Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
File: NSFqNgJ3h24-k7Kb1LuckjH60vc.mft (raw, json)
Hash identifier: uZzAfV+RV/tjXUHbteIJHxILhTZOsWnwhI2Fci62O8g=
Subject key identifier: 53:D0:F0:B4:28:D3:EE:E9:32:65:BA:C1:22:30:44:52:0D:96:E0:DE
Authority key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
Certificate issuer: /CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Certificate serial: 019F943662BB7F06C223FCB84A7353D1DD78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
Manifest number: 142C
Signing time: Fri 24 Jul 2026 13:00:19 +0000
Manifest this update: Fri 24 Jul 2026 13:00:19 +0000
Manifest next update: Sat 25 Jul 2026 13:00:19 +0000
Files and hashes: 1: NSFqNgJ3h24-k7Kb1LuckjH60vc.crl (hash: r3KyiZNTzCBzYaRvzFvBgLCbxXV47Ae9Og/Lf0WLuIs=)
2: TM7w-cXB8z85wBN-IZClxGDsneg.roa (hash: emRsf5rqRT9CiCwd3UgGiz4Po2LgcGkGywPIUaBs3bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:62:bb:7f:06:c2:23:fc:b8:4a:73:53:d1:dd:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Validity
Not Before: Jul 24 13:00:19 2026 GMT
Not After : Jul 25 13:00:19 2026 GMT
Subject: CN=53d0f0b428d3eee93265bac1223044520d96e0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f9:01:19:11:1d:2f:94:c4:2e:3b:74:31:84:
1e:f8:b4:f1:87:98:db:70:7b:0c:83:58:cf:60:2e:
a5:76:06:c7:8f:26:ac:50:e3:5b:e5:53:9f:6d:e5:
a5:9f:6e:55:0a:b4:ae:e9:71:af:6b:65:50:d2:1e:
c6:70:a5:d0:63:7e:64:0a:51:fd:ca:0a:ed:90:e2:
b8:e5:94:8b:2a:bc:3c:10:67:37:ff:c2:06:3b:0f:
c9:70:fa:9d:f7:c3:4e:db:f1:22:c3:b3:e8:0f:30:
a5:de:a4:0c:16:83:c8:76:bc:6a:46:55:84:da:95:
72:1e:ae:de:74:6e:c9:19:4c:7e:0e:1b:e4:2e:d0:
75:d8:b1:df:46:d0:4c:08:7b:87:79:75:1c:8a:cb:
dc:86:e4:44:0a:29:45:7f:2f:9c:1e:9e:92:17:a4:
bd:ca:88:9e:6b:8c:7d:f3:eb:9f:65:f8:a2:cb:86:
46:0c:8b:92:f5:70:cf:83:d6:cc:2b:8d:b9:ee:f7:
65:a2:68:f3:75:24:07:c1:90:41:b8:50:f3:33:f6:
ed:13:f1:73:b0:36:c6:89:14:01:0f:10:a3:1c:3b:
f0:7b:52:0e:c8:2c:93:75:77:ad:3b:57:ff:76:10:
39:be:7d:f1:92:1a:a8:f7:7b:30:cf:1a:ff:89:33:
db:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D0:F0:B4:28:D3:EE:E9:32:65:BA:C1:22:30:44:52:0D:96:E0:DE
X509v3 Authority Key Identifier:
keyid:35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ae:6c:42:ad:bb:58:e1:0d:63:04:13:37:4a:a8:04:66:37:
be:76:a2:95:9c:4c:cd:d8:7b:91:31:7b:e3:af:f5:41:0c:d2:
88:1e:c7:08:e5:73:fd:29:ae:d9:b9:21:7a:c4:ef:83:a0:62:
2e:8b:1e:28:86:ee:24:85:2c:86:3d:0d:fe:37:1b:03:f7:fd:
9d:90:e8:d0:22:4a:f1:e6:41:5c:94:99:64:f7:86:0b:9e:52:
1c:f5:1d:a2:8d:8e:36:fa:75:07:49:09:e4:be:ef:7d:10:ee:
ba:61:df:60:9e:a5:6f:55:21:35:cf:43:23:0a:e1:09:27:fd:
1e:5b:7f:ac:dd:ca:de:ad:68:b4:4f:1c:d5:7e:b6:f9:f9:de:
30:ab:b5:63:f4:03:da:c9:af:be:b0:64:39:13:12:3d:e2:dd:
2a:f9:ac:aa:11:f9:76:dc:76:74:f0:77:7b:1c:e4:a5:8c:0e:
80:8e:5c:bc:ef:eb:6b:db:43:55:a0:74:47:2b:5f:c7:05:89:
8e:48:3a:30:a1:16:ab:60:ed:70:cf:89:eb:69:57:e8:e8:fe:
bd:11:05:fa:f8:f1:64:f4:22:e4:83:0e:46:c9:3f:5b:52:d6:
a0:09:e8:74:f6:42:b0:f8:60:e6:74:ae:23:56:a6:8c:af:4a:
0f:f1:3b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:50:29 2026 by rpki-client