Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
File: NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft (raw, json)
Hash identifier: QV/H6iuSjMEIIlJ1d9+5bMhyrw2jbDphJHq3RfFdRAM=
Subject key identifier: 07:F1:06:73:82:2E:6A:76:04:62:ED:60:D2:A3:29:F9:4C:81:8F:D3
Authority key identifier: 34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
Certificate issuer: /CN=34e40348463c60ce9fc694060a37f4683093f045
Certificate serial: 019D24DF024233519B2A929FB37E76DF6BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
Manifest number: 0C6F
Signing time: Wed 25 Mar 2026 12:01:27 +0000
Manifest this update: Wed 25 Mar 2026 12:01:27 +0000
Manifest next update: Thu 26 Mar 2026 12:01:27 +0000
Files and hashes: 1: NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl (hash: LmlQjhvJ/yd2hXCwvmt/G6EDFOFO51NcQ9lsT81DX2s=)
2: ghpA5fCdi4-vZdLYzD8KSMnNUUQ.roa (hash: z5taojLfDf55uPGabR8q/HQ0BFw+j/KvT8vFcA5Y8Zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:df:02:42:33:51:9b:2a:92:9f:b3:7e:76:df:6b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e40348463c60ce9fc694060a37f4683093f045
Validity
Not Before: Mar 25 12:01:27 2026 GMT
Not After : Mar 26 12:01:27 2026 GMT
Subject: CN=07f10673822e6a760462ed60d2a329f94c818fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:98:97:20:23:96:5a:24:ab:14:04:6e:a7:78:
3c:ff:1b:7f:4e:2e:32:23:49:f0:06:c5:f5:b8:90:
6e:69:22:5d:25:ec:3e:d2:95:6c:fd:d3:35:1c:15:
17:d5:e9:8b:4b:3a:22:a3:81:f7:47:50:bd:dd:d1:
41:b7:d5:a4:20:9b:a0:75:83:51:25:4b:6e:b7:c0:
c6:11:3a:3a:cf:97:df:c6:88:0f:97:e6:ad:e7:f2:
01:17:c3:d7:a2:17:1f:f1:66:9d:1c:ed:37:8e:0b:
2c:c6:37:18:77:ff:70:93:9e:a5:46:3b:b7:17:c9:
5a:1f:17:0a:40:5c:fe:b9:30:6d:5e:28:50:e3:03:
e0:a9:5e:6c:79:5f:20:be:8a:6c:a3:b3:e4:8a:28:
0d:b8:84:3b:5b:44:9e:9f:3e:e2:cb:06:1f:6f:33:
fb:b1:e2:f1:52:68:fc:57:30:60:59:92:e4:57:c5:
1e:c8:6c:81:4b:71:bd:9e:d5:e7:05:7c:9c:2e:73:
8c:f2:e3:ad:fd:e9:e9:25:53:87:09:53:cf:0d:87:
81:41:25:97:48:8d:04:70:23:a1:bf:35:92:a0:5c:
a9:52:c3:3b:60:2d:de:2e:a8:96:c1:5a:2b:62:07:
4e:31:d2:b1:e3:4c:ee:b8:26:a2:71:0b:01:bc:48:
a5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F1:06:73:82:2E:6A:76:04:62:ED:60:D2:A3:29:F9:4C:81:8F:D3
X509v3 Authority Key Identifier:
keyid:34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:02:ed:70:4d:e9:9a:c5:04:65:2e:57:c7:25:bf:a7:ec:c6:
cb:c6:e7:ee:52:44:27:90:36:72:89:4a:59:8f:8f:6f:dc:64:
1a:ce:50:68:3b:5c:c9:d1:80:46:33:af:14:43:86:ed:46:b0:
d4:80:91:bb:96:32:a5:43:7f:ad:17:d2:8b:22:bd:7e:32:76:
ab:94:04:85:3d:f2:5f:18:9b:f0:bd:e9:ae:e0:2a:77:63:7c:
f6:f8:42:bc:74:01:05:5e:52:ec:ed:1a:fe:97:91:cf:f1:c3:
3e:ac:8e:93:c5:79:d5:55:2e:6d:d8:b5:46:93:57:2b:b8:7b:
42:1f:b3:1c:7e:5a:c2:82:8b:7c:23:0c:72:b3:62:89:a5:4d:
34:81:7f:1e:a2:cd:2f:e7:b8:c3:b2:1b:ab:f1:01:73:93:ed:
ab:df:42:f1:cc:7b:aa:53:ef:de:bc:ab:05:65:a0:1d:8c:d6:
e1:eb:24:f3:18:c7:85:d3:9c:31:fc:c7:bc:68:eb:c2:29:16:
1f:e7:4a:e3:21:66:5c:30:44:70:9b:9d:82:3b:69:48:64:9f:
5f:23:a8:2b:dc:92:f5:ce:92:44:87:5c:14:3a:95:09:7a:91:
10:05:99:b2:ce:8c:fe:51:06:9d:17:12:c9:26:2b:9c:f6:a8:
e7:03:43:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:17:51 2026 by rpki-client