Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
File: NSFqNgJ3h24-k7Kb1LuckjH60vc.mft (raw, json)
Hash identifier: 8wXk0titUmpUiKVVhzxkMxkaO9DkbE8RJG9TJw0qb1E=
Subject key identifier: 6B:5F:6E:C5:EF:72:B2:03:B5:01:14:42:93:22:9C:0C:9C:81:59:B1
Authority key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
Certificate issuer: /CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Certificate serial: 01A08D5640F283D407FF7BFB006CDA1091C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
Manifest number: 14AE
Signing time: Thu 10 Sep 2026 22:00:34 +0000
Manifest this update: Thu 10 Sep 2026 22:00:34 +0000
Manifest next update: Fri 11 Sep 2026 22:00:34 +0000
Files and hashes: 1: 6_mKfmRyYh_HHt_1AeGy1B2emsw.roa (hash: 71vWDant5UDHMxwkBCq/hUEjKeIJZzb0rpoKSTkfucY=)
2: NSFqNgJ3h24-k7Kb1LuckjH60vc.crl (hash: kItk1UhP9FQ/MPZdFL4AlWOSVu/nXyZVotO7J5Nxqfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:56:40:f2:83:d4:07:ff:7b:fb:00:6c:da:10:91:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Validity
Not Before: Sep 10 22:00:34 2026 GMT
Not After : Sep 11 22:00:34 2026 GMT
Subject: CN=6b5f6ec5ef72b203b501144293229c0c9c8159b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:66:d8:6c:1e:40:af:4e:93:47:e1:2b:06:d6:
bb:f3:00:33:0e:dd:49:3e:b9:95:3b:c7:14:0e:a6:
f8:7d:6f:87:95:c0:b5:77:55:4f:35:c2:3e:7b:ac:
19:77:69:22:80:73:5a:08:61:a7:9e:34:e6:66:03:
17:fa:b1:0f:37:77:aa:6b:2f:e1:0b:48:1d:6b:62:
da:55:02:c5:49:1b:8d:f4:1b:53:f2:25:ac:53:0a:
1e:2c:71:6f:0b:70:5a:4d:42:fb:a4:72:dc:bb:eb:
8b:1a:26:77:9a:ea:d1:b6:d4:ac:79:ad:c9:f3:36:
51:63:73:11:99:44:37:6f:a7:22:95:5d:b6:4d:71:
20:a2:e6:b6:aa:17:5a:b8:8a:f5:bc:df:ca:fd:64:
1e:e1:fe:a7:ba:5f:a1:a1:92:ba:08:db:2b:4e:e3:
9c:73:d0:5d:d9:71:39:fa:79:85:2f:b1:7c:d5:6e:
bd:90:b9:a0:fc:d3:fe:48:e6:29:f6:04:0d:2b:3e:
f5:b9:0d:a4:49:14:eb:54:eb:d7:7b:79:e2:1f:8e:
d3:31:b4:3a:47:22:df:21:10:81:4f:70:fc:bd:b2:
b2:46:70:7a:5f:68:05:65:51:51:67:00:5d:2c:63:
6f:fa:d8:d4:6f:e4:21:d9:ac:07:79:4e:6f:39:0e:
37:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5F:6E:C5:EF:72:B2:03:B5:01:14:42:93:22:9C:0C:9C:81:59:B1
X509v3 Authority Key Identifier:
keyid:35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:eb:c2:a0:cd:63:29:1d:9e:a3:94:dc:69:9d:18:37:08:7f:
42:f0:79:43:ba:38:49:f7:ea:1a:54:c2:a7:dd:fb:98:be:bb:
f7:83:e6:98:90:d0:fb:d8:13:dc:4f:f5:97:ad:6f:d4:cc:fa:
f0:39:20:11:9c:41:54:c4:d9:0f:f9:d8:90:eb:cf:22:df:d0:
aa:45:76:5d:bc:14:95:49:3c:3a:6c:8a:60:ba:9b:35:e9:fe:
f5:0c:a3:12:a7:98:4d:15:43:85:7d:19:f7:d6:48:d8:e8:09:
da:69:4a:6a:39:61:05:98:a2:31:ed:d5:c5:c6:2b:50:0b:ee:
be:74:fe:75:fb:80:3a:57:e6:bf:47:66:19:8b:2d:d8:c1:dc:
a5:01:3a:1f:cc:b3:8d:29:b9:c0:69:6b:1b:3b:5d:37:d4:3c:
83:dc:57:57:db:50:60:d1:73:61:16:b1:85:f0:7d:b9:a4:e4:
4b:96:0c:1a:49:c6:66:be:fc:d6:47:a6:42:23:da:70:2c:be:
b1:dc:b3:7f:be:dd:d9:2d:04:9c:7b:6f:a3:82:05:3f:68:e9:
7e:56:21:b8:08:66:f7:8d:ad:13:32:63:07:70:91:48:41:10:
28:e0:4e:1a:19:52:b2:6b:b3:53:ab:0d:7d:4f:6c:86:bd:e6:
90:b9:50:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:48:33 2026 by rpki-client