Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
File: NSFqNgJ3h24-k7Kb1LuckjH60vc.mft (raw, json)
Hash identifier: CUxpSW3wA553LNyK2z9QthR2oPr5lWXZzDb2HWufAJo=
Subject key identifier: 7B:98:F9:62:CB:BF:DB:D2:4A:95:60:4C:57:B7:C7:4F:7A:36:7E:97
Authority key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
Certificate issuer: /CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Certificate serial: 019D37C0394AC440AAC6F6F3084558E9C828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
Manifest number: 12F3
Signing time: Sun 29 Mar 2026 04:00:37 +0000
Manifest this update: Sun 29 Mar 2026 04:00:37 +0000
Manifest next update: Mon 30 Mar 2026 04:00:37 +0000
Files and hashes: 1: NSFqNgJ3h24-k7Kb1LuckjH60vc.crl (hash: evhR5xTXHAzLt+Rt5u8l54MmhYcLYXTwIBlTdlMSwh8=)
2: TM7w-cXB8z85wBN-IZClxGDsneg.roa (hash: emRsf5rqRT9CiCwd3UgGiz4Po2LgcGkGywPIUaBs3bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:39:4a:c4:40:aa:c6:f6:f3:08:45:58:e9:c8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Validity
Not Before: Mar 29 04:00:37 2026 GMT
Not After : Mar 30 04:00:37 2026 GMT
Subject: CN=7b98f962cbbfdbd24a95604c57b7c74f7a367e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:be:74:7e:a8:e8:d0:3a:eb:a9:08:e9:0f:8f:
55:89:4b:29:35:3b:33:1d:53:cb:83:ad:dc:7a:c6:
fe:61:25:da:10:a5:3d:dc:8e:af:1e:88:9c:d8:24:
36:0a:c9:40:46:f4:0b:e7:e4:a9:8b:ff:82:d4:5f:
ea:5d:3a:c5:ff:17:54:6e:e9:8c:f7:50:ad:f0:0f:
6f:32:4e:d7:2d:b7:33:ee:01:87:df:a2:cd:fc:ce:
b9:dc:2e:03:45:18:e7:6d:b4:27:3c:61:4b:51:43:
9d:7b:39:b9:77:e8:b4:3d:e7:fd:b9:61:51:32:3e:
aa:5b:d1:b8:34:0d:18:f0:17:1b:13:77:e6:6a:36:
3f:95:84:11:0f:81:66:18:0a:99:0b:e1:da:40:49:
c1:97:41:f0:da:0f:85:e3:ae:11:05:88:4e:ae:00:
75:eb:06:f6:29:f5:47:71:aa:52:f8:93:39:1d:72:
69:64:22:7f:10:92:4d:1a:e6:d9:76:01:96:dd:8a:
f0:e5:75:16:fe:53:e2:68:ea:c6:3b:a7:5a:11:0c:
1d:a5:58:08:51:79:ed:14:79:9b:fc:c4:32:ad:15:
c5:fc:82:29:00:e4:66:65:fd:c0:6c:bc:c5:cc:14:
38:42:c2:49:1b:ea:f2:49:50:6b:b7:67:6e:e6:cc:
85:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:98:F9:62:CB:BF:DB:D2:4A:95:60:4C:57:B7:C7:4F:7A:36:7E:97
X509v3 Authority Key Identifier:
keyid:35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:bf:c3:2d:bf:a2:c9:6c:75:24:8c:71:11:18:48:1f:b2:82:
ff:9f:e1:a1:0e:d1:15:d8:75:9d:c9:ef:0f:85:49:c3:ce:e8:
84:1a:42:40:6e:28:ee:9c:9d:02:c4:f7:fe:ef:fa:67:48:1c:
56:a7:c8:81:ca:df:ec:a2:c6:dd:e2:9a:e7:79:3e:68:f5:59:
7e:b7:58:8c:03:eb:b2:5e:17:3b:f4:19:5f:e7:f5:89:d1:42:
42:ab:2f:d0:82:b1:5b:0d:6e:ed:1c:1d:98:e5:8e:27:6e:64:
42:6f:d8:b6:a7:7d:bd:dd:0a:b4:9e:28:7f:53:0e:ca:ed:c4:
14:8a:10:4b:56:83:f5:2f:a1:94:32:43:14:46:49:a0:2c:66:
8d:62:46:38:90:a8:46:45:31:a9:1d:e8:c9:fa:5c:b3:86:4f:
b1:0b:ca:37:18:85:1a:c8:3e:45:4d:dc:2e:7a:90:52:9a:3f:
c1:25:a3:e6:c1:87:99:af:0f:45:be:34:02:da:5e:3c:2b:41:
3f:0d:20:0c:92:08:47:0e:4f:7d:6d:82:e1:b5:e2:81:59:5e:
5a:db:43:5a:6e:a8:7f:78:80:8e:d9:e1:79:ad:10:b9:2d:07:
e1:7f:73:fe:8f:21:a3:f5:dd:1e:87:9b:de:4c:76:60:14:50:
6f:e3:ca:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:41 2026 by rpki-client