Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/dad528-a6ba-4901-a73f-45ea9b8b6e89/1/no3TBFtnDAiRmNvNlSJ7p8UScP4.mft
File: no3TBFtnDAiRmNvNlSJ7p8UScP4.mft (raw, json)
Hash identifier: Y04bJnaMF5ByYhc3uwAihKnPYOxRWLYvTzVRHNaK7KU=
Subject key identifier: B7:44:26:C7:F8:FE:76:EB:A6:35:C9:0B:99:75:9A:0D:63:C0:19:C8
Authority key identifier: 9E:8D:D3:04:5B:67:0C:08:91:98:DB:CD:95:22:7B:A7:C5:12:70:FE
Certificate issuer: /CN=9e8dd3045b670c089198dbcd95227ba7c51270fe
Certificate serial: 01A0D34AC0C1A9950D6FFE24680E844BB98A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/no3TBFtnDAiRmNvNlSJ7p8UScP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/dad528-a6ba-4901-a73f-45ea9b8b6e89/1/no3TBFtnDAiRmNvNlSJ7p8UScP4.mft
Manifest number: 08
Signing time: Thu 24 Sep 2026 12:01:26 +0000
Manifest this update: Thu 24 Sep 2026 12:01:26 +0000
Manifest next update: Fri 25 Sep 2026 12:01:26 +0000
Files and hashes: 1: lr5pPhXtC_CqPrNuogf4lkr9PRk.roa (hash: lEm6/EmaZxK7xXQjs0gL6QBNZccCJ9C/Et7XzH7k124=)
2: no3TBFtnDAiRmNvNlSJ7p8UScP4.crl (hash: 1xfBaZDySkWRdSmioKVUP88StkChwFjI2/VwbmOD1LI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/dad528-a6ba-4901-a73f-45ea9b8b6e89/1/no3TBFtnDAiRmNvNlSJ7p8UScP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/dad528-a6ba-4901-a73f-45ea9b8b6e89/1/no3TBFtnDAiRmNvNlSJ7p8UScP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/no3TBFtnDAiRmNvNlSJ7p8UScP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:c0:c1:a9:95:0d:6f:fe:24:68:0e:84:4b:b9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e8dd3045b670c089198dbcd95227ba7c51270fe
Validity
Not Before: Sep 24 12:01:26 2026 GMT
Not After : Sep 25 12:01:26 2026 GMT
Subject: CN=b74426c7f8fe76eba635c90b99759a0d63c019c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ac:68:e5:e1:4a:1e:28:04:18:c4:b1:4c:35:
3b:39:15:a1:bd:fe:c1:3b:10:3e:a7:72:6e:b1:fc:
97:67:33:57:bc:ab:28:f8:05:ff:3d:06:75:82:c4:
2b:e5:f4:c7:ec:1e:90:bb:c1:e9:83:3d:63:fb:20:
92:88:57:1f:3b:70:18:aa:0d:71:1f:5e:4a:34:26:
5c:32:0a:4f:de:88:e4:14:89:8f:4c:d8:39:9b:57:
cd:78:71:b2:f0:1b:c5:8d:ee:18:5d:f1:42:3f:66:
0c:7b:85:99:02:ea:10:06:33:65:51:c0:ef:d8:d4:
ae:21:aa:4d:5f:d2:3f:06:2a:ae:33:f7:28:c6:d0:
ef:b7:2b:cc:2a:57:57:25:fe:8c:a9:3c:28:a8:c8:
8e:0e:1e:85:93:e9:3b:cf:27:44:0b:bd:e9:f4:49:
4e:85:7c:8d:03:d3:ca:a8:d3:84:f1:1e:9d:31:29:
81:10:b8:e7:c1:a8:55:b5:44:94:36:da:c4:86:83:
c8:74:6b:df:7c:af:bd:fe:b4:12:25:69:32:fa:1a:
6a:5c:dc:ff:7c:ad:76:a9:32:ee:8e:f0:32:19:3a:
62:9a:8f:3d:be:1c:b0:d2:14:1d:ac:90:71:06:d0:
8d:05:e2:d6:88:d3:e2:98:99:78:d3:ea:68:23:4d:
6a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:44:26:C7:F8:FE:76:EB:A6:35:C9:0B:99:75:9A:0D:63:C0:19:C8
X509v3 Authority Key Identifier:
keyid:9E:8D:D3:04:5B:67:0C:08:91:98:DB:CD:95:22:7B:A7:C5:12:70:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/no3TBFtnDAiRmNvNlSJ7p8UScP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/dad528-a6ba-4901-a73f-45ea9b8b6e89/1/no3TBFtnDAiRmNvNlSJ7p8UScP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/dad528-a6ba-4901-a73f-45ea9b8b6e89/1/no3TBFtnDAiRmNvNlSJ7p8UScP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:eb:eb:19:75:4a:d6:6e:17:dc:97:b9:00:48:89:80:40:94:
70:31:d0:65:02:af:03:13:7d:97:b9:b8:90:85:60:69:77:ca:
2f:09:fd:99:8b:62:7f:36:6b:a3:76:7a:ca:96:20:f2:2d:b4:
23:db:60:2b:0c:1e:55:f9:a8:08:bb:b2:78:59:41:70:a8:e3:
d7:ec:af:54:31:2c:3c:c4:b4:d0:2f:a7:d3:ca:8d:c8:d6:21:
e7:01:a3:83:b8:0d:87:ee:09:56:cb:9b:77:62:62:1d:73:3e:
0b:71:47:78:a8:2e:ce:64:f7:2f:08:c6:a9:28:8a:a8:c6:82:
9c:4f:84:52:94:29:27:93:33:d6:89:d6:4e:b9:8b:da:f0:72:
5a:2d:1d:4f:dc:77:14:6c:1a:db:7a:fa:19:03:1b:76:94:a5:
74:7f:15:8d:21:0c:18:7f:e6:02:72:cb:7d:82:03:cc:f4:3d:
8f:cf:38:c4:c0:ed:34:0e:2c:30:de:0d:f4:ca:b5:34:83:60:
fa:b7:68:69:fe:76:e3:90:a3:74:c3:05:91:88:95:ef:39:2d:
1e:3b:72:da:d7:d0:65:b1:90:17:30:ab:8f:f5:e6:e6:43:92:
46:23:aa:a5:78:72:0c:b4:62:d8:48:c6:c0:1d:fd:39:fa:f5:
4e:e6:1c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:57:17 2026 by rpki-client