Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
File: NBSgbayFTb7mCYRYjex7MoS1qlA.mft (raw, json)
Hash identifier: mYICeNY98ZVWsz6F4kxEmfG8AHRn2FK8RLFF1XtsCjM=
Subject key identifier: 63:0C:15:E6:27:1C:A2:AA:62:2A:14:F4:DE:79:4E:E4:E9:86:72:91
Authority key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
Certificate issuer: /CN=3414a06dac854dbee60984588dec7b3284b5aa50
Certificate serial: 01A17E4F667C25CBE5B597E3DA940B6A44F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
Manifest number: 1A56
Signing time: Tue 27 Oct 2026 17:01:35 +0000
Manifest this update: Tue 27 Oct 2026 17:01:35 +0000
Manifest next update: Wed 28 Oct 2026 17:01:35 +0000
Files and hashes: 1: NBSgbayFTb7mCYRYjex7MoS1qlA.crl (hash: +9d+DmVmil0N1NOe59IhTktH77XJackbCjaWGU9e3sE=)
2: _X5nMX01zIkdocFV_HQBvj4jIFY.roa (hash: 2Fkt6K/RwxywwOu2/bTk9f7aYl/AJ79Q108D3K95Ro8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:4f:66:7c:25:cb:e5:b5:97:e3:da:94:0b:6a:44:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3414a06dac854dbee60984588dec7b3284b5aa50
Validity
Not Before: Oct 27 17:01:35 2026 GMT
Not After : Oct 28 17:01:35 2026 GMT
Subject: CN=630c15e6271ca2aa622a14f4de794ee4e9867291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b4:46:f5:4c:10:81:21:f0:a2:36:28:0f:a1:
15:41:5c:be:a1:11:e7:59:3c:5b:9e:26:21:75:cc:
0a:6a:22:cb:c3:69:9f:7c:0b:cd:41:3d:00:8f:9e:
da:0b:21:1e:97:3f:c3:ac:32:20:0d:db:31:a2:c5:
19:39:96:e3:ff:1c:39:b1:c3:17:22:5b:bd:07:80:
d0:bc:1e:3a:1e:d0:18:d6:a2:f9:e2:6c:5a:9a:0d:
88:9b:8b:56:02:06:51:45:0e:4e:89:14:97:82:5a:
08:63:ec:84:b9:f9:13:7e:d5:3e:eb:48:6b:9f:81:
77:ac:a7:86:69:c1:bb:91:b8:19:33:b4:92:7b:16:
4e:2b:79:44:c3:b0:57:27:d5:f5:e7:f6:dd:69:52:
3b:79:f1:10:ff:32:ae:6c:6d:a0:41:32:b6:22:1f:
ee:bc:3b:13:cf:a3:86:2a:0e:68:39:75:c6:16:3c:
f9:4d:26:83:41:6e:73:83:9d:6f:1c:57:40:27:bc:
c4:bf:61:b6:dd:98:54:ea:d9:7f:34:ed:c8:66:95:
1d:69:77:7d:cd:1d:e9:67:42:e3:b8:83:9a:87:d4:
1c:2a:75:b8:6c:1e:7a:45:d7:cf:cc:4d:84:8a:21:
90:a2:49:3a:cf:ca:5f:e5:a0:95:b0:0e:1a:d7:3e:
9b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0C:15:E6:27:1C:A2:AA:62:2A:14:F4:DE:79:4E:E4:E9:86:72:91
X509v3 Authority Key Identifier:
keyid:34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:98:1f:c5:5f:fb:d8:58:75:49:ce:4c:b9:4a:2e:54:ba:65:
ac:8b:f8:22:94:83:8c:5e:4b:3b:1e:93:63:d7:a0:94:35:4d:
c4:d7:e3:1c:77:24:f5:12:9b:9e:84:30:bf:16:4d:9c:cf:a7:
8e:9a:9e:44:f4:a8:80:99:3d:83:26:75:74:b6:c9:79:a8:de:
ad:36:de:bc:89:a0:98:3a:cb:a8:0e:fb:16:bf:ca:a1:cf:2f:
a6:82:eb:09:51:da:31:60:3a:e5:d7:02:2b:dc:cc:4c:c0:20:
ca:39:06:b2:7f:c8:03:05:72:75:12:ca:a0:d2:e3:e3:06:c3:
f3:a3:93:81:35:11:bd:99:1e:5e:07:22:56:5c:65:11:03:fe:
fa:dd:bf:e3:52:ad:ad:c9:9a:fb:45:7d:7d:2c:70:00:78:02:
27:3b:a7:88:df:b6:b5:42:8e:e0:fc:5f:95:6f:d3:9a:1f:da:
ea:15:1e:c7:f4:2d:25:9d:c9:2b:c1:5f:77:2b:9a:83:ca:fa:
0e:54:d7:e6:fa:79:ee:b6:12:36:57:f6:30:6d:1d:9a:76:c9:
67:90:56:5c:5e:5b:2a:3c:1e:63:00:90:84:8b:ac:2b:1b:8a:
65:09:e6:6c:c8:da:57:31:ff:2c:38:d0:b0:fc:89:80:9c:b4:
a7:dd:39:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+T2Z8JcvltZfj2pQLakTyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MTRhMDZkYWM4NTRkYmVlNjA5ODQ1ODhkZWM3YjMyODRi
NWFhNTAwHhcNMjYxMDI3MTcwMTM1WhcNMjYxMDI4MTcwMTM1WjAzMTEwLwYDVQQD
Eyg2MzBjMTVlNjI3MWNhMmFhNjIyYTE0ZjRkZTc5NGVlNGU5ODY3MjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbRG9UwQgSHwojYoD6EVQVy+oRHn
WTxbniYhdcwKaiLLw2mffAvNQT0Aj57aCyEelz/DrDIgDdsxosUZOZbj/xw5scMX
Ilu9B4DQvB46HtAY1qL54mxamg2Im4tWAgZRRQ5OiRSXgloIY+yEufkTftU+60hr
n4F3rKeGacG7kbgZM7SSexZOK3lEw7BXJ9X15/bdaVI7efEQ/zKubG2gQTK2Ih/u
vDsTz6OGKg5oOXXGFjz5TSaDQW5zg51vHFdAJ7zEv2G23ZhU6tl/NO3IZpUdaXd9
zR3pZ0LjuIOah9QcKnW4bB56RdfPzE2EiiGQokk6z8pf5aCVsA4a1z6bCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMMFeYnHKKqYioU9N55TuTphnKRMB8GA1UdIwQY
MBaAFDQUoG2shU2+5gmEWI3sezKEtapQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkJTZ2JheUZUYjdtQ1lSWWpleDdNb1MxcWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8wM2RjNmUtODUyNC00NWQ3LWFjYzUt
ZTY1OWZkZTA1Mjg5LzEvTkJTZ2JheUZUYjdtQ1lSWWpleDdNb1MxcWxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8wM2RjNmUtODUyNC00NWQ3LWFjYzUtZTY1OWZkZTA1Mjg5
LzEvTkJTZ2JheUZUYjdtQ1lSWWpleDdNb1MxcWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApgfxV/7
2Fh1Sc5MuUouVLplrIv4IpSDjF5LOx6TY9eglDVNxNfjHHck9RKbnoQwvxZNnM+n
jpqeRPSogJk9gyZ1dLbJeajerTbevImgmDrLqA77Fr/Koc8vpoLrCVHaMWA65dcC
K9zMTMAgyjkGsn/IAwVydRLKoNLj4wbD86OTgTURvZkeXgciVlxlEQP++t2/41Kt
rcma+0V9fSxwAHgCJzuniN+2tUKO4PxflW/Tmh/a6hUex/QtJZ3JK8Ffdyuag8r6
DlTX5vp57rYSNlf2MG0dmnbJZ5BWXF5bKjweYwCQhIusKxuKZQnmbMjaVzH/LDjQ
sPyJgJy0p905Ng==
-----END CERTIFICATE-----
Generated at Tue Oct 27 23:29:10 2026 by rpki-client