Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
File: NQBF99g86xMNjWlf_n1D2zgZ3lU.mft (raw, json)
Hash identifier: G5v6fVCwVFyQi9XMnnG+4krxyMKS5rEv9gbVTbeq9kU=
Subject key identifier: B5:3A:8A:87:DC:D0:00:C6:30:38:A7:87:B4:0D:04:9C:4D:9D:34:A5
Authority key identifier: 35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
Certificate issuer: /CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Certificate serial: 019DCF75E97FE765FDC16AE0BB0A87B0844D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
Manifest number: 17A6
Signing time: Mon 27 Apr 2026 15:01:44 +0000
Manifest this update: Mon 27 Apr 2026 15:01:44 +0000
Manifest next update: Tue 28 Apr 2026 15:01:44 +0000
Files and hashes: 1: NQBF99g86xMNjWlf_n1D2zgZ3lU.crl (hash: e5fGLyL39nCk3x814nlPRl1T7SKwXjsV19JsufH0zQ0=)
2: cl6lci4JzB4m70ik3dAlKuTRGek.roa (hash: UR1yaGuf+Gktwnz/SkjvRQshLYqjDpB+pPtn2/1jM2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:e9:7f:e7:65:fd:c1:6a:e0:bb:0a:87:b0:84:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Validity
Not Before: Apr 27 15:01:44 2026 GMT
Not After : Apr 28 15:01:44 2026 GMT
Subject: CN=b53a8a87dcd000c63038a787b40d049c4d9d34a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:eb:4d:95:d1:3c:1f:b6:3a:af:b0:6d:94:96:
51:6c:e4:04:4f:ab:be:82:af:70:60:68:f8:a3:e9:
e2:45:ce:8f:e9:21:29:02:19:f4:c0:ca:3a:1b:84:
ae:e8:6e:92:ce:d6:da:4d:20:73:ce:20:92:dc:bf:
f1:23:f6:f6:a4:b6:dc:e1:7d:6c:79:8a:11:d4:df:
46:9a:5f:30:05:fb:d7:f2:df:a3:ea:96:52:5e:7c:
0b:fa:17:0e:c2:c7:3b:41:47:08:cb:82:85:58:43:
d8:1a:d5:5a:30:0c:75:b3:12:8d:ae:63:c7:d8:b9:
c0:8a:52:a2:8f:90:69:09:59:6a:46:58:17:64:ab:
11:12:6d:82:b3:86:aa:fc:fd:01:eb:66:e7:6c:3f:
35:3b:6e:7d:34:a8:cd:14:8f:29:fc:97:d6:6c:50:
8a:3e:93:f4:49:c9:66:f4:79:0b:a2:06:96:fb:f2:
42:fb:0d:5c:cc:c1:5d:ba:48:a9:0b:c2:43:ed:46:
06:df:08:f6:f9:33:f4:33:ea:49:5c:1b:88:1c:4d:
a0:b4:4b:ea:85:09:fb:f5:2e:dd:6a:8e:6b:c8:fb:
2b:e0:9a:f5:04:b0:49:23:b6:d7:84:c6:df:67:2b:
60:1c:0c:93:cd:04:41:12:68:20:23:a3:ed:85:a8:
25:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3A:8A:87:DC:D0:00:C6:30:38:A7:87:B4:0D:04:9C:4D:9D:34:A5
X509v3 Authority Key Identifier:
keyid:35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:07:ac:52:c7:b6:a2:89:a7:dc:4a:12:fb:57:ac:5d:43:fd:
45:ab:78:9d:0e:14:8c:df:6b:d5:a0:fe:12:56:21:52:1d:8e:
3d:80:b8:2c:2c:99:0e:93:44:dc:78:b0:75:90:0b:23:61:97:
1a:d9:f3:4c:49:c7:ed:39:f2:f4:60:8f:34:8d:38:2a:b1:7b:
f0:ae:d6:4e:27:07:b4:ad:a0:5d:2c:bc:d3:3f:0f:a4:e9:ea:
d1:67:ec:f1:ef:cc:b6:44:ac:bd:78:82:b6:27:6b:59:c6:b3:
a5:ed:29:9d:d1:e6:c5:0b:d5:56:8c:1a:d0:d4:15:0d:ee:9a:
6e:4e:38:8f:08:12:da:fc:eb:b2:34:e1:d5:5e:02:5a:4e:17:
10:f4:30:2f:45:d3:43:f8:f8:83:39:7e:e0:a0:be:8b:fb:e2:
ab:f3:d7:aa:8b:c0:7a:49:99:f0:8f:bb:59:da:10:c9:99:d2:
3a:df:e1:e4:01:ef:9e:36:30:ab:da:b0:d8:aa:a9:f5:c0:b6:
0d:59:91:e3:06:ef:57:a1:5f:21:f6:ad:34:81:ee:da:20:60:
27:19:b5:18:e4:5e:14:71:38:92:e0:d0:31:3a:31:7f:8f:6c:
a9:5b:e8:9f:9a:cd:90:35:d3:17:b5:ff:4b:4b:79:ef:e5:65:
6e:c0:d0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:05:18 2026 by rpki-client