Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
File: NBSgbayFTb7mCYRYjex7MoS1qlA.mft (raw, json)
Hash identifier: j/jaPoCw7orBupQFo9Nj7h/qZAC+XHVkIIPCP3V7ZJ8=
Subject key identifier: A4:30:0E:2D:E3:94:DB:69:12:22:02:88:EF:F2:18:E8:16:FC:26:51
Authority key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
Certificate issuer: /CN=3414a06dac854dbee60984588dec7b3284b5aa50
Certificate serial: 019F9F5FAEEB02C9A963E9C597A1168E2D70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
Manifest number: 195E
Signing time: Sun 26 Jul 2026 17:01:15 +0000
Manifest this update: Sun 26 Jul 2026 17:01:15 +0000
Manifest next update: Mon 27 Jul 2026 17:01:15 +0000
Files and hashes: 1: NBSgbayFTb7mCYRYjex7MoS1qlA.crl (hash: SmqN3fga0VQytWg2fjxtYBlFCnrNRQ+OTbM0b0eNNgQ=)
2: _X5nMX01zIkdocFV_HQBvj4jIFY.roa (hash: 2Fkt6K/RwxywwOu2/bTk9f7aYl/AJ79Q108D3K95Ro8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 17:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:5f:ae:eb:02:c9:a9:63:e9:c5:97:a1:16:8e:2d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3414a06dac854dbee60984588dec7b3284b5aa50
Validity
Not Before: Jul 26 17:01:15 2026 GMT
Not After : Jul 27 17:01:15 2026 GMT
Subject: CN=a4300e2de394db6912220288eff218e816fc2651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a3:a4:8b:92:bc:b7:20:78:43:59:8b:84:02:
29:9a:f7:6c:d0:0e:92:40:98:ec:45:b1:de:b7:d6:
d7:fd:d6:0a:20:d4:6d:e5:e2:0e:3b:b8:98:b2:14:
62:7e:87:f2:ce:47:40:37:67:dc:0b:fc:fd:4b:8d:
e8:28:3f:4c:f6:42:f6:8a:9e:66:79:cb:c7:2c:8e:
d2:3c:34:91:bb:48:37:8b:82:a6:d1:b9:ed:36:aa:
92:ba:b8:96:fa:95:5f:79:57:18:cb:e8:d8:22:ea:
3b:b4:6d:ba:81:cf:a5:86:3c:d8:3d:60:34:b5:3e:
ea:eb:2b:2c:fe:9c:37:8f:8b:f1:a3:42:27:57:f2:
fc:ea:d6:c0:55:8e:6b:07:2b:13:48:bd:b0:63:b7:
67:28:3e:0d:3f:12:2c:06:08:85:fb:58:95:19:34:
2c:b1:97:69:ce:9d:b6:b8:7f:82:4b:62:67:d1:1f:
44:f5:be:79:5f:86:e5:cc:23:69:50:ce:ce:d9:c3:
ae:a0:a0:be:e9:b2:e1:32:78:7e:be:68:dc:0c:ba:
00:3c:e2:29:1e:2c:1a:ef:ea:de:6c:c6:d3:cb:5b:
52:98:70:e9:bb:39:0d:da:62:3d:e4:95:9d:c4:d3:
4d:2a:5b:c0:47:51:f7:a1:9c:94:36:b8:e6:d4:91:
dd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:30:0E:2D:E3:94:DB:69:12:22:02:88:EF:F2:18:E8:16:FC:26:51
X509v3 Authority Key Identifier:
keyid:34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d8:0c:f3:49:62:a9:5e:83:33:d1:44:4a:79:b7:12:3a:59:
00:04:d1:6c:ef:3f:39:a9:af:39:b4:67:79:af:11:af:17:47:
b7:9d:f0:18:d8:6d:73:02:6d:9d:0b:c2:23:bf:23:43:77:5a:
94:d1:e9:2e:9c:4b:5c:3e:32:41:4e:a8:f9:09:66:dd:5f:9b:
dc:7d:40:94:ed:83:2a:83:2d:39:6e:18:ee:69:88:37:b0:a1:
6c:8e:7f:af:12:ec:a2:89:2b:ff:e3:ed:38:28:0e:0b:f3:67:
91:e7:12:70:be:5d:70:a3:d7:c3:4f:a6:03:48:80:35:4f:db:
69:bb:52:6f:45:6b:58:e6:11:de:3b:62:66:34:4e:a1:c3:59:
b3:0c:7b:9b:29:c6:62:63:5e:e6:80:49:af:f0:7f:f7:0e:45:
87:48:da:26:d2:5c:db:c7:0d:48:eb:cf:e8:23:14:5d:c0:ad:
d8:bd:3f:8b:97:c4:41:ce:f1:56:94:0b:a8:7d:19:ec:3b:b1:
1d:a8:11:d8:9a:ae:18:99:e7:56:96:6a:ca:d3:3c:66:85:e4:
f8:2c:fc:11:bb:88:81:ea:b3:b8:5b:cd:5b:5f:7d:d2:0e:71:
0b:1c:f5:9c:52:e5:03:04:61:62:0a:38:6f:11:46:ad:74:fc:
78:d2:ce:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:21:05 2026 by rpki-client