Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
File: NLQZ-koKFgUYgxjN9KIESZKFO5U.mft (raw, json)
Hash identifier: EeJ/mqcmxYDjLhRhkVUpDlku8xYVeIw865ZVqiRNox8=
Subject key identifier: 2D:5B:C6:E9:64:16:95:58:8B:C4:EA:80:40:7C:F6:7A:19:F9:3D:A7
Authority key identifier: 34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
Certificate issuer: /CN=34b419fa4a0a1605188318cdf4a2044992853b95
Certificate serial: 019DEBC8E218A4FE4B4789A8D943D38F90C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
Manifest number: 11B0
Signing time: Sun 03 May 2026 03:01:43 +0000
Manifest this update: Sun 03 May 2026 03:01:43 +0000
Manifest next update: Mon 04 May 2026 03:01:43 +0000
Files and hashes: 1: CXpfYBeROwqKk6wPP8obU4SkW0c.roa (hash: eH5Dz/cn97xfby/TCzcXeuSIcb3N3axo2YR3ovzvm14=)
2: NLQZ-koKFgUYgxjN9KIESZKFO5U.crl (hash: mLuUQhyF3YVAmg8DoCSuxWe7gwDq+6ZSWRCTAnzjbds=)
3: lwYSlpTcrkiQkDzeOQ8BoLNseFE.roa (hash: 5tgpdt7/xmiOrPEu2MALXWkNE2cqkUWOYBS+UkJ1nT0=)
4: sgMcau3D-EQEi1zB4j-31e-AG0g.roa (hash: feRutTx2W38pnuALKbaPopDGRLCZYDeeC1Z2bMCEyeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:eb:c8:e2:18:a4:fe:4b:47:89:a8:d9:43:d3:8f:90:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b419fa4a0a1605188318cdf4a2044992853b95
Validity
Not Before: May 3 03:01:43 2026 GMT
Not After : May 4 03:01:43 2026 GMT
Subject: CN=2d5bc6e9641695588bc4ea80407cf67a19f93da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:18:ab:3e:cb:13:de:d9:a7:2c:f6:4d:d7:26:
16:2f:87:41:a7:bf:93:bf:60:db:01:06:df:eb:06:
c4:78:bb:d6:ee:d9:d1:81:40:f0:95:17:24:71:df:
60:d6:6b:a0:f3:77:d1:78:91:a1:15:e2:3c:13:05:
96:0b:1b:5d:77:43:72:a1:b8:4d:84:0c:c4:a5:7f:
b4:24:7f:c0:36:e0:b2:6d:c2:b6:75:1d:77:62:7a:
1c:7d:fb:05:6b:ad:b0:58:01:90:da:dd:f4:3e:20:
5d:3e:57:29:42:5f:d4:cd:db:7a:dd:69:02:89:74:
30:11:69:64:66:96:38:c9:1d:69:83:4f:08:6f:af:
82:87:51:8c:7f:86:f9:ba:3d:4f:8e:e1:f1:40:31:
ef:71:67:ad:a8:dd:8a:8c:10:2a:51:e6:be:27:64:
f3:25:aa:d3:95:56:44:13:d1:a5:5d:6f:cd:da:3d:
99:86:6c:fa:c0:49:e3:81:2e:54:35:1e:55:de:03:
29:31:22:14:fe:a7:7e:61:4f:94:d3:d0:aa:a9:65:
c1:b9:74:ed:2c:4a:75:44:af:cf:6b:cf:bd:b0:70:
8c:a4:b7:d2:04:f9:04:4f:f4:aa:a6:51:f7:53:41:
88:37:e3:66:e7:f4:5a:39:24:e5:3c:19:87:18:5c:
2a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5B:C6:E9:64:16:95:58:8B:C4:EA:80:40:7C:F6:7A:19:F9:3D:A7
X509v3 Authority Key Identifier:
keyid:34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:9b:8a:ab:0a:9a:f6:59:af:06:68:8b:98:d5:36:8d:f0:2f:
ee:50:5f:81:f7:d1:32:38:a5:24:d2:1b:cf:ea:b7:cf:22:8c:
de:cd:56:02:b4:5b:dc:94:df:f0:02:13:bf:52:c7:f0:a4:f1:
b4:41:2e:ac:c9:d8:28:87:51:67:02:eb:03:0d:1b:ec:f9:61:
0e:b3:1e:ea:ef:f6:3f:95:b9:ec:21:90:b3:56:04:af:74:e8:
8f:4a:f5:79:69:04:83:37:fd:f7:a8:c8:d9:e2:cb:ed:5a:b2:
7f:d5:30:3e:3d:99:31:9c:34:fc:4f:c7:d4:a7:4d:4b:04:fb:
0c:1e:ce:d6:8c:a3:1c:1e:91:52:35:b1:89:8a:dd:c6:5d:a6:
8a:d8:cb:a8:04:f8:b4:fa:f7:56:12:4e:64:38:74:d1:44:9d:
7b:af:24:68:3d:fb:bd:ee:a8:bc:86:6f:d0:cd:44:77:45:2b:
a3:75:0f:9b:65:ad:2b:c1:b8:76:42:63:e0:26:3a:71:e0:22:
09:c8:c6:fb:e2:b8:b0:a2:64:b3:da:73:69:f9:86:93:89:81:
79:74:0c:e5:a7:57:9c:43:5c:7b:88:2d:0b:a5:a1:8c:a5:52:
10:c3:69:cc:27:5e:98:3a:38:2e:a6:f6:6b:e1:97:ed:80:c4:
46:4a:42:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 07:59:10 2026 by rpki-client