Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
File: NQzOG50G3M6IVmWVNkmcFgM5E3A.mft (raw, json)
Hash identifier: 2oeH5obKV8fwN9xUwZOAroG1KWpzR7F/uO5GrL9y5+U=
Subject key identifier: 74:81:B7:BB:20:61:49:A2:61:95:08:2E:9E:8E:F0:7F:6B:D3:38:BA
Authority key identifier: 35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
Certificate issuer: /CN=350cce1b9d06dcce8856659536499c1603391370
Certificate serial: 019FA0A8CFB9729866031A0CFDF52F9C0812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
Manifest number: 19D0
Signing time: Sun 26 Jul 2026 23:00:45 +0000
Manifest this update: Sun 26 Jul 2026 23:00:45 +0000
Manifest next update: Mon 27 Jul 2026 23:00:45 +0000
Files and hashes: 1: 1-6cYk3IV3azNTDxLV9HIv8JiNNU.roa (hash: 68Lmi8ud6HODb6vZV8sdTwSgFGYMvK/4iVqZEyTtA8M=)
2: NQzOG50G3M6IVmWVNkmcFgM5E3A.crl (hash: GM2QnGwk8q5jD5XZzwlx31siHx9jGr9BpvANt6c5pZ4=)
3: dls_8eGlW5noEKaT1vWyI3L6kis.roa (hash: Pm8+FvhXP2lEJSCgMp+/lPklylAzLJsm9W0xN+5smos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:cf:b9:72:98:66:03:1a:0c:fd:f5:2f:9c:08:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350cce1b9d06dcce8856659536499c1603391370
Validity
Not Before: Jul 26 23:00:45 2026 GMT
Not After : Jul 27 23:00:45 2026 GMT
Subject: CN=7481b7bb206149a26195082e9e8ef07f6bd338ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:80:d2:9e:e5:cb:6e:fa:4e:be:31:f2:65:05:
ab:a8:6d:74:ae:dd:73:5e:7b:4b:6f:6d:a8:82:92:
2d:13:ce:ee:ed:41:8f:79:e7:43:b3:b7:85:9f:17:
44:61:0a:43:c8:27:b6:2e:ef:62:07:ef:f7:29:0a:
61:6b:57:96:69:9a:bb:85:cc:fe:64:ad:9b:f5:8a:
00:19:e1:86:f7:ae:91:38:1c:fb:fc:53:af:24:b2:
24:a1:45:b4:51:bf:1b:16:5c:e0:11:66:b7:ea:dc:
51:58:8e:56:a2:82:2f:3f:43:4e:d7:c4:90:0b:30:
4a:39:65:5d:d3:33:0e:fe:c7:c8:93:df:65:5d:93:
77:34:ef:30:f0:92:88:98:99:cc:a3:4d:b1:32:38:
e2:b6:46:a4:bb:28:fd:d8:d5:58:00:a2:53:40:64:
35:9f:da:4e:38:64:44:c6:b0:4e:a0:3b:6d:01:ca:
fc:e5:1f:f2:b9:3c:11:c1:21:af:6f:5c:69:c0:65:
47:70:83:9a:2d:9a:eb:5e:16:cf:df:4f:25:4e:23:
20:78:15:47:9b:56:11:2a:c6:57:9d:ed:09:68:16:
26:65:8d:86:04:07:4b:b2:1b:ac:1a:09:f1:1e:d4:
50:15:a6:89:c2:b6:60:2f:f2:41:db:96:5e:1b:4f:
06:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:81:B7:BB:20:61:49:A2:61:95:08:2E:9E:8E:F0:7F:6B:D3:38:BA
X509v3 Authority Key Identifier:
keyid:35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:62:2e:fc:65:b0:34:a7:21:ec:bb:c3:37:2a:10:b0:37:7c:
22:60:38:55:19:8c:69:cf:6b:b9:9a:cb:e0:73:1c:21:b4:dd:
66:0d:3d:b9:d8:05:c9:fc:6f:3e:1b:bb:d3:bf:2c:44:59:22:
32:91:a5:3b:4c:e8:fc:e5:30:35:b7:41:8a:af:ec:c7:c9:df:
f6:4a:00:25:21:99:c3:fb:99:e9:86:bb:cc:41:3a:42:ac:a7:
40:c6:c3:f8:1c:cb:94:c1:61:dd:db:82:ae:0c:e4:b8:17:6c:
de:89:5e:e6:f9:a0:09:c0:0a:e9:c5:c0:45:d0:8d:c6:81:f1:
3d:de:55:e3:59:f1:c9:70:c8:46:a8:2b:78:fe:ff:18:47:90:
ec:80:32:7f:46:57:84:81:c6:03:ff:0b:46:e0:9f:e6:20:1f:
a8:ab:4a:d6:af:25:2a:30:87:07:5d:30:01:fe:13:84:31:ca:
27:75:7a:a3:b1:b7:4b:1e:1e:a1:3a:94:1e:b6:f4:ff:1c:4c:
fb:72:fe:88:20:10:7b:a7:8a:f3:5d:4d:81:81:56:f8:1d:6b:
7f:dd:11:6e:67:b1:9b:d4:c8:e0:56:9a:2e:9a:03:ae:1c:32:
f7:6f:9d:e1:bf:14:97:c6:91:f1:f3:c1:dc:10:9e:c8:b1:cf:
fb:98:79:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:30 2026 by rpki-client