
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier: T+jMpuVtL0FQIjEq4buXi46GNFINLmaLvlXftPRbYuU=
Subject key identifier: F3:83:CD:E9:9F:E5:EB:AF:7D:88:7A:B6:E9:18:FB:D4:F5:E1:36:E8
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019E6203D39E880C6034038F314226784794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number: 162D
Signing time: Tue 26 May 2026 02:01:18 +0000
Manifest this update: Tue 26 May 2026 02:01:18 +0000
Manifest next update: Wed 27 May 2026 02:01:18 +0000
Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=)
3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=)
4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
7: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=)
8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: p6bK/g3AZoC4hoIIjy9dZOu8PhRkh4BYNyIl7MzSbOw=)
13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
15: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=)
16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
17: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=)
18: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
19: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
20: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=)
21: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
23: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=)
24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 May 2026 21:16:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:62:03:d3:9e:88:0c:60:34:03:8f:31:42:26:78:47:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: May 26 02:01:18 2026 GMT
Not After : May 27 02:01:18 2026 GMT
Subject: CN=f383cde99fe5ebaf7d887ab6e918fbd4f5e136e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:14:01:a5:5e:68:9f:68:46:48:55:df:5a:6b:
84:0d:54:79:60:aa:fd:14:51:52:78:bc:a8:9a:e6:
31:52:67:42:64:bf:f6:90:f5:52:55:e4:8c:75:1f:
83:cf:2e:e9:ab:be:fd:8f:22:77:5c:fb:99:f9:6e:
fd:c6:d6:6a:85:9a:01:f5:48:59:13:9d:94:ef:ca:
78:26:3d:66:21:14:09:ec:43:1f:18:d9:ee:11:b3:
4f:31:b5:7e:9c:4a:e6:f6:e4:59:92:b0:4a:be:e3:
77:49:69:0e:7a:98:a9:7d:cc:37:f4:9e:c2:12:9f:
91:a7:d6:4c:5a:30:bd:f9:e3:e2:78:20:6e:04:e4:
18:f5:86:8f:33:3a:fc:77:61:eb:ce:95:d5:2d:68:
a2:29:ac:39:c0:9e:cb:bc:d8:f1:c3:e9:a8:1f:5e:
c7:da:da:82:d2:81:e6:96:69:5b:b9:48:5d:d9:7b:
d0:f6:3d:90:98:b2:fd:89:1f:ee:d3:60:42:83:61:
90:61:22:96:32:40:3f:c4:f2:84:9f:8e:5f:3c:3e:
d0:02:b9:6b:f9:ea:ad:3b:d3:d6:a8:59:b1:49:b0:
68:9d:75:b8:94:ba:be:46:22:48:f1:95:67:ed:9d:
69:0a:27:a4:97:d1:23:1a:92:dd:f8:62:32:54:e9:
1c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:83:CD:E9:9F:E5:EB:AF:7D:88:7A:B6:E9:18:FB:D4:F5:E1:36:E8
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:09:db:61:79:46:e9:63:cf:d0:f2:be:f2:9b:9f:12:ef:b3:
d7:37:ab:2d:8f:1c:70:7e:bc:79:d9:17:31:d2:19:a6:b2:08:
bd:03:80:e0:8b:90:32:ac:36:fb:7d:bf:ab:b4:4b:59:3b:c2:
4e:9d:d0:55:11:49:db:c5:f1:a1:e8:1c:dc:3c:1d:7a:00:b1:
41:15:82:77:46:bf:b4:58:46:11:d4:5f:a6:a5:37:fc:ed:ca:
60:1d:3e:19:6d:3b:35:fd:3a:c9:ef:b9:09:1b:7a:2f:7b:60:
d7:78:d4:2a:d4:06:b1:b7:7f:5e:63:f6:e0:5e:e2:32:75:28:
8b:2c:3b:d7:1c:b2:28:74:6a:1e:9e:ab:9b:32:ef:cd:b5:b5:
95:f6:07:a5:18:bd:07:a2:9b:b3:23:c4:e2:f1:41:ca:b7:14:
96:a2:4a:0d:45:c7:4c:fa:fe:7b:5f:95:2a:dc:74:e6:cb:46:
d2:8e:d5:d5:76:31:3f:32:c1:76:db:80:38:78:0d:7f:17:e0:
28:cb:e4:d2:29:5b:d7:3e:27:f8:07:55:bf:5d:91:02:1b:4a:
d5:48:83:29:e9:89:b5:79:92:2d:d5:1c:58:56:b8:cc:74:36:
36:ad:bf:2d:b4:eb:5b:a0:14:70:6f:a0:31:0a:d5:f3:33:cf:
c7:d1:c2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 03:59:10 2026 by rpki-client