Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
File: NSFqNgJ3h24-k7Kb1LuckjH60vc.mft (raw, json)
Hash identifier: pux9a/2HV8oqLIqdg+4fNoQ5enV25uMoIvAKhZj83AM=
Subject key identifier: B9:5C:99:19:05:71:F9:B7:7C:7C:CD:BB:4F:B6:5A:F0:A1:FC:1D:78
Authority key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
Certificate issuer: /CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Certificate serial: 019EB80F70288E6EA71E0F52A182A53C9462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
Manifest number: 13BA
Signing time: Thu 11 Jun 2026 19:01:19 +0000
Manifest this update: Thu 11 Jun 2026 19:01:19 +0000
Manifest next update: Fri 12 Jun 2026 19:01:19 +0000
Files and hashes: 1: NSFqNgJ3h24-k7Kb1LuckjH60vc.crl (hash: vYvhZrR2p7xzkZsdMdWKkRSrswMtT3wuh10luBhHK3M=)
2: TM7w-cXB8z85wBN-IZClxGDsneg.roa (hash: emRsf5rqRT9CiCwd3UgGiz4Po2LgcGkGywPIUaBs3bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0f:70:28:8e:6e:a7:1e:0f:52:a1:82:a5:3c:94:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Validity
Not Before: Jun 11 19:01:19 2026 GMT
Not After : Jun 12 19:01:19 2026 GMT
Subject: CN=b95c99190571f9b77c7ccdbb4fb65af0a1fc1d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fe:09:04:f0:3c:18:78:5e:a2:b6:78:7b:c6:
a0:a6:90:61:50:b8:64:27:73:0c:b7:7b:05:4d:ca:
07:53:62:4e:95:cd:ff:64:61:81:2c:fd:0e:07:87:
65:58:68:b6:00:6c:8b:ce:e5:ec:53:62:78:56:cf:
a3:38:89:57:fb:04:90:8b:45:32:5a:35:0a:9f:06:
b6:12:a8:1a:cf:da:1d:0e:cf:e9:3f:88:46:d3:c9:
03:f5:c4:03:cc:82:74:6d:f9:15:76:72:e5:89:39:
c2:0f:f3:09:ad:ff:0b:42:d3:17:70:e6:69:33:7b:
4b:37:c0:2f:6c:40:3e:8e:28:4c:fb:ec:7f:f7:0b:
a6:15:2b:09:25:a0:0b:76:a8:67:43:db:08:08:88:
3c:b2:d4:9e:47:aa:49:85:09:77:89:61:66:b1:da:
0d:93:94:19:e6:d2:b9:e5:99:9e:00:ef:ca:53:29:
c3:88:d4:9f:d6:c5:14:da:ee:af:d5:d4:71:ab:98:
a3:55:a3:09:8c:cb:b6:93:26:a1:23:1e:86:e8:57:
e6:fe:22:0a:fe:07:86:fd:a9:e7:01:26:83:7a:57:
ef:cf:2d:cf:4d:61:de:91:40:21:89:60:38:b6:8d:
04:5c:e5:73:86:7c:0b:10:d5:92:bd:ed:eb:9a:13:
2e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5C:99:19:05:71:F9:B7:7C:7C:CD:BB:4F:B6:5A:F0:A1:FC:1D:78
X509v3 Authority Key Identifier:
keyid:35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e6:3b:42:74:c4:97:34:bb:bd:a1:2d:2c:bd:d6:45:37:81:
94:43:ce:e1:65:62:54:89:29:3b:5b:f4:c9:a0:8d:dd:e6:74:
bc:66:b2:7b:58:32:b7:f2:0b:03:9e:f9:af:01:35:2a:73:22:
74:9d:a7:2c:8d:33:db:73:9f:2b:85:03:82:82:cb:b9:a6:53:
0a:ae:23:77:55:d2:6e:ae:a3:05:c4:36:24:7d:a7:37:5f:a4:
13:59:7b:60:15:62:09:1d:71:3d:d1:dc:f3:56:13:8c:37:a3:
4e:bb:be:24:06:b5:69:ff:6d:58:49:93:15:b7:46:ed:88:7b:
3b:08:c8:dc:59:65:93:f7:ae:d4:df:56:fe:1d:e8:43:d8:1e:
f0:03:9b:46:37:98:58:6e:11:03:0b:8e:89:ff:74:29:b8:ee:
b9:5d:8c:d9:c7:1c:13:0c:b8:38:a3:bd:18:0a:67:82:31:57:
b0:50:7a:8f:0a:17:77:d2:c8:ff:8f:ac:a6:76:96:ef:aa:1e:
a3:01:a6:5f:e3:1c:98:19:bf:bf:53:57:d5:ce:7c:9a:26:c8:
48:53:fc:34:92:87:89:5f:c5:98:69:f1:2b:88:ab:42:f2:97:
7d:dc:cd:fc:ff:3b:08:7a:db:a3:b0:8b:49:58:ec:da:0a:ef:
34:c5:87:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:16:21 2026 by rpki-client