Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft
File: NoTy9VGkNSosFNf45pMpqdxD_eA.mft (raw, json)
Hash identifier: 0ZZR8DMipUe11lYBUtabXoEYEBOrcrXEq2MFquudfRc=
Subject key identifier: 11:EF:4F:76:D6:D0:90:1D:09:9E:EB:3B:A2:58:0D:D8:E8:6A:7C:55
Authority key identifier: 36:84:F2:F5:51:A4:35:2A:2C:14:D7:F8:E6:93:29:A9:DC:43:FD:E0
Certificate issuer: /CN=3684f2f551a4352a2c14d7f8e69329a9dc43fde0
Certificate serial: 019D284DBA164204C719D5AE41A7B8AA4C73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoTy9VGkNSosFNf45pMpqdxD_eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft
Manifest number: 0488
Signing time: Thu 26 Mar 2026 04:01:15 +0000
Manifest this update: Thu 26 Mar 2026 04:01:15 +0000
Manifest next update: Fri 27 Mar 2026 04:01:15 +0000
Files and hashes: 1: NoTy9VGkNSosFNf45pMpqdxD_eA.crl (hash: w7joetJTe0FlDnHvE3eT0rGG3xWw2kcyvPYqe1BJQNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NoTy9VGkNSosFNf45pMpqdxD_eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:ba:16:42:04:c7:19:d5:ae:41:a7:b8:aa:4c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3684f2f551a4352a2c14d7f8e69329a9dc43fde0
Validity
Not Before: Mar 26 04:01:15 2026 GMT
Not After : Mar 27 04:01:15 2026 GMT
Subject: CN=11ef4f76d6d0901d099eeb3ba2580dd8e86a7c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bd:c0:6c:87:b8:4a:59:84:d6:cc:1e:69:03:
37:81:52:fa:c4:b6:b7:13:5f:b0:fd:f7:16:44:51:
4a:65:b1:a7:ad:5b:5f:89:58:7c:af:08:53:f0:7a:
7c:7e:dc:a3:20:36:95:6b:82:34:09:da:19:6b:42:
b1:3e:2e:58:cc:91:62:52:10:cc:2d:49:ba:c8:ff:
bf:e4:2a:28:08:e8:20:3e:81:ca:29:91:b2:4e:4a:
c2:39:7a:eb:e0:7b:50:7a:5c:9a:a7:23:46:5d:77:
d9:bf:39:dd:40:c5:a5:95:ad:dd:61:00:96:e3:92:
a4:c9:5a:87:1d:50:b2:cc:82:c6:c6:1c:e4:94:10:
ec:ee:59:9f:f0:61:7c:0c:4f:50:c4:d9:dc:2a:27:
ef:b5:9a:7f:5c:39:52:77:f5:d8:0b:45:c9:8b:b3:
f5:23:fb:fd:8c:13:af:09:5b:dc:54:9c:aa:db:ab:
32:b3:49:98:23:a2:cf:11:d0:49:fa:1c:99:de:45:
0a:0d:52:1a:28:b2:5c:87:5f:f3:7f:f0:5c:6b:42:
e9:39:1a:de:65:0c:7f:26:b2:51:36:1b:9b:4d:c7:
b6:f2:e7:0f:3c:fd:e4:33:ee:bd:ee:2f:83:3f:35:
ad:6f:cd:a3:21:8d:b7:d7:4e:e0:39:9a:bd:44:42:
8d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EF:4F:76:D6:D0:90:1D:09:9E:EB:3B:A2:58:0D:D8:E8:6A:7C:55
X509v3 Authority Key Identifier:
keyid:36:84:F2:F5:51:A4:35:2A:2C:14:D7:F8:E6:93:29:A9:DC:43:FD:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoTy9VGkNSosFNf45pMpqdxD_eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:6c:90:de:a7:b3:06:61:65:5a:3c:85:ba:02:15:f8:f7:a7:
9f:b3:e3:6d:fe:c5:08:f4:99:48:d0:8a:b3:7e:be:4c:b2:a5:
0e:23:ed:2c:65:8a:ef:4c:f2:52:08:73:37:5e:01:eb:d4:ed:
8b:8f:a7:e4:b4:57:dd:ff:d0:9d:5f:e1:9b:00:e1:fc:d3:50:
3a:11:05:fe:88:c2:9f:67:70:26:f8:6b:11:45:8f:75:48:fe:
6c:81:a3:01:ca:78:13:c7:d1:b0:c3:7d:6b:44:60:35:9f:ba:
4a:6c:4e:5e:dc:d8:45:6c:2f:15:16:42:cf:86:13:c2:42:b7:
c5:44:e6:6b:25:31:03:b6:01:6f:cd:ff:d3:b9:18:25:2a:da:
29:98:5c:5b:72:83:1a:b6:41:45:c2:51:61:81:68:6a:e6:81:
7d:72:82:91:2d:d3:b0:67:ba:5f:f2:32:ee:7c:4c:52:8d:0f:
bd:8a:3f:ae:77:b3:27:b7:4b:e4:fe:f5:e6:e3:16:0b:22:47:
24:a6:be:73:9a:da:6f:68:15:7a:e6:3e:b5:ca:a2:09:01:48:
65:75:21:40:51:a3:01:a7:4a:df:e7:24:34:40:6c:5a:77:45:
7a:49:c3:57:08:f3:17:c4:43:26:bd:1f:2f:bc:26:6c:3b:10:
01:9e:98:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:41:19 2026 by rpki-client