Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
File: NBSgbayFTb7mCYRYjex7MoS1qlA.mft (raw, json)
Hash identifier: S8vOPCzO6XE+KuwBwckYFLULDWrg7GZ1RRpbdTYUH0I=
Subject key identifier: 86:D7:6C:AA:56:F8:26:7E:D9:66:9B:83:53:D6:51:25:2F:67:CE:DB
Authority key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
Certificate issuer: /CN=3414a06dac854dbee60984588dec7b3284b5aa50
Certificate serial: 01A0890C0104608D88E716F504DA68E3D421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
Manifest number: 19D7
Signing time: Thu 10 Sep 2026 02:01:00 +0000
Manifest this update: Thu 10 Sep 2026 02:01:00 +0000
Manifest next update: Fri 11 Sep 2026 02:01:00 +0000
Files and hashes: 1: NBSgbayFTb7mCYRYjex7MoS1qlA.crl (hash: K8clAplbmf6HTURbBhgqzm74D+LNxqZP3vOeCoIGQis=)
2: _X5nMX01zIkdocFV_HQBvj4jIFY.roa (hash: 2Fkt6K/RwxywwOu2/bTk9f7aYl/AJ79Q108D3K95Ro8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:0c:01:04:60:8d:88:e7:16:f5:04:da:68:e3:d4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3414a06dac854dbee60984588dec7b3284b5aa50
Validity
Not Before: Sep 10 02:01:00 2026 GMT
Not After : Sep 11 02:01:00 2026 GMT
Subject: CN=86d76caa56f8267ed9669b8353d651252f67cedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:51:0f:d8:43:d7:7a:68:c7:8c:75:75:ff:aa:
e9:d6:91:91:12:6b:30:fa:37:46:2f:84:c2:4c:14:
91:31:dc:3c:66:d7:6e:3f:f4:fd:8c:25:e0:c2:89:
9f:7f:96:3d:10:07:12:84:c5:fb:cc:10:34:46:1f:
e2:39:f2:6e:e9:35:c9:76:1a:b1:f8:92:f3:7e:48:
b3:a6:f6:52:ba:69:b7:04:2f:3f:76:e3:26:77:82:
c1:be:36:68:5a:3f:e3:00:b7:05:63:da:43:d8:d6:
d4:7c:83:2c:ee:19:81:ae:c2:1b:6b:0d:b6:e9:15:
58:d6:f3:1c:86:c8:19:66:90:d2:8a:c1:1f:d5:df:
87:20:d5:91:25:db:0e:d4:ab:4f:22:da:24:b1:a1:
33:42:51:e0:e3:a3:55:72:d6:f5:5d:2c:6d:2e:10:
b7:a7:8d:21:f6:03:17:06:9b:f3:d1:f9:c0:d9:fc:
a7:0e:5d:e8:cf:81:81:fc:a1:7b:5f:71:b3:8b:bd:
aa:4d:3e:00:e0:07:15:e8:8c:ee:2e:13:e8:aa:77:
1a:99:54:27:1c:d6:35:40:1a:43:ed:76:39:b4:6a:
57:1d:a7:53:5b:c9:d6:13:98:bc:91:7c:c8:c6:5e:
26:9b:25:90:76:03:52:e0:b3:3d:77:50:d2:85:bf:
f3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D7:6C:AA:56:F8:26:7E:D9:66:9B:83:53:D6:51:25:2F:67:CE:DB
X509v3 Authority Key Identifier:
keyid:34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b1:ac:61:d6:f9:82:e8:4f:d0:bc:09:7f:1c:b0:6b:f1:ca:
6b:43:2f:09:9b:94:0c:a3:b4:36:f8:d4:6b:33:d2:f0:c4:5e:
23:99:28:d8:5b:02:ad:65:27:a3:c7:13:60:29:67:10:5c:6c:
22:78:12:68:f9:26:8b:e7:6b:07:03:f2:32:e0:df:d1:99:5d:
4b:fd:09:49:74:2e:99:c5:1a:a5:c5:0a:0d:19:d4:2a:da:70:
cc:f3:c0:8d:74:2e:ba:96:b4:a7:81:1d:35:83:1b:04:61:01:
78:0d:31:7c:46:98:8a:9c:36:90:2a:e5:b2:55:3f:2a:6c:93:
c7:f5:e6:48:fb:04:39:13:d5:1c:c3:8d:d3:cc:4d:7b:3c:b7:
b5:29:d4:0c:1b:20:8e:79:1c:54:52:06:38:36:c0:18:b7:36:
1b:5e:d0:91:71:e1:83:43:3b:4e:1b:c2:b0:52:b8:f9:f9:4a:
fb:df:35:52:22:cb:67:9a:eb:6d:b0:ef:a4:3f:72:82:67:fb:
49:a8:14:a0:9d:aa:c3:5f:e5:fc:93:63:37:a5:90:b5:8b:e7:
3f:9f:d6:f2:83:4f:53:6d:99:b0:ab:7f:1e:7d:f0:aa:62:60:
bc:af:14:05:9a:0c:1f:ff:28:e9:54:2d:f7:57:7f:7b:8c:38:
8c:d6:58:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJDAEEYI2I5xb1BNpo49QhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MTRhMDZkYWM4NTRkYmVlNjA5ODQ1ODhkZWM3YjMyODRi
NWFhNTAwHhcNMjYwOTEwMDIwMTAwWhcNMjYwOTExMDIwMTAwWjAzMTEwLwYDVQQD
Eyg4NmQ3NmNhYTU2ZjgyNjdlZDk2NjliODM1M2Q2NTEyNTJmNjdjZWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1EP2EPXemjHjHV1/6rp1pGREmsw
+jdGL4TCTBSRMdw8ZtduP/T9jCXgwomff5Y9EAcShMX7zBA0Rh/iOfJu6TXJdhqx
+JLzfkizpvZSumm3BC8/duMmd4LBvjZoWj/jALcFY9pD2NbUfIMs7hmBrsIbaw22
6RVY1vMchsgZZpDSisEf1d+HINWRJdsO1KtPItoksaEzQlHg46NVctb1XSxtLhC3
p40h9gMXBpvz0fnA2fynDl3oz4GB/KF7X3Gzi72qTT4A4AcV6IzuLhPoqncamVQn
HNY1QBpD7XY5tGpXHadTW8nWE5i8kXzIxl4mmyWQdgNS4LM9d1DShb/zewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbXbKpW+CZ+2Wabg1PWUSUvZ87bMB8GA1UdIwQY
MBaAFDQUoG2shU2+5gmEWI3sezKEtapQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkJTZ2JheUZUYjdtQ1lSWWpleDdNb1MxcWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8wM2RjNmUtODUyNC00NWQ3LWFjYzUt
ZTY1OWZkZTA1Mjg5LzEvTkJTZ2JheUZUYjdtQ1lSWWpleDdNb1MxcWxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8wM2RjNmUtODUyNC00NWQ3LWFjYzUtZTY1OWZkZTA1Mjg5
LzEvTkJTZ2JheUZUYjdtQ1lSWWpleDdNb1MxcWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZbGsYdb5
guhP0LwJfxywa/HKa0MvCZuUDKO0NvjUazPS8MReI5ko2FsCrWUno8cTYClnEFxs
IngSaPkmi+drBwPyMuDf0ZldS/0JSXQumcUapcUKDRnUKtpwzPPAjXQuupa0p4Ed
NYMbBGEBeA0xfEaYipw2kCrlslU/KmyTx/XmSPsEORPVHMON08xNezy3tSnUDBsg
jnkcVFIGODbAGLc2G17QkXHhg0M7ThvCsFK4+flK+981UiLLZ5rrbbDvpD9ygmf7
SagUoJ2qw1/l/JNjN6WQtYvnP5/W8oNPU22ZsKt/Hn3wqmJgvK8UBZoMH/8o6VQt
91d/e4w4jNZYbA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 11:59:19 2026 by rpki-client