
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier: KJkOU54GkcOZop1WoqdpvXeh6HNWkevXBwYBgxRI3DU=
Subject key identifier: FA:A1:B3:FD:F5:22:88:B1:30:B3:8C:C1:10:7E:51:18:4B:FE:F9:E3
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019E82D7CF8E89E5CE72F09BA7EA4FC9CDFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number: 163E
Signing time: Mon 01 Jun 2026 11:00:41 +0000
Manifest this update: Mon 01 Jun 2026 11:00:41 +0000
Manifest next update: Tue 02 Jun 2026 11:00:41 +0000
Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=)
3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=)
4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
7: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=)
8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: bxWHcihhjWFU40l0rOmefDp0RbaiCNuToYj2CMnX8J0=)
13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
15: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=)
16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
17: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=)
18: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
19: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
20: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=)
21: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
23: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=)
24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jun 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:82:d7:cf:8e:89:e5:ce:72:f0:9b:a7:ea:4f:c9:cd:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jun 1 11:00:41 2026 GMT
Not After : Jun 2 11:00:41 2026 GMT
Subject: CN=faa1b3fdf52288b130b38cc1107e51184bfef9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f5:56:03:49:9e:45:91:8a:cf:08:e2:f2:3a:
50:e6:dc:17:e8:70:73:67:f7:ec:71:57:89:8f:6e:
b7:f0:75:39:e6:61:f4:08:db:37:09:51:0a:55:d8:
e7:b4:f7:89:dc:c5:e8:c3:89:03:4a:26:4d:b1:65:
d8:1a:ef:0f:a1:ee:71:ab:76:e8:f4:4c:30:d0:30:
af:54:62:2d:5d:3d:81:1d:15:2c:6b:d4:5b:b1:fa:
df:bb:3e:fb:f9:52:e0:12:3f:dc:77:7c:4c:9d:47:
24:e9:9f:d9:95:19:ac:e8:c0:15:01:3e:a1:92:7e:
b5:52:c0:32:70:12:7b:23:12:1f:50:a4:a0:83:ce:
88:84:c4:53:48:cc:8e:30:b9:b6:d3:ab:74:6b:27:
b4:aa:82:4f:de:ef:68:41:2b:fb:38:30:1b:04:29:
cc:74:66:17:78:ae:b5:01:e7:d7:b6:c2:c2:b2:73:
d9:b4:f9:e3:f9:64:75:a3:db:8f:1e:ec:1e:af:a2:
f9:52:e8:7d:fd:0b:b7:82:e0:36:b7:8f:49:7d:14:
4e:af:2f:7a:25:f6:72:14:54:2a:0a:5c:14:fd:96:
27:5a:f5:13:de:3c:f0:09:26:82:0c:f0:bd:1e:a6:
c8:79:e7:08:67:09:61:dd:49:b0:5f:a4:5e:e1:7b:
3c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A1:B3:FD:F5:22:88:B1:30:B3:8C:C1:10:7E:51:18:4B:FE:F9:E3
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:db:0c:c7:bf:05:da:c4:da:e5:95:ce:c1:b8:fc:9d:24:30:
7f:49:27:22:d1:f0:fe:b6:83:57:13:49:2e:40:44:f8:f2:4a:
a8:2d:6d:7a:a0:63:bb:10:bf:e8:40:6e:89:4b:7e:e6:92:0d:
11:53:b4:7f:f2:3c:c1:3f:47:be:f6:aa:3f:5f:77:9a:59:ce:
89:5d:f8:98:d5:65:59:59:c4:4b:e7:82:87:a6:61:ad:79:b5:
14:24:87:29:8b:14:33:d3:f1:fa:5f:55:a6:ca:f8:66:cd:61:
68:00:62:28:53:96:ca:06:ae:9f:72:0d:0a:c5:cf:ee:22:82:
83:2b:b7:cf:58:1e:77:e6:b5:43:0c:c1:42:cf:af:c4:a8:cf:
84:d5:7d:d3:d0:21:48:80:2b:40:bd:4a:60:cb:f3:2b:e4:2f:
84:32:96:d8:95:9b:28:bb:e8:6a:23:f0:20:e8:22:9a:d2:fe:
36:0c:25:40:44:cc:d3:78:13:3a:09:4e:62:d1:98:24:a2:23:
b3:ae:fd:cb:a6:19:cb:56:11:80:0d:6f:56:21:75:7b:50:54:
75:38:81:2a:71:2d:d9:4d:5a:fa:cb:6b:cd:06:b8:39:e6:3f:
24:82:59:ae:f4:55:8d:36:8b:8d:2a:02:d7:37:af:a5:05:7d:
34:d0:2f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 15:47:54 2026 by rpki-client