
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier: Rzawo1SSHfTfOJMU2l+mwq3Zf9+A/O/rugQ017h8D8E=
Subject key identifier: 87:E3:CB:C6:9A:07:18:5E:8C:9D:9B:B7:49:85:2F:8C:47:9E:60:9B
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019FF9487B1348DE8D2B6952635D8AEF06A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number: 1703
Signing time: Thu 13 Aug 2026 04:01:44 +0000
Manifest this update: Thu 13 Aug 2026 04:01:44 +0000
Manifest next update: Fri 14 Aug 2026 04:01:44 +0000
Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=)
3: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
4: 1kOZn--0TV8mINAOK8zNe0cR5Fc.roa (hash: +yJ0/l/ebfqk5PtE/KW8wQHru8HbhRVMl8T92kwAYpA=)
5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
7: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
8: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
9: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
10: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
11: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: I6yWrO9IPY10oLlfOOIXgexn77ICYL7EBC7cy7r1LNA=)
12: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
13: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
14: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
15: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
16: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
17: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=)
18: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
19: mPOsfR_EgIlXFPyTz3qJ-ms8oBE.roa (hash: SFWqGIC3QiWf99ScQ0ED4oUM7qmummOqBhR+e6cUZNI=)
20: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
21: utF1Hb3bzsO09sTloqJeLO08SqU.roa (hash: zW94J0vK080nCwGZYwZncOPirWSIzruXkKW5U5VdEH8=)
22: vcKt5W7LNR-jKY2SI5bC1jCK6tw.roa (hash: FLQ9RRF3YmE7lXTh4GwRBI1gCsAaA+JXKOxdV9Z6XkM=)
23: wCMm-aenH_zuMJOSQuJWeb71NJ0.roa (hash: ayLqc4WWQljF7RYZ5IzvneWbkS5edMXjdGTG+Aa5QjQ=)
24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:48:7b:13:48:de:8d:2b:69:52:63:5d:8a:ef:06:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Aug 13 04:01:44 2026 GMT
Not After : Aug 14 04:01:44 2026 GMT
Subject: CN=87e3cbc69a07185e8c9d9bb749852f8c479e609b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:8b:fd:d7:6e:14:51:d9:e4:4d:7a:36:c8:
2c:25:e2:96:e2:80:bf:a0:58:d7:03:16:2c:a0:04:
5c:54:c9:4c:7f:98:d5:19:5c:14:af:a1:c9:83:3b:
e1:20:6e:8a:64:9b:45:b0:75:6e:8f:88:5c:cf:0a:
48:3c:0a:78:0e:fa:9f:16:07:40:76:eb:d2:4b:53:
f0:57:97:a5:8e:33:28:2d:63:d5:15:78:5c:ca:a0:
f7:cd:0c:c6:e1:ae:51:49:9a:be:08:df:57:90:3a:
fd:6c:77:8e:7e:50:83:3b:36:5a:a4:9e:96:7a:c2:
1c:18:77:9c:74:46:27:81:4f:57:b3:3e:8d:30:66:
b1:b1:cf:80:3d:dc:d7:6b:25:0f:83:44:21:fc:1b:
6e:78:ff:98:69:a4:b9:a2:f7:57:f7:7f:c9:20:9a:
f8:35:cd:f4:2d:b3:3a:78:55:ed:57:72:8a:ad:14:
85:7c:73:ca:a7:2d:2a:7f:6c:67:7a:61:07:c6:5d:
74:2d:60:11:74:98:18:ab:b6:bc:1d:94:3d:7d:4f:
af:8d:48:a5:2a:f0:0e:a2:37:85:b8:7d:a1:d7:df:
f2:fe:e5:c4:b4:f3:0e:9d:45:c3:df:ee:60:78:c5:
7e:ca:9a:8b:f7:2e:23:c7:e4:90:3e:ca:08:a4:a5:
0f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E3:CB:C6:9A:07:18:5E:8C:9D:9B:B7:49:85:2F:8C:47:9E:60:9B
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:48:c9:9b:05:78:da:8c:01:59:8c:b7:68:ec:85:ad:f2:87:
eb:68:0a:c9:34:1b:0b:e4:c7:d8:a9:b9:7e:3b:fe:b0:a6:23:
8c:69:98:76:65:db:c8:96:4f:9a:d1:ad:b9:b0:f5:1c:11:9e:
6b:16:5d:1d:a7:6e:2b:7e:cf:d6:87:77:fc:6a:b1:2a:9d:c2:
a8:8a:5f:52:8f:3b:19:54:f6:80:09:f7:72:c9:f1:99:96:20:
d0:e8:54:11:45:59:09:cc:4d:04:6c:c2:d1:ef:0a:8c:9c:dc:
70:e8:d8:06:34:f1:16:c9:1e:8d:d2:9e:c0:d2:fd:f1:81:20:
ca:af:2a:d0:b5:34:af:c7:38:64:df:e2:31:fa:88:12:05:09:
93:07:35:b9:58:22:25:e8:82:a4:21:09:bf:5a:de:db:09:8f:
5c:55:f9:3f:80:1c:ea:1e:3c:14:82:26:f0:6c:8b:2c:eb:d9:
58:cc:40:2f:ce:50:ec:cd:09:b1:44:ed:11:09:0b:da:16:24:
1a:ba:62:e8:7d:a0:da:ac:0f:9b:08:0c:6c:77:09:50:c2:31:
39:06:7d:c3:13:c7:f8:f4:63:14:df:68:94:3a:f5:c8:5a:2c:
9c:79:fb:7f:7a:35:90:5e:7d:62:ac:dd:83:7a:ef:62:98:63:
72:b2:ae:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:49:27 2026 by rpki-client