Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e43db4-2912-48a1-a037-96c744e235b3/1/NOgf_EPqi7rcmDB4oZqtVHqJHaU.mft
File: NOgf_EPqi7rcmDB4oZqtVHqJHaU.mft (raw, json)
Hash identifier: gCH1MD8wNwCpGHN/SMmZVw5abX0YA/N99pGpBLxAkW0=
Subject key identifier: 57:44:B9:A3:17:38:53:92:07:04:95:E3:9F:B4:72:90:26:8D:19:97
Authority key identifier: 34:E8:1F:FC:43:EA:8B:BA:DC:98:30:78:A1:9A:AD:54:7A:89:1D:A5
Certificate issuer: /CN=34e81ffc43ea8bbadc983078a19aad547a891da5
Certificate serial: 019D27DF5F524CBB325D67A692F4CA89CD15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOgf_EPqi7rcmDB4oZqtVHqJHaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e43db4-2912-48a1-a037-96c744e235b3/1/NOgf_EPqi7rcmDB4oZqtVHqJHaU.mft
Manifest number: 018C
Signing time: Thu 26 Mar 2026 02:00:43 +0000
Manifest this update: Thu 26 Mar 2026 02:00:43 +0000
Manifest next update: Fri 27 Mar 2026 02:00:43 +0000
Files and hashes: 1: NOgf_EPqi7rcmDB4oZqtVHqJHaU.crl (hash: dBWFb16YkrE4XjhzhKEg5lQD4Z6YcS+/QWubB0CvlhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/e43db4-2912-48a1-a037-96c744e235b3/1/NOgf_EPqi7rcmDB4oZqtVHqJHaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/e43db4-2912-48a1-a037-96c744e235b3/1/NOgf_EPqi7rcmDB4oZqtVHqJHaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOgf_EPqi7rcmDB4oZqtVHqJHaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:5f:52:4c:bb:32:5d:67:a6:92:f4:ca:89:cd:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e81ffc43ea8bbadc983078a19aad547a891da5
Validity
Not Before: Mar 26 02:00:43 2026 GMT
Not After : Mar 27 02:00:43 2026 GMT
Subject: CN=5744b9a317385392070495e39fb47290268d1997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:89:a1:94:15:5c:51:7e:41:2d:4e:a8:6c:89:
62:cb:37:01:9b:6b:12:fe:9c:2a:4a:40:35:7c:11:
81:01:f8:9b:cb:52:c6:58:2e:d9:14:f2:69:58:e5:
e3:ab:eb:27:9a:d6:85:58:97:95:69:fb:67:96:11:
1b:cb:ce:db:c2:05:80:e8:01:7f:84:59:e3:db:77:
6d:de:09:ac:5c:04:08:73:92:03:4a:43:b0:be:c6:
b0:66:dc:a8:41:22:aa:f4:a3:6e:aa:89:83:b3:4c:
5a:00:b9:68:80:76:a6:ff:07:e2:e5:e8:e9:27:23:
01:e9:1c:5c:cf:5e:d3:ce:23:07:15:1c:66:30:c1:
74:45:d1:d3:0e:73:0d:1d:7d:e0:9c:ad:cf:f4:7c:
73:70:95:50:50:08:00:a6:90:75:d2:12:cb:c7:dc:
ed:62:08:27:38:6b:38:4d:fa:39:16:a1:68:85:83:
ce:bd:9f:f1:9e:6b:fc:85:dd:87:b6:92:b8:da:5a:
73:c8:db:05:56:43:ef:92:e4:81:fa:d7:7f:7b:e9:
34:01:99:a6:fe:36:e8:e5:eb:13:df:a0:7a:d7:3a:
c2:56:22:32:42:6b:3b:3d:89:6c:8d:71:21:1e:96:
7c:62:eb:75:97:0b:f6:71:8a:6b:e9:5e:4a:3a:d4:
72:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:44:B9:A3:17:38:53:92:07:04:95:E3:9F:B4:72:90:26:8D:19:97
X509v3 Authority Key Identifier:
keyid:34:E8:1F:FC:43:EA:8B:BA:DC:98:30:78:A1:9A:AD:54:7A:89:1D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOgf_EPqi7rcmDB4oZqtVHqJHaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e43db4-2912-48a1-a037-96c744e235b3/1/NOgf_EPqi7rcmDB4oZqtVHqJHaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e43db4-2912-48a1-a037-96c744e235b3/1/NOgf_EPqi7rcmDB4oZqtVHqJHaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a0:52:bd:d3:17:44:3b:a8:d6:4e:3e:71:db:f3:4e:9d:f7:
4d:42:f8:71:c6:c2:1f:83:72:59:b3:fb:33:30:a9:ec:a6:af:
fa:e3:d0:ad:22:a4:bf:c5:05:5e:5c:0a:ac:4d:b3:7e:39:fb:
81:00:fa:22:06:87:17:7a:de:d5:38:4d:e3:f6:d7:b2:8e:0d:
48:9a:72:a5:5a:f1:04:71:a2:be:4b:f2:cb:8e:ec:f6:b7:f6:
48:7d:fc:07:e5:90:56:bf:50:45:42:99:02:32:3d:f3:f2:34:
6c:fb:ed:b9:10:38:3d:ea:bb:81:0e:c7:a5:78:67:8f:e2:76:
41:cb:27:2f:a7:28:60:e6:21:fc:56:e0:d4:0e:fc:a1:0f:71:
2e:32:e2:88:ea:8c:93:06:59:c0:ca:a0:d2:56:82:a0:26:ed:
28:1f:38:09:55:58:13:5f:30:23:ff:ce:54:6a:4a:fb:eb:1e:
83:54:fa:eb:67:63:0d:58:8a:72:a3:bf:c6:06:77:7d:0e:cd:
5e:43:2a:b0:1b:67:d2:ec:8b:49:2b:27:b1:03:cb:0d:df:65:
7f:5d:17:b9:8a:ac:4c:69:bc:e0:f3:dd:c0:90:84:e0:9f:57:
d5:aa:88:63:36:15:e0:f3:33:33:f9:66:91:36:a0:3e:11:b7:
59:a9:5b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:28:25 2026 by rpki-client