Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
File: NQBF99g86xMNjWlf_n1D2zgZ3lU.mft (raw, json)
Hash identifier: i9TSOKVYVekIFWOXbkgLnM+WFGpv19VXJRtg/s2t4mA=
Subject key identifier: C1:30:72:C2:48:DB:96:F3:99:E6:0A:A6:5C:1B:3C:81:AC:EC:F3:4D
Authority key identifier: 35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
Certificate issuer: /CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Certificate serial: 01A17BF3151A4F848524C52685399137633A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
Manifest number: 198D
Signing time: Tue 27 Oct 2026 06:01:30 +0000
Manifest this update: Tue 27 Oct 2026 06:01:30 +0000
Manifest next update: Wed 28 Oct 2026 06:01:30 +0000
Files and hashes: 1: NQBF99g86xMNjWlf_n1D2zgZ3lU.crl (hash: rWAaUCvRmXwJTll+MnmE5oxQHlYCgx7UZzS71+2PAOo=)
2: cl6lci4JzB4m70ik3dAlKuTRGek.roa (hash: UR1yaGuf+Gktwnz/SkjvRQshLYqjDpB+pPtn2/1jM2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 06:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f3:15:1a:4f:84:85:24:c5:26:85:39:91:37:63:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Validity
Not Before: Oct 27 06:01:30 2026 GMT
Not After : Oct 28 06:01:30 2026 GMT
Subject: CN=c13072c248db96f399e60aa65c1b3c81acecf34d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:65:1e:9a:7e:30:42:cd:c7:ce:f1:ab:5d:a6:
a6:9f:e9:6e:f5:88:e8:1b:09:14:7c:23:77:51:b4:
22:3a:ca:50:28:9b:15:4c:cc:d5:b8:f9:6a:b3:46:
35:5f:65:83:ad:e9:3f:50:5c:7b:78:24:66:48:d2:
db:69:8f:df:5f:15:6b:2d:b3:f4:9a:27:f8:f5:cd:
12:b2:60:e0:44:57:14:a2:13:52:e1:79:2a:7a:42:
03:89:79:8e:5d:4a:04:02:9c:3e:f8:2a:84:45:64:
cb:c0:91:a0:58:4c:a9:a3:7c:60:43:ca:67:e3:34:
52:6b:03:c5:55:90:10:08:5e:51:20:4e:38:0e:b4:
2e:d1:62:a6:e2:b8:76:01:8f:50:97:10:30:db:03:
d6:04:af:24:56:de:e5:4f:0a:2d:e4:27:5f:cd:57:
37:17:c8:aa:cb:cc:c9:e0:a5:1e:ef:f7:a6:46:ec:
06:cc:e6:3c:62:67:46:80:93:cf:c5:28:a8:a4:57:
fa:ab:f3:5e:e7:9b:22:da:72:5a:68:a3:9d:c5:31:
8b:a8:29:a8:d2:9e:0d:7a:11:d6:ec:86:f8:a0:48:
94:f6:c0:c0:ed:d0:32:99:78:cb:07:0d:d4:9e:58:
4b:a4:51:cc:9b:41:77:89:dc:ba:f9:5e:97:28:d9:
93:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:30:72:C2:48:DB:96:F3:99:E6:0A:A6:5C:1B:3C:81:AC:EC:F3:4D
X509v3 Authority Key Identifier:
keyid:35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e9:6b:9c:b9:8d:39:d6:9e:66:d2:5f:29:91:16:56:b2:5d:
d5:f8:28:bb:a6:af:7d:26:45:b4:6a:e0:07:a5:64:b5:89:53:
47:d3:1b:75:5f:6a:dc:15:a4:00:28:6c:69:60:a6:29:20:ba:
3f:83:08:52:32:c2:28:3f:9c:e7:95:a8:08:46:0f:b4:b1:ac:
64:ce:86:59:50:47:e4:1c:e1:ab:e5:53:e1:fb:1c:6e:e8:10:
59:0c:a1:2d:ee:bb:30:4e:ad:14:3e:dc:d1:e6:80:7c:0f:fa:
35:57:bc:34:08:85:7a:9c:cc:03:b2:a2:1b:0d:14:c2:db:98:
bb:d1:04:0b:23:e9:c7:a2:53:dd:c1:d3:a9:f4:8c:5d:a1:68:
44:32:42:7e:a3:d2:6e:4d:ea:87:cc:5e:33:f1:85:17:8f:67:
17:07:a5:57:92:50:3e:2a:51:8c:cb:db:77:16:84:90:cd:1d:
b3:04:b8:30:b9:84:4b:2f:61:b9:12:f0:c6:1c:93:5d:10:d4:
b3:4e:15:d2:53:ec:35:7d:74:79:1b:12:e0:92:ec:54:9e:59:
a7:bf:5c:a3:3b:c2:90:21:d3:1c:9a:12:1d:47:90:36:b6:3d:
9a:08:38:1d:3b:b7:4f:72:8e:b4:61:2f:dc:29:0f:34:1f:88:
32:23:0f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:21:32 2026 by rpki-client