Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
File: NBSgbayFTb7mCYRYjex7MoS1qlA.mft (raw, json)
Hash identifier: lCZrcZ2cJCw4DfDyB7Gk+9siwUGG6gGWO5RK+t/Oadw=
Subject key identifier: AD:6B:A6:20:BB:3C:EF:43:49:FD:C1:AA:0B:A4:5F:CD:B6:50:21:A6
Authority key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
Certificate issuer: /CN=3414a06dac854dbee60984588dec7b3284b5aa50
Certificate serial: 019DCDF4DEE858A59D9EC9E5F059A7E07E4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
Manifest number: 186D
Signing time: Mon 27 Apr 2026 08:01:10 +0000
Manifest this update: Mon 27 Apr 2026 08:01:10 +0000
Manifest next update: Tue 28 Apr 2026 08:01:10 +0000
Files and hashes: 1: NBSgbayFTb7mCYRYjex7MoS1qlA.crl (hash: gXJzB9JFQXUsFFmLdtSuAZmLFuowj2A5N7ljYVRWsSk=)
2: _X5nMX01zIkdocFV_HQBvj4jIFY.roa (hash: 2Fkt6K/RwxywwOu2/bTk9f7aYl/AJ79Q108D3K95Ro8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f4:de:e8:58:a5:9d:9e:c9:e5:f0:59:a7:e0:7e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3414a06dac854dbee60984588dec7b3284b5aa50
Validity
Not Before: Apr 27 08:01:10 2026 GMT
Not After : Apr 28 08:01:10 2026 GMT
Subject: CN=ad6ba620bb3cef4349fdc1aa0ba45fcdb65021a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f8:82:30:c1:0c:7d:c2:b8:ee:1f:d6:74:7b:
13:fc:e6:6e:73:d6:d5:13:4b:35:84:cf:e4:ae:95:
5d:7f:ef:81:57:b1:42:f7:bd:0f:6d:fd:62:0d:52:
3b:be:c7:53:9c:c7:b3:a5:94:61:d3:4c:f6:aa:a1:
a1:67:c3:5e:59:5f:fc:f9:34:66:41:d1:5f:dc:06:
15:e2:4d:7c:5d:99:eb:4e:18:06:21:62:dc:b8:80:
33:53:7c:fb:3a:32:50:61:72:11:a5:56:cd:24:2e:
59:e3:a6:b6:5a:e5:83:27:d7:dd:d4:78:33:a4:27:
ef:7f:5a:7e:e5:1a:c0:5e:03:a3:a2:06:f4:f5:8b:
e1:e0:66:25:e5:1d:a8:73:4f:f5:a2:59:4b:6a:19:
7f:88:b4:62:2e:40:c2:4a:48:7b:73:44:f1:d7:b6:
10:77:3d:07:4e:10:01:3a:40:f5:da:64:e1:01:5d:
c3:43:1f:55:a4:fe:05:b2:83:29:0f:22:0b:ca:12:
d5:9f:4c:dc:65:72:8b:8c:e0:86:af:ca:d1:0f:80:
37:c2:9f:28:ff:44:85:72:33:a8:4a:19:09:93:52:
b6:81:f6:54:3c:0a:a8:78:a8:07:13:02:f4:92:bd:
76:80:15:a6:b5:d4:26:35:5f:ba:db:4f:04:30:b2:
1d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6B:A6:20:BB:3C:EF:43:49:FD:C1:AA:0B:A4:5F:CD:B6:50:21:A6
X509v3 Authority Key Identifier:
keyid:34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f5:88:4e:c5:8b:f0:1d:6c:3e:b8:a6:90:38:88:38:6e:59:
d1:2f:4a:3d:36:08:98:d9:87:9d:46:4a:64:40:6b:b4:28:c4:
37:6a:9f:ce:37:78:62:85:49:59:92:10:c9:a9:ee:52:40:71:
f2:0f:26:4d:bf:e3:a8:9c:6d:f4:60:bf:5d:67:a9:38:23:ab:
58:bd:e4:01:4f:8a:f0:75:19:c2:a9:7d:e8:c2:79:13:bd:76:
e1:94:6b:be:02:62:58:f5:a9:31:ca:3d:c3:cf:62:55:dc:40:
53:78:1c:05:ea:1d:0a:ea:95:57:07:8e:bd:33:4c:78:96:66:
5e:24:32:9c:71:94:2f:1a:10:e4:1a:bc:60:cd:3a:09:3a:23:
44:dd:f0:0d:b9:aa:fc:8e:9b:9e:08:48:09:11:de:7e:81:79:
8e:f3:b5:ca:a4:df:05:b1:23:73:ba:56:cc:64:71:f1:0f:d9:
12:03:44:ef:30:7c:a4:ef:36:9f:09:62:6c:6b:4a:22:21:03:
1e:ab:8f:99:c0:60:c2:d6:a7:11:26:64:a1:6b:90:bc:f9:6f:
bd:d9:dc:9d:55:83:56:9d:5a:0f:5e:2e:d1:90:bd:9d:0a:21:
5e:40:63:c7:28:9b:a8:08:90:d8:79:9f:c2:1d:f1:97:f9:19:
f2:05:6e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:29:58 2026 by rpki-client