
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier: G4IdsHZSv2zBkgVsPOx16Gv67JhxgOTiON0INbedal0=
Subject key identifier: 8D:80:78:C9:4B:59:02:0A:1B:6F:3D:CF:9B:92:CA:92:CF:CB:8E:75
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A18751A8C514693468FA0CAFFE165B608D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number: 17E6
Signing time: Thu 29 Oct 2026 11:00:38 +0000
Manifest this update: Thu 29 Oct 2026 11:00:38 +0000
Manifest next update: Fri 30 Oct 2026 11:00:38 +0000
Files and hashes: 1: 06Sc0eMiZFBHUMpf5oZXoh19f3g.roa (hash: BZKXDhv9T9YgTMEVFOAxa+R6XbC5n20pfmCWfGD92es=)
2: 0VoVKdv0YilzQvn24_sCZeyVKr8.roa (hash: NUUJFCbfs9KNWhRCXMVBeOwBxJfOsZ72+OQ2JmV7RBE=)
3: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
4: 0ktKC-f4nDyI1i5cUIWyitRoyGM.roa (hash: pRXCJVbRDGRpG1mXoJ+u7IH5zOUK6pPz7zPKHQVprAA=)
5: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
7: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
8: Hq7KSfGbAabjKZnXngUy09CKrlo.roa (hash: iLEIXofURIxZfA42GaocsCdFXbCIkXKJ+whds6C0PiU=)
9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
12: MTfYuDupOZ8EKCi-cknXFTLRkO0.roa (hash: RTLFO/MqJcOk7O9hGvJVoHZCD/NBbtH1miZAgX+NBmY=)
13: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: MsF8a7nMRW5IcMkS1LKHrrOiDy0D1PxkptM9UuhjRnQ=)
14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
15: U0WYCTLb3BL8Dcqp9joVtMgVw-g.roa (hash: p+ru4cW+r6HSaCaeHZW8AaCBmqzOtYP77c4DAVcoILk=)
16: UWRpSa8c3Oh0mUYHXzQ6Q0qiIEs.roa (hash: 7iN0psfk1zyhVafop58DDcr20Feix7iaz6X07bxtzdE=)
17: XxesCyVYVVaPIRTpgem_CTm9ZKk.roa (hash: xanv4N1gYNPYLbJXTsbNvnyGPwQdB4ptqGSiKaCbTSs=)
18: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
19: Ytt0jYNmkblrHESNXtlptNtOzDw.roa (hash: TMGwUiyiBkKlSglO5vEWcjFMC3nFicpzZMzW+qYVWSQ=)
20: Yyjf5T4j8_LR2l_PDiqgZEKgorE.roa (hash: B9q3Gxf6cFCpQX15KKaR42uMVgZHY+iDJ+t7F3N4anA=)
21: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
22: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
23: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
24: jjZTf9S4GO_XBjspeycypitIdus.roa (hash: iiH1k95gg1mLK9IHZzz2iRVg9BcAeQPvTecCMlNndD8=)
25: ndjowxfAoyYeMp0r3Sv0cUgWMrc.roa (hash: t3U5a9jeFTpwLqazJteiTXIy8kMtT9VQPKdjkLgNQ/w=)
26: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
27: utF1Hb3bzsO09sTloqJeLO08SqU.roa (hash: zW94J0vK080nCwGZYwZncOPirWSIzruXkKW5U5VdEH8=)
28: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:51:a8:c5:14:69:34:68:fa:0c:af:fe:16:5b:60:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Oct 29 11:00:38 2026 GMT
Not After : Oct 30 11:00:38 2026 GMT
Subject: CN=8d8078c94b59020a1b6f3dcf9b92ca92cfcb8e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0a:e7:61:62:97:24:56:80:73:cc:33:d8:b0:
70:4c:aa:80:06:00:17:1f:e5:c4:90:bd:45:ea:f6:
57:91:7c:88:25:04:e8:02:28:a8:f0:d8:64:a9:4d:
95:cf:ed:d6:0a:eb:98:97:ac:42:38:9f:2a:97:2b:
ef:88:4a:fe:28:14:be:06:f6:2f:bd:ae:ce:44:af:
a9:14:db:d2:e7:ea:ac:d8:b8:74:f9:55:a8:79:29:
96:2e:27:13:23:90:90:1a:2b:70:6b:40:4a:63:3a:
33:a9:02:50:ae:6d:23:67:6c:3c:77:ca:1f:36:f8:
14:96:50:35:97:6e:df:d8:b3:c4:d6:b7:9b:2c:2b:
c3:9b:6b:0d:63:8c:16:87:ac:26:1c:1c:69:d1:cc:
36:33:90:5b:94:28:e9:c5:60:27:32:a2:47:b4:62:
6b:38:14:17:14:9e:6e:f0:65:5f:2d:82:25:39:bc:
96:2e:bd:4b:8d:9f:3d:7c:64:09:9f:1b:9c:34:b3:
74:ec:58:cf:d5:67:75:2c:6e:bb:7d:7b:22:33:33:
75:ab:e2:94:66:68:a0:bd:54:22:e7:b9:2e:16:bb:
f6:4f:dd:8a:a8:c2:83:93:4d:fe:34:cb:48:3e:39:
3b:9f:26:0e:81:18:f6:45:05:ff:ea:c2:ee:55:5d:
20:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:80:78:C9:4B:59:02:0A:1B:6F:3D:CF:9B:92:CA:92:CF:CB:8E:75
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:14:94:75:9d:09:aa:67:5c:2d:a6:aa:7a:7a:59:56:5d:8d:
23:27:3b:7a:26:97:be:4d:93:9e:df:b8:26:04:25:60:70:d4:
5d:b6:4a:70:bd:ea:87:3b:ca:06:f9:8a:0c:56:76:f1:45:09:
59:9f:48:18:df:a6:d5:6d:a3:78:b1:4c:b1:d8:bd:cc:ba:a0:
6f:a2:ce:d7:33:f2:4f:5b:5d:2d:f2:c2:4f:45:82:41:2a:5f:
3a:29:a2:04:1e:fd:e5:b6:0e:b3:0d:ab:c3:ab:77:39:a5:e6:
0b:61:74:83:f3:87:40:6e:76:d4:91:a4:51:e9:0c:cf:0d:65:
33:4b:73:a0:0e:52:3d:1e:fb:b4:06:b9:7e:5b:f2:08:fd:32:
bd:5f:24:0b:29:50:78:5d:cf:e8:e7:94:7f:f5:34:04:bc:41:
6d:68:87:ad:38:7b:dc:0f:e9:12:a7:ad:ae:35:9f:bb:1b:86:
ef:97:da:37:47:71:3c:63:2f:f1:d1:ab:46:c9:40:ce:41:fd:
95:22:da:b2:1a:32:be:e9:0f:5d:a1:68:34:f8:55:e2:da:cc:
10:5f:2b:64:2f:9c:b5:3b:20:98:6f:95:be:d2:18:61:ff:05:
27:40:1d:c2:a4:25:3c:eb:bd:9d:70:f0:67:a1:ba:cb:3a:04:
f1:e2:83:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 19:49:39 2026 by rpki-client