Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
File: NSFqNgJ3h24-k7Kb1LuckjH60vc.mft (raw, json)
Hash identifier: ncsuZzv28/ANVk+D+CE1MmUcpvRvXtdyaKpmP0tLvJs=
Subject key identifier: A7:E4:E8:8A:E9:14:30:81:60:57:83:BF:DE:4E:C3:8B:B4:A9:91:EE
Authority key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
Certificate issuer: /CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Certificate serial: 019E1F7F2CB1B6150ADF726712F332769FC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
Manifest number: 136B
Signing time: Wed 13 May 2026 04:01:28 +0000
Manifest this update: Wed 13 May 2026 04:01:28 +0000
Manifest next update: Thu 14 May 2026 04:01:28 +0000
Files and hashes: 1: NSFqNgJ3h24-k7Kb1LuckjH60vc.crl (hash: zcuJB4gAQJtea0cTZEQMUFUEMhZeqjLCChHXROl9aAQ=)
2: TM7w-cXB8z85wBN-IZClxGDsneg.roa (hash: emRsf5rqRT9CiCwd3UgGiz4Po2LgcGkGywPIUaBs3bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:2c:b1:b6:15:0a:df:72:67:12:f3:32:76:9f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Validity
Not Before: May 13 04:01:28 2026 GMT
Not After : May 14 04:01:28 2026 GMT
Subject: CN=a7e4e88ae9143081605783bfde4ec38bb4a991ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4a:6d:45:8d:a7:aa:fe:87:07:21:3f:e2:85:
65:e4:ea:51:6c:8d:40:2a:5b:38:f9:8f:0e:22:a3:
6e:a7:dc:91:11:ed:a1:25:72:23:54:13:81:b7:9a:
62:67:e0:2d:1f:49:39:89:53:1c:19:87:9c:5f:76:
b1:8d:a2:0c:db:f8:1b:5c:a7:4f:ac:17:ff:03:d0:
5e:73:25:9b:7f:ca:d6:dc:d9:09:ae:4a:a6:37:e2:
8e:f4:d8:dc:12:1b:c4:ba:37:ef:59:95:23:aa:1f:
5b:ac:66:52:60:80:86:0d:ae:26:95:82:f0:01:4f:
52:b3:09:81:9f:07:1c:da:4e:3d:fd:46:59:eb:73:
dd:1e:97:0b:2c:31:e3:cc:e5:64:5a:e1:c8:02:a2:
b3:3c:84:43:32:67:ac:29:2f:04:eb:4d:49:ac:c7:
28:09:41:d9:2b:58:65:ba:8b:a2:75:4c:ed:60:6e:
1c:af:2e:70:b9:25:b7:48:f4:7e:19:72:fa:31:de:
0c:79:11:c5:8b:43:87:48:33:89:9a:dc:9e:f0:c9:
e9:45:36:fd:0f:46:5b:52:2e:8e:c6:b8:9a:e0:0b:
93:28:22:da:ab:ff:08:de:47:00:52:fe:b8:7b:08:
1a:d0:ef:9c:9e:10:8e:cb:18:57:76:53:3f:69:d3:
41:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E4:E8:8A:E9:14:30:81:60:57:83:BF:DE:4E:C3:8B:B4:A9:91:EE
X509v3 Authority Key Identifier:
keyid:35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:ce:56:89:13:ef:8d:9c:c0:7d:9c:a4:d3:9f:38:50:18:fb:
5d:32:b3:22:87:db:de:af:61:0d:ab:94:41:dc:78:4c:e1:35:
c6:4b:3e:47:cb:e5:e1:b4:47:3a:8c:0c:34:7e:a6:51:3c:39:
ee:70:31:df:01:7f:34:0e:41:01:5c:fd:c4:7e:f7:28:38:a0:
59:c7:d8:77:f8:d4:6e:bb:86:7d:f4:58:78:f4:2b:20:dd:4b:
dd:aa:e1:7c:66:77:fe:7e:3d:52:e9:d5:78:b1:aa:9b:e6:dd:
85:6e:73:03:25:29:93:3f:ab:0b:28:76:31:51:c8:33:6f:4f:
90:1b:5d:3b:8d:e9:29:e0:ca:91:6f:b9:4a:96:bb:dc:5f:82:
5d:32:81:f2:51:1e:00:92:7c:a3:d0:65:a3:6a:25:e0:e3:66:
00:8a:9b:d5:4f:e4:a8:ae:51:04:b7:37:78:2e:03:1f:2d:24:
9c:94:35:e9:c4:5f:88:1b:f5:26:9f:d7:8e:84:e3:4f:de:0b:
5c:03:ed:e1:21:1d:e2:65:0c:49:e7:a6:6f:42:6c:5d:93:40:
20:81:b5:66:a3:00:f7:ee:a3:0a:95:df:7c:4c:b7:89:3f:76:
1f:ea:f8:24:53:d9:2a:79:c7:84:17:66:8c:4f:0a:73:1a:fa:
21:3a:1a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:22:33 2026 by rpki-client