpOym9S7nJIx+tL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlNGcU5nSjNoMjQtazdLYjFMdWNrakg2MHZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mMjU1MDYtNmE2Yy00OTdkLWE0YWIt
MjQ4YzQ3YjNjN2Q4LzEvTlNGcU5nSjNoMjQtazdLYjFMdWNrakg2MHZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9mMjU1MDYtNmE2Yy00OTdkLWE0YWItMjQ4YzQ3YjNjN2Q4
LzEvTlNGcU5nSjNoMjQtazdLYjFMdWNrakg2MHZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG3l3kgJE
1FI/B+4DuwiWOH/4f8YzukI+LIowXsn6x46WvvSnRp8EXBoV5DHMPmLpp/s6VoYu
MbwfQoKoKvzd/dKHRCFDnIpNbox0hmRYAmWHwW/QBqgQzrNyD6dJsTFA3Fw4TquM
+Bg2Zz+nAi8De4RHFkqy8UK0p1ELHg/st8G5Exn/AAJTU5nkIBqzVQNeKQa3UiyX
ishPQbO2O6EC4u3zNy6UFcNTH9SGvtas1LCBNoW8zbyzaMkowr13LiGPKnSmLKDH
4muooIgZht5V2zwQy/kgJnmg44twmWooJph7YiEByGUexisIvYPPwcdcitmkJX8A
LckhIR60uQl+LQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:01:56 2026 by rpki-client