Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
File: NQBF99g86xMNjWlf_n1D2zgZ3lU.mft (raw, json)
Hash identifier: czrSBJfKjaU2dgFJN2djebyfBbxxh3hZuYWwDjI2bTw=
Subject key identifier: 59:43:9D:E1:1A:0F:F8:A7:FF:B5:E9:1F:CE:4C:06:15:A3:EF:A0:0C
Authority key identifier: 35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
Certificate issuer: /CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Certificate serial: 019CE5C85D58F5D72846AE590E0E7C26A3F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
Manifest number: 172D
Signing time: Fri 13 Mar 2026 06:00:39 +0000
Manifest this update: Fri 13 Mar 2026 06:00:39 +0000
Manifest next update: Sat 14 Mar 2026 06:00:39 +0000
Files and hashes: 1: NQBF99g86xMNjWlf_n1D2zgZ3lU.crl (hash: cD336gpXP4AIzbpGGPUgI88V9FM9DXQjwEpRtdAW5Bs=)
2: cl6lci4JzB4m70ik3dAlKuTRGek.roa (hash: UR1yaGuf+Gktwnz/SkjvRQshLYqjDpB+pPtn2/1jM2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c8:5d:58:f5:d7:28:46:ae:59:0e:0e:7c:26:a3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Validity
Not Before: Mar 13 06:00:39 2026 GMT
Not After : Mar 14 06:00:39 2026 GMT
Subject: CN=59439de11a0ff8a7ffb5e91fce4c0615a3efa00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:29:04:28:15:bb:01:4e:72:b9:fa:23:4a:
e1:fc:0c:f5:ac:52:c6:8e:6d:88:89:be:3b:a7:65:
5e:50:bd:60:b6:5c:0b:6a:76:8b:b8:82:19:af:71:
24:22:ae:6d:6e:b5:b7:ed:f4:82:7e:62:d0:50:4b:
cd:8a:f2:f7:08:7b:d8:ca:53:c7:2e:99:89:7e:97:
09:8b:8e:2b:39:87:25:40:ed:04:82:22:21:c9:5d:
78:e9:d7:79:5b:6d:80:9c:a0:ca:79:df:f2:cf:46:
bc:e1:6f:fb:f0:e3:82:8d:1b:cc:ee:68:ba:ae:e5:
4e:18:55:1d:27:4a:a1:14:11:40:4e:bd:db:3d:65:
c2:3b:66:ac:e0:9c:4f:bf:40:34:57:97:88:34:fe:
d0:21:e9:45:6c:b9:aa:f9:76:1a:12:e9:96:e3:b5:
da:d0:db:db:b6:8e:d3:3a:0d:ab:23:29:ba:7c:64:
14:f7:2f:57:22:ad:fd:62:76:f0:71:60:26:72:13:
62:31:81:20:7b:04:49:52:2b:eb:68:ff:50:04:23:
7d:5e:cc:a6:cf:90:91:e1:8a:82:40:76:00:2b:8c:
90:c1:e8:e4:73:4e:ee:3f:6e:d0:bc:8a:71:77:92:
e4:91:be:ae:84:04:61:80:a2:12:be:fb:14:8a:03:
46:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:43:9D:E1:1A:0F:F8:A7:FF:B5:E9:1F:CE:4C:06:15:A3:EF:A0:0C
X509v3 Authority Key Identifier:
keyid:35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ce:e2:16:83:ff:3b:4d:d2:18:a5:04:52:85:3f:a5:41:03:
2e:6a:a6:4c:9e:58:1e:d7:10:0f:82:6d:c6:16:61:40:39:f3:
35:9b:f9:58:06:85:0e:7d:75:01:5a:b4:34:b1:12:2e:e9:55:
f5:21:24:f2:b7:48:b3:13:e2:0c:dd:81:f5:6c:ef:a3:06:23:
04:c0:78:cf:45:30:d3:fc:f9:a3:5b:b1:4f:12:67:1a:14:50:
d5:9c:d1:cb:92:27:e5:a7:fa:ef:28:73:63:b6:2f:6b:e6:12:
ca:6c:76:d6:c0:b4:c9:4c:8c:88:7d:b7:b5:54:54:d1:d0:46:
94:69:da:8f:51:3b:05:50:49:b3:24:a4:45:a7:ba:ad:1c:47:
76:b9:8e:64:eb:91:45:07:1a:e1:ea:84:62:4c:cd:09:54:95:
ec:a9:4d:17:c9:79:ed:02:56:56:32:1d:c8:25:cb:43:1f:63:
1b:ae:7d:12:68:f5:87:3f:3b:ad:8a:31:b6:77:d4:ce:30:c1:
d7:88:1e:76:70:83:61:4a:93:31:d1:32:59:33:00:9b:93:6e:
70:c9:e5:6e:d7:05:b0:e9:f6:21:5a:98:2e:7f:9d:45:74:83:
cf:e0:c5:93:ac:68:86:03:e3:ed:75:aa:e3:ff:33:89:bb:f0:
1d:27:bc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:40:00 2026 by rpki-client