Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
File: NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft (raw, json)
Hash identifier: CTnQh7vF5bLa/Vl/2i8Jyh2ni2IeRlUYSvo9VtHLvVs=
Subject key identifier: 6C:87:4E:37:17:DE:69:7F:FA:1B:12:44:85:71:30:28:09:AA:32:AD
Authority key identifier: 34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
Certificate issuer: /CN=34e40348463c60ce9fc694060a37f4683093f045
Certificate serial: 019E1C0FC245759880478E038605ADE49110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
Manifest number: 0CEF
Signing time: Tue 12 May 2026 12:00:55 +0000
Manifest this update: Tue 12 May 2026 12:00:55 +0000
Manifest next update: Wed 13 May 2026 12:00:55 +0000
Files and hashes: 1: NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl (hash: byFOhHENE9fQ/EkLpVnMfxm+E4wGRH0fEmY+67dwqaE=)
2: ghpA5fCdi4-vZdLYzD8KSMnNUUQ.roa (hash: z5taojLfDf55uPGabR8q/HQ0BFw+j/KvT8vFcA5Y8Zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:c2:45:75:98:80:47:8e:03:86:05:ad:e4:91:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e40348463c60ce9fc694060a37f4683093f045
Validity
Not Before: May 12 12:00:55 2026 GMT
Not After : May 13 12:00:55 2026 GMT
Subject: CN=6c874e3717de697ffa1b12448571302809aa32ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b4:97:44:19:5b:39:15:80:42:b6:60:9d:59:
91:da:82:5f:29:34:6e:b0:46:aa:cf:bd:7f:d4:16:
31:0c:b9:d3:09:fc:57:5a:6f:0f:44:db:5c:77:0e:
f9:c0:f0:44:2e:7d:fe:64:34:29:20:25:68:ab:07:
8f:83:64:f2:f9:6f:12:1e:7c:29:41:f2:c2:bd:b0:
8f:7e:e9:da:95:71:26:7d:5c:75:45:b6:34:de:da:
39:85:5d:eb:08:b5:e8:3d:c9:36:a8:f1:97:9e:3f:
10:88:d4:10:7a:fb:35:b0:c5:3f:fe:dd:79:4d:15:
63:40:8f:ad:ff:06:e5:16:4b:8d:17:a2:0d:1a:1a:
11:95:0d:94:04:e2:ac:9f:7d:47:88:b7:eb:02:23:
d9:7c:42:96:b2:8a:20:96:00:31:42:c3:98:eb:17:
b9:66:ea:77:a7:d5:d5:45:94:dd:ff:d2:58:24:34:
ca:27:5e:11:09:10:19:39:7e:7e:88:17:78:eb:ba:
63:f7:06:34:96:56:45:14:72:84:a8:dc:5b:6a:92:
a8:b7:cb:bf:de:31:ff:05:5f:af:1e:69:45:c2:52:
66:cd:19:fa:4d:ed:5a:b9:ff:a5:76:30:87:d9:db:
fe:a8:7c:0e:2c:c9:5b:ea:b9:e7:17:e0:cd:cb:b9:
a9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:87:4E:37:17:DE:69:7F:FA:1B:12:44:85:71:30:28:09:AA:32:AD
X509v3 Authority Key Identifier:
keyid:34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:33:7b:82:1e:12:cf:53:95:43:7b:2f:00:6e:d7:14:af:9d:
1a:7c:71:ce:33:eb:84:f4:19:0d:df:86:33:13:3a:d5:c9:36:
90:38:0b:61:58:9d:43:14:5d:aa:8c:6e:78:f6:d2:7d:04:ef:
40:2e:26:e8:6b:9e:ca:57:45:05:21:06:f1:88:5d:d1:a4:eb:
d7:00:0a:5c:2c:79:80:ad:ee:9b:62:16:a0:62:5e:2d:68:44:
8a:5a:fd:ad:b0:0e:1e:3e:0e:5d:fa:0c:3e:af:37:42:c5:74:
97:72:03:1f:da:ff:7d:10:79:98:e1:9d:81:02:6a:0e:c8:b7:
f0:f8:cb:5f:c0:6a:09:9c:11:b6:73:b6:1c:c8:fa:55:86:e5:
94:74:fe:94:24:c2:cd:12:16:74:bf:a5:92:52:68:53:bb:e7:
3d:18:72:e3:1c:97:8d:95:b1:62:6a:78:7c:cf:94:c5:42:43:
f1:01:a4:b9:61:04:cf:48:3e:90:70:74:52:57:92:ea:07:31:
22:55:ae:90:83:f8:94:fa:a8:4a:c1:41:73:4e:a9:90:aa:1f:
f8:20:85:a4:10:e7:82:b9:4c:02:45:b6:04:ee:5d:e7:d7:54:
55:98:bd:dc:7e:eb:4b:f5:cd:76:86:08:bb:36:fe:93:14:8b:
3e:85:6a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:12 2026 by rpki-client