Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
File: NQBF99g86xMNjWlf_n1D2zgZ3lU.mft (raw, json)
Hash identifier: pcMg7QPIKfERSAWu+bjN/E7R+MSsy4Yo3UlKi6/3HNs=
Subject key identifier: BB:17:08:B9:0D:BE:29:42:7A:38:29:2C:F2:90:52:AA:A2:69:8A:51
Authority key identifier: 35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
Certificate issuer: /CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Certificate serial: 01A17DE19481FB3638182870FA48CB6EFB2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
Manifest number: 198E
Signing time: Tue 27 Oct 2026 15:01:37 +0000
Manifest this update: Tue 27 Oct 2026 15:01:37 +0000
Manifest next update: Wed 28 Oct 2026 15:01:37 +0000
Files and hashes: 1: NQBF99g86xMNjWlf_n1D2zgZ3lU.crl (hash: IyJBi4YgPjM32xhzV5UNrzMCHNc1gwzzAM7doHIUY6k=)
2: cl6lci4JzB4m70ik3dAlKuTRGek.roa (hash: UR1yaGuf+Gktwnz/SkjvRQshLYqjDpB+pPtn2/1jM2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:94:81:fb:36:38:18:28:70:fa:48:cb:6e:fb:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Validity
Not Before: Oct 27 15:01:37 2026 GMT
Not After : Oct 28 15:01:37 2026 GMT
Subject: CN=bb1708b90dbe29427a38292cf29052aaa2698a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:8d:db:c0:78:e8:65:96:78:42:8b:6d:1c:
21:77:2f:e7:dc:e9:21:ae:93:7c:d8:5c:e3:f7:60:
41:f2:19:01:c1:b6:79:00:7a:85:05:76:bd:db:ad:
c8:60:1f:5a:c0:3a:05:e9:66:9a:b9:57:85:2b:a1:
69:54:e5:21:a0:7f:ba:ee:77:71:c8:f0:b9:d3:fc:
0e:f6:d7:70:13:25:c5:82:1c:ed:6a:25:cf:cc:9d:
72:00:c6:d7:5a:92:14:91:6c:61:e8:5a:99:46:04:
78:d6:6f:a7:ab:de:53:66:39:55:4e:b1:bc:57:86:
98:96:2a:f7:d1:fd:be:75:a2:d8:b7:e7:9d:f3:1a:
5a:ea:7b:34:ce:d9:13:e6:a5:ea:67:89:82:cd:9b:
6c:88:ed:d3:f9:25:44:3e:8d:33:4e:16:f8:f1:8f:
c0:b0:fb:dc:09:77:66:87:e1:51:a8:45:10:7b:47:
a9:1a:1f:f1:15:79:9b:b6:15:53:c8:8a:a9:62:40:
0a:70:af:54:2c:0f:8c:19:29:5b:ba:46:5a:21:6d:
8d:71:ca:b2:f8:73:ec:f6:b0:3a:44:41:34:e7:e7:
7e:1b:d0:56:73:e7:0b:89:14:37:1c:58:b8:e5:96:
5e:41:7c:8f:a8:98:60:ce:65:d3:72:e6:6d:f4:11:
8a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:17:08:B9:0D:BE:29:42:7A:38:29:2C:F2:90:52:AA:A2:69:8A:51
X509v3 Authority Key Identifier:
keyid:35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:f4:15:f9:e7:06:f5:10:35:f6:fa:cb:2f:07:b0:87:82:53:
a1:8b:fd:78:4a:a4:42:cb:6f:89:a7:81:ef:77:ae:56:96:fe:
88:21:0d:38:d4:ed:7e:68:dd:a5:80:14:b6:4f:a6:95:fe:e7:
ef:e7:43:19:2c:67:b0:21:c3:d1:31:08:bd:94:69:18:e2:7b:
5d:8c:17:52:20:a9:14:83:be:22:10:15:fb:70:3f:e7:25:95:
76:af:2e:3a:8d:cc:9d:1d:2e:29:e5:e3:10:04:4a:be:bf:30:
74:4c:82:e3:ae:4d:4e:da:a5:d0:67:b6:78:b8:0f:d4:05:a2:
70:36:d2:57:74:62:ca:b9:c7:7f:54:c9:df:41:0a:51:41:e8:
9b:4f:46:b1:c0:d2:26:b0:30:89:6a:f0:57:dd:65:71:27:eb:
92:21:54:d3:5f:ee:59:6c:37:01:ae:89:32:e8:20:96:95:d4:
30:2a:b2:30:2a:c7:53:36:54:bd:2a:e7:96:3b:59:bd:01:8b:
b2:e6:e4:0d:e6:65:93:95:22:a9:18:9b:4b:10:72:f7:52:30:
19:75:f7:ee:87:d7:17:25:64:55:ae:66:fc:3f:e0:08:da:da:
24:76:53:9a:f8:4a:7a:56:5c:5f:bd:00:11:e1:b8:f8:96:4d:
55:fc:84:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:33:45 2026 by rpki-client