Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
File: NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft (raw, json)
Hash identifier: ysC6yei0xr14/uYyuPLs440lyI5TZ47qRJ31sOxz+8g=
Subject key identifier: 5F:B3:E8:7B:44:99:54:65:60:19:FF:4E:AD:59:D8:99:9A:B7:DC:0E
Authority key identifier: 34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E
Certificate issuer: /CN=34e110b59362f673eae33b66ee7aea3c4028294e
Certificate serial: 019D299704E096042434C104E61F1C424442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
Manifest number: 0FFF
Signing time: Thu 26 Mar 2026 10:00:56 +0000
Manifest this update: Thu 26 Mar 2026 10:00:56 +0000
Manifest next update: Fri 27 Mar 2026 10:00:56 +0000
Files and hashes: 1: NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl (hash: uNpDbCxyGPnN73sNowSytdxdYUuEsRGGIOs5m6EpxtE=)
2: VqjhvtfIA_j9AGS9yJpDBA7pkTI.roa (hash: IZDq9Jb7er+qUs+ORA/YfhCgdw6n3hVb81p9+8Go++s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:04:e0:96:04:24:34:c1:04:e6:1f:1c:42:44:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e110b59362f673eae33b66ee7aea3c4028294e
Validity
Not Before: Mar 26 10:00:56 2026 GMT
Not After : Mar 27 10:00:56 2026 GMT
Subject: CN=5fb3e87b449954656019ff4ead59d8999ab7dc0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7b:0c:80:71:fa:b1:b0:e9:3f:45:8b:65:16:
3c:6f:d6:8e:f7:e0:9c:e2:09:cd:07:ee:2a:90:a3:
4d:3b:84:85:38:51:54:6b:27:85:a8:b5:9b:e4:49:
82:9a:06:84:8d:1c:b5:bb:36:64:4a:11:f9:10:bb:
2a:c6:fa:09:a3:fb:81:aa:d8:28:de:1f:23:78:b4:
17:62:30:5f:ae:df:d7:79:a5:a2:fd:e9:a2:11:4e:
a1:f9:dc:11:f6:7a:5a:82:0b:56:62:ab:ec:dc:a3:
f3:0f:d2:aa:ae:17:ff:05:4c:4b:45:4a:d3:df:a6:
9e:3d:b7:36:ff:09:2d:c7:2f:b4:8e:fb:40:f3:d8:
dc:f7:c3:73:1a:ca:65:76:ef:97:7c:40:23:17:ef:
3b:9d:70:3b:85:8b:84:be:fd:59:c5:0c:c7:1d:ec:
78:73:57:cd:3c:58:22:7b:80:70:59:e6:03:d3:8a:
cd:5e:61:c6:82:80:64:ed:de:0d:78:b9:82:39:fd:
c2:55:63:12:1d:ab:4a:5b:8c:f5:55:e3:6f:6f:2c:
7e:2c:1f:66:66:87:3e:f8:2a:52:a2:ee:4a:5f:84:
a7:c9:9b:e9:62:f8:9b:80:4e:75:4e:72:cd:a2:08:
00:0a:71:33:e5:01:a3:56:16:9c:3c:a7:63:75:84:
3b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B3:E8:7B:44:99:54:65:60:19:FF:4E:AD:59:D8:99:9A:B7:DC:0E
X509v3 Authority Key Identifier:
keyid:34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:82:39:6a:c4:4d:4e:82:a6:ee:e4:2e:05:96:9b:c7:49:1e:
49:14:a8:40:97:f0:27:57:09:68:65:84:cd:97:c0:15:9e:05:
0b:a9:2b:77:5a:77:4b:1b:bd:0f:eb:15:c7:e7:59:12:06:68:
75:ea:55:82:67:b7:19:e3:1a:1e:73:07:34:ff:e0:7b:50:bd:
9b:59:45:08:15:db:54:3d:05:bd:11:97:2f:50:10:84:a3:be:
fa:5b:28:1d:33:be:95:da:67:02:84:b3:9e:7f:25:9e:5c:ca:
07:24:8e:8b:5d:0d:00:fc:51:6d:2f:6a:48:d4:50:7c:9c:a3:
3c:34:eb:5c:70:af:a3:99:b2:08:06:04:46:a6:5a:09:61:9a:
ff:4d:fd:ff:47:f4:ec:6a:f5:87:98:96:a4:38:66:12:2f:b3:
7f:08:18:cb:2d:c8:31:07:44:e0:8a:be:7b:bc:23:75:7b:30:
33:cd:41:01:d0:8b:1a:e6:0a:9c:a7:ea:98:4b:8a:5e:87:90:
a8:a6:3e:30:77:64:a7:95:37:df:fd:62:b4:64:7b:b6:61:a7:
77:c3:38:4e:74:bc:a9:68:45:70:5a:5e:e8:18:d5:07:21:e1:
f1:7c:b3:47:ca:24:dd:c6:c8:24:b0:9e:64:14:3a:26:34:10:
90:5f:6d:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plwTglgQkNMEE5h8cQkRCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZTExMGI1OTM2MmY2NzNlYWUzM2I2NmVlN2FlYTNjNDAy
ODI5NGUwHhcNMjYwMzI2MTAwMDU2WhcNMjYwMzI3MTAwMDU2WjAzMTEwLwYDVQQD
Eyg1ZmIzZTg3YjQ0OTk1NDY1NjAxOWZmNGVhZDU5ZDg5OTlhYjdkYzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63sMgHH6sbDpP0WLZRY8b9aO9+Cc
4gnNB+4qkKNNO4SFOFFUayeFqLWb5EmCmgaEjRy1uzZkShH5ELsqxvoJo/uBqtgo
3h8jeLQXYjBfrt/XeaWi/emiEU6h+dwR9npaggtWYqvs3KPzD9Kqrhf/BUxLRUrT
36aePbc2/wktxy+0jvtA89jc98NzGspldu+XfEAjF+87nXA7hYuEvv1ZxQzHHex4
c1fNPFgie4BwWeYD04rNXmHGgoBk7d4NeLmCOf3CVWMSHatKW4z1VeNvbyx+LB9m
Zoc++CpSou5KX4SnyZvpYvibgE51TnLNoggACnEz5QGjVhacPKdjdYQ7lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+z6HtEmVRlYBn/Tq1Z2Jmat9wOMB8GA1UdIwQY
MBaAFDThELWTYvZz6uM7Zu566jxAKClOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk9FUXRaTmk5blBxNHp0bTducnFQRUFvS1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wYmY4ZmItMTYwNC00Y2QxLTlkYTYt
MWJiMjdjNWQzOTdlLzEvTk9FUXRaTmk5blBxNHp0bTducnFQRUFvS1U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8wYmY4ZmItMTYwNC00Y2QxLTlkYTYtMWJiMjdjNWQzOTdl
LzEvTk9FUXRaTmk5blBxNHp0bTducnFQRUFvS1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAboI5asRN
ToKm7uQuBZabx0keSRSoQJfwJ1cJaGWEzZfAFZ4FC6krd1p3Sxu9D+sVx+dZEgZo
depVgme3GeMaHnMHNP/ge1C9m1lFCBXbVD0FvRGXL1AQhKO++lsoHTO+ldpnAoSz
nn8lnlzKBySOi10NAPxRbS9qSNRQfJyjPDTrXHCvo5myCAYERqZaCWGa/039/0f0
7Gr1h5iWpDhmEi+zfwgYyy3IMQdE4Iq+e7wjdXswM81BAdCLGuYKnKfqmEuKXoeQ
qKY+MHdkp5U33/1itGR7tmGnd8M4TnS8qWhFcFpe6BjVByHh8XyzR8ok3cbIJLCe
ZBQ6JjQQkF9tEw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:08:26 2026 by rpki-client