
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier: nh2I+F+Op4+GZ2AlY4Uwu5XSdqihOzSm755XCDzMBmQ=
Subject key identifier: AE:DE:32:B3:2A:EE:5F:6F:83:A8:52:AC:91:CF:DA:08:FE:40:AA:A9
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019DE28EF7A0402DDA86B01680B357C0C931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number: 15EB
Signing time: Fri 01 May 2026 08:01:53 +0000
Manifest this update: Fri 01 May 2026 08:01:53 +0000
Manifest next update: Sat 02 May 2026 08:01:53 +0000
Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=)
3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=)
4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
7: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=)
8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: lUDW7znDKlGii3sLDIhQDyWX5UbRhcbDRR//W1Z8PyA=)
13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
15: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=)
16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
17: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=)
18: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
19: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
20: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=)
21: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
23: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=)
24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 May 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e2:8e:f7:a0:40:2d:da:86:b0:16:80:b3:57:c0:c9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: May 1 08:01:53 2026 GMT
Not After : May 2 08:01:53 2026 GMT
Subject: CN=aede32b32aee5f6f83a852ac91cfda08fe40aaa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:31:5a:9f:e1:db:db:f4:3b:b2:45:67:dd:74:
aa:6a:86:d5:0c:90:6f:dc:dc:1c:93:cb:f1:ae:bc:
8d:aa:13:81:5b:56:36:06:4a:64:f6:d9:35:f4:d0:
94:d7:2b:cd:49:a8:13:71:a2:3e:cf:33:4d:91:41:
52:b9:20:c1:f3:44:c0:97:64:bf:3b:b3:fd:48:fe:
fc:62:c3:9e:13:ab:56:6a:46:78:e4:88:38:ac:37:
dd:f4:85:e7:59:b7:56:dd:ec:fd:1c:c2:d4:c6:c4:
e7:47:ea:a3:92:86:cf:82:28:a2:07:65:e2:21:bf:
a3:aa:23:29:28:02:87:46:46:75:d8:03:67:08:d1:
58:8f:39:43:9e:fb:75:9c:08:93:6e:9f:7e:8d:a3:
f2:ff:dc:e9:a1:e1:af:e4:7c:0b:9a:fe:34:8d:f6:
e0:6b:28:57:6b:ed:76:7e:89:2f:b3:1d:1f:ba:e0:
87:2f:ae:be:43:73:3d:5b:f2:e9:fb:40:df:4a:29:
fd:45:d4:18:38:59:03:b9:4e:c0:49:b0:a6:db:a8:
5e:8b:82:f4:a1:b1:f1:1e:c0:d7:9c:33:fe:10:1b:
48:02:14:24:2b:1a:27:13:22:91:9f:31:98:12:98:
d6:7b:10:61:b6:b5:21:a0:4e:3e:39:9e:77:cc:9b:
86:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DE:32:B3:2A:EE:5F:6F:83:A8:52:AC:91:CF:DA:08:FE:40:AA:A9
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:98:d0:78:2f:9e:98:ea:30:21:fd:bb:49:e1:1c:3c:c2:81:
2f:ef:77:63:a6:70:88:fc:79:b8:7f:6c:ae:5c:8d:cb:0f:e3:
58:5d:69:bd:48:b7:36:a0:44:d4:b6:09:5d:53:ee:c1:5e:b0:
25:e6:0d:76:c2:04:6e:cb:18:e2:4f:26:dc:11:a5:f8:f3:e2:
a7:b5:ca:9e:4f:e7:07:79:33:d2:0e:d9:07:02:c6:82:a3:ba:
5e:2e:a2:d2:a6:51:91:14:dc:71:b9:be:c5:3e:0c:f7:20:a4:
df:d6:5b:04:cb:e3:bf:3d:49:c3:52:37:dc:95:c5:85:0b:4c:
e9:5e:a6:d6:ea:ce:89:27:e1:eb:3c:cc:bb:4b:72:1a:33:10:
f9:c6:76:67:4a:73:eb:2e:ef:49:03:94:f1:2a:e9:b3:02:d8:
72:fe:2a:65:34:a1:2c:79:6c:65:ca:4f:9a:40:d2:b6:02:00:
07:bc:2e:38:de:8d:ba:1c:f4:b0:bf:b2:95:0e:93:7d:67:08:
f8:4e:fa:e6:90:0e:37:0e:52:04:88:5e:27:df:2a:df:49:a5:
af:5f:85:66:0b:d1:91:27:c4:c8:fc:32:54:4a:af:51:72:f0:
66:22:27:4f:f8:37:4e:bf:e9:9b:f4:ae:e1:72:58:ab:a8:64:
dd:d8:f4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 18:12:24 2026 by rpki-client