
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier: opjnQcLMvS9H7dcDM5DNFDFf2IOHfdTeRLSOZHg0x2Q=
Subject key identifier: 5F:AF:22:58:9E:28:50:FB:A0:37:D6:68:64:90:FC:0C:2B:1F:A2:CC
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019FD53BAD2C5FA4588E33B0CE40AA7B982A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number: 16EF
Signing time: Thu 06 Aug 2026 04:01:25 +0000
Manifest this update: Thu 06 Aug 2026 04:01:25 +0000
Manifest next update: Fri 07 Aug 2026 04:01:25 +0000
Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=)
3: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
4: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
5: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
6: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
7: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
8: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
9: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
10: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: l1x7L1NB6RFgvaWDTG7cUdex80LKcsxDag2zYPmw7Hg=)
11: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
12: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
13: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
14: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
15: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
16: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=)
17: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
18: mMta-JcylDmaaqs55jbZypo3Wkc.roa (hash: uEabUtGRHWP3we/WwC7S3pmtse7pVlGs5opB8BfWj4w=)
19: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
20: utF1Hb3bzsO09sTloqJeLO08SqU.roa (hash: zW94J0vK080nCwGZYwZncOPirWSIzruXkKW5U5VdEH8=)
21: wCMm-aenH_zuMJOSQuJWeb71NJ0.roa (hash: ayLqc4WWQljF7RYZ5IzvneWbkS5edMXjdGTG+Aa5QjQ=)
22: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
23: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d5:3b:ad:2c:5f:a4:58:8e:33:b0:ce:40:aa:7b:98:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Aug 6 04:01:25 2026 GMT
Not After : Aug 7 04:01:25 2026 GMT
Subject: CN=5faf22589e2850fba037d6686490fc0c2b1fa2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:4f:aa:b9:7c:c8:c1:b9:25:2f:e7:3a:f9:
0c:77:4c:cd:04:af:69:c9:68:17:5e:0b:f9:9f:07:
15:df:47:b4:27:5d:01:4a:90:4c:5b:95:38:52:da:
e3:d6:ef:86:64:cd:de:f0:5f:b0:e9:fd:9d:a8:d9:
2b:71:a5:d0:c9:d2:2d:78:2a:da:a9:0b:0e:ac:c8:
35:4c:5b:ce:40:75:25:dd:62:da:b8:17:47:c6:7e:
54:6e:b6:79:ab:06:38:a1:32:3a:40:0b:3a:5f:a6:
a8:4b:e7:ea:f1:f1:15:6d:09:ae:90:85:b2:59:50:
20:d0:ec:dc:a4:1b:f7:80:cc:72:77:28:b0:ea:f9:
17:e8:10:34:cf:f7:ca:40:72:6a:ce:63:f4:27:84:
8a:92:80:5f:2d:62:c0:57:4a:77:9d:39:1f:02:56:
57:5d:d4:b0:e7:47:47:fd:b9:48:22:db:3c:e1:70:
d5:82:20:18:2b:fd:9d:bd:be:4a:f2:50:ee:54:7c:
6b:f3:7d:16:67:9a:32:60:9d:9c:95:dc:10:0e:e8:
3a:37:15:6d:33:30:26:32:7b:8e:91:e6:a6:db:c4:
5e:30:4e:bf:7c:70:76:c1:d3:16:65:25:10:79:5f:
92:71:3f:77:ea:56:bd:f2:c4:af:b6:b5:12:64:78:
03:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AF:22:58:9E:28:50:FB:A0:37:D6:68:64:90:FC:0C:2B:1F:A2:CC
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:fc:fc:6f:d5:cf:c1:98:7c:10:ba:e0:c4:62:fc:5b:26:a3:
79:0d:b0:4f:f8:ed:c8:d1:2c:c1:7b:09:2c:46:96:13:6d:16:
b9:1f:ad:1d:da:0d:ab:ff:2a:34:9e:5d:da:70:7e:6d:09:89:
0d:18:91:0b:4a:59:df:99:e7:a6:6f:51:14:22:d3:0d:87:a8:
4f:79:41:15:27:98:6e:2b:4e:51:d7:37:7d:1e:80:5b:85:a2:
80:00:19:20:af:10:ef:b0:c3:b4:7d:ed:d7:a1:33:a9:3b:ef:
b1:f6:ec:53:f4:6c:7e:af:d2:7b:2a:b0:ee:62:4d:6d:eb:70:
cd:f4:17:2f:d8:ad:b1:f6:22:48:20:e4:bd:3a:a6:39:0f:32:
4e:74:cd:b0:c6:7a:46:e5:98:6a:95:8d:4d:46:bb:cc:f0:15:
86:24:62:3a:a5:1c:dc:52:5c:b8:22:09:18:58:dc:08:e5:af:
19:a6:c3:d9:83:21:b9:22:66:62:60:35:46:d5:b2:01:86:17:
9d:b1:81:c7:79:ce:a0:2a:bd:72:a9:fb:18:2f:d8:0f:ae:a8:
34:f0:bc:27:ae:0f:d4:c0:ce:66:55:1c:66:8f:1a:e4:2b:57:
c7:51:37:18:07:61:00:97:f6:e9:b8:34:3a:39:ce:80:0d:30:
fd:5e:9b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 07:19:28 2026 by rpki-client