Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
File: NQzOG50G3M6IVmWVNkmcFgM5E3A.mft (raw, json)
Hash identifier: qAluUlb5tHiQSfighhhOqk5FLb3GaBMGgvXcDaCYACY=
Subject key identifier: 0B:D8:52:44:07:BC:D2:45:2E:73:D0:1F:28:61:F7:75:75:39:F2:3F
Authority key identifier: 35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
Certificate issuer: /CN=350cce1b9d06dcce8856659536499c1603391370
Certificate serial: 01A194D6BF1481BACB509A8295F2C960964D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
Manifest number: 1AD3
Signing time: Sun 01 Nov 2026 02:01:03 +0000
Manifest this update: Sun 01 Nov 2026 02:01:03 +0000
Manifest next update: Mon 02 Nov 2026 02:01:03 +0000
Files and hashes: 1: 1-6cYk3IV3azNTDxLV9HIv8JiNNU.roa (hash: 68Lmi8ud6HODb6vZV8sdTwSgFGYMvK/4iVqZEyTtA8M=)
2: NQzOG50G3M6IVmWVNkmcFgM5E3A.crl (hash: DYttRxdC9IBz9Omf3UAyFu15Lv21yLc66VuCubAfFGI=)
3: dls_8eGlW5noEKaT1vWyI3L6kis.roa (hash: Pm8+FvhXP2lEJSCgMp+/lPklylAzLJsm9W0xN+5smos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:94:d6:bf:14:81:ba:cb:50:9a:82:95:f2:c9:60:96:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350cce1b9d06dcce8856659536499c1603391370
Validity
Not Before: Nov 1 02:01:03 2026 GMT
Not After : Nov 2 02:01:03 2026 GMT
Subject: CN=0bd8524407bcd2452e73d01f2861f7757539f23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6e:ec:a2:7e:5a:ff:0b:83:aa:e1:c8:a7:ea:
9c:19:0c:c1:6c:1f:9e:56:38:78:30:23:e7:13:11:
23:d6:ef:5b:7b:fe:87:b7:f1:d5:85:44:52:54:82:
13:b5:37:6d:b2:19:bb:0d:ff:8b:dc:b7:ca:7d:72:
75:47:bd:9d:1e:f3:f4:fa:2b:d5:b5:2f:05:13:5c:
40:8d:21:34:47:28:30:a9:6d:0b:2a:e5:67:39:b6:
c0:c4:1d:6e:1c:de:b7:86:9a:b9:1a:d4:50:1e:96:
08:1e:82:d7:22:45:47:1a:df:b9:1b:9e:35:9f:80:
ed:44:97:e9:d7:f7:3b:f1:f6:1a:91:07:96:9b:85:
33:8b:6a:6c:70:4c:6c:78:a4:5b:f3:65:00:a3:6c:
3d:3c:32:46:47:29:cf:ac:66:d4:bc:d4:d1:4d:61:
3a:16:5b:6b:a2:60:ad:87:af:4b:cf:1c:4e:3c:c4:
22:8a:c3:f1:22:ad:9a:17:de:ce:05:f7:f6:aa:40:
c4:0a:73:27:e9:62:ed:d2:c1:95:e2:96:bf:47:06:
2e:b7:91:da:06:ca:bb:5e:32:f8:b8:27:62:27:a1:
9b:6d:3a:ff:50:73:0f:4f:9b:2e:80:e5:7b:76:0e:
81:de:bc:64:98:7a:46:c7:95:06:16:71:53:63:e0:
76:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D8:52:44:07:BC:D2:45:2E:73:D0:1F:28:61:F7:75:75:39:F2:3F
X509v3 Authority Key Identifier:
keyid:35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e1:db:3d:67:b4:6d:19:4c:4f:dc:18:11:3f:c6:56:06:1d:
35:af:b4:64:51:42:2e:c1:73:6f:fd:8b:5d:18:db:3c:64:4f:
85:38:b4:3a:dd:10:e1:16:fa:9b:e1:0e:67:3e:00:40:bd:e8:
e5:e6:1f:23:da:a6:97:ee:4f:c0:b6:fa:25:f6:9e:96:fd:76:
95:ab:4a:0f:41:f3:90:28:29:5d:a6:10:c7:1b:31:90:96:51:
78:ca:32:0c:96:3d:89:2c:7b:2d:6e:ac:42:74:82:4d:c9:5c:
cf:00:bf:7e:c0:eb:9e:5b:b1:4a:00:af:89:23:43:69:5a:33:
32:e6:17:56:12:3a:9c:e9:1a:84:57:ab:d8:c8:c9:2f:17:c7:
8d:35:ee:f5:3a:73:06:60:ea:ec:52:98:18:cd:b0:d1:50:eb:
0f:1c:5d:a1:ac:e5:76:cf:05:4e:fb:00:17:30:31:ef:6d:44:
77:56:a4:6f:b3:ec:27:ec:86:8f:38:79:1b:92:01:4f:e6:63:
6c:22:5f:15:4d:ca:71:0e:43:3f:43:f3:f9:0a:79:97:55:18:
da:eb:55:bc:2c:94:76:b8:89:dc:e0:7d:44:8e:ae:fc:59:ff:
4d:29:0e:d4:8f:eb:9c:4c:c7:b6:10:28:28:53:09:89:75:aa:
89:01:cc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:35:55 2026 by rpki-client