Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
File: NSFqNgJ3h24-k7Kb1LuckjH60vc.mft (raw, json)
Hash identifier: D4traJPWewpSPOQiXVB28n6i4TepQ4F96v8bJ/XgPAk=
Subject key identifier: 65:A2:EB:07:9C:0C:03:F9:CB:0B:54:92:49:CD:1E:80:FD:73:43:25
Authority key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
Certificate issuer: /CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Certificate serial: 01A17EBD509A829F0C42ECFF5A62F83AD8B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
Manifest number: 152B
Signing time: Tue 27 Oct 2026 19:01:38 +0000
Manifest this update: Tue 27 Oct 2026 19:01:38 +0000
Manifest next update: Wed 28 Oct 2026 19:01:38 +0000
Files and hashes: 1: 6_mKfmRyYh_HHt_1AeGy1B2emsw.roa (hash: 71vWDant5UDHMxwkBCq/hUEjKeIJZzb0rpoKSTkfucY=)
2: NSFqNgJ3h24-k7Kb1LuckjH60vc.crl (hash: nQfmOC3wu/7hMe+z0jMytJ/eAeAzE61aX77RdcUh9GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bd:50:9a:82:9f:0c:42:ec:ff:5a:62:f8:3a:d8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Validity
Not Before: Oct 27 19:01:38 2026 GMT
Not After : Oct 28 19:01:38 2026 GMT
Subject: CN=65a2eb079c0c03f9cb0b549249cd1e80fd734325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:33:05:37:db:76:8d:14:fe:84:73:e9:68:bd:
40:a2:98:6e:c0:0c:be:37:4b:c3:b3:70:e6:e4:3d:
2c:d7:ed:e0:2d:b5:f1:d9:6f:12:28:b3:56:6d:6b:
e0:08:74:0a:d9:6c:17:d4:c1:30:cc:db:d6:a3:95:
c5:29:4c:d2:2e:8f:b6:9b:8a:d5:ba:a8:7d:d4:55:
b0:c2:84:18:a5:ea:0f:18:a9:ed:9e:5f:90:7c:be:
d3:85:fe:5b:27:5c:be:39:2d:ba:39:01:31:90:9e:
26:73:b3:19:10:bd:48:46:76:61:23:28:98:62:5c:
f7:a0:8b:5f:43:59:77:0e:04:41:3b:54:30:bb:cd:
a3:22:83:b9:47:62:39:2b:d5:6e:e2:95:1c:b4:e7:
e6:46:27:12:ed:c3:41:71:c0:f7:97:f5:10:48:ed:
a5:82:ad:74:56:29:fa:ab:6b:cb:c7:58:10:0d:4e:
3f:c4:52:b5:f4:4b:91:b6:7e:0b:23:d4:62:10:7f:
13:99:c8:d9:6b:f5:28:c5:b0:47:0d:ed:44:03:7e:
70:37:9d:9c:a3:5d:be:f7:9b:39:12:fd:fc:2d:75:
b3:08:89:d8:39:79:49:71:1a:4d:45:94:7d:4a:09:
52:08:11:12:3d:63:b9:89:c1:c8:7b:9d:91:61:95:
4c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A2:EB:07:9C:0C:03:F9:CB:0B:54:92:49:CD:1E:80:FD:73:43:25
X509v3 Authority Key Identifier:
keyid:35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:be:86:3a:64:4b:2c:e4:58:c9:64:c4:12:94:0c:22:c7:e7:
93:c8:93:a7:5b:dd:22:7c:0a:80:a9:67:7e:43:38:35:fd:f5:
a2:67:8c:7c:f3:36:b7:19:e3:1a:a1:72:a5:c8:e9:36:9f:d3:
2b:6e:47:43:45:a7:f5:bf:49:00:2f:6e:48:c8:5d:d4:9f:ed:
22:17:cb:4a:9d:45:20:45:25:2c:e4:c1:bc:ef:17:d0:5d:ea:
11:f5:0b:e6:9b:7f:2e:15:86:4e:93:8d:f4:4e:0f:10:f3:99:
ae:c7:06:af:36:dc:cf:a2:24:50:c1:98:0c:91:e8:5e:65:c5:
81:01:e1:84:dd:c8:33:bf:4d:35:4e:57:01:6b:ba:47:39:bd:
1b:c8:d5:35:0f:1e:c7:27:7b:eb:77:18:f1:e5:a4:a9:55:cc:
72:29:4c:4e:c0:db:8d:bf:7c:25:14:e8:7c:cb:c0:73:bc:1a:
5b:a2:5a:8e:37:87:59:6a:6b:85:d9:e7:a6:ee:f4:17:5f:6a:
41:b3:c3:3a:4b:bd:40:50:6b:25:b4:2b:b1:1e:96:e9:d7:de:
8f:b4:61:03:d5:18:34:73:68:37:72:c5:3f:4d:90:74:ea:f7:
11:de:c6:42:b3:8e:78:18:43:cf:fe:d9:6f:2a:3e:6d:bf:ba:
40:84:9c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:38:39 2026 by rpki-client