Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
File: NOg_QeXSQlTJCobjsrt6gK8DlyE.mft (raw, json)
Hash identifier: JGlZc46L7z2+GQNYGyN2sZPeOTRuo6L08l9n9nQnj+U=
Subject key identifier: D0:6C:68:14:4D:BB:66:CD:B0:FA:69:E3:EB:A5:93:74:F0:B3:51:F9
Authority key identifier: 34:E8:3F:41:E5:D2:42:54:C9:0A:86:E3:B2:BB:7A:80:AF:03:97:21
Certificate issuer: /CN=34e83f41e5d24254c90a86e3b2bb7a80af039721
Certificate serial: 019D2771BFAF890E64C200C3EF7769472AD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
Manifest number: 171A
Signing time: Thu 26 Mar 2026 00:00:59 +0000
Manifest this update: Thu 26 Mar 2026 00:00:59 +0000
Manifest next update: Fri 27 Mar 2026 00:00:59 +0000
Files and hashes: 1: 7LLie0DeHG282OERB_LWP0JeCm0.roa (hash: SMK15rz3Hj/SmmxxmBAEgvdYYQjWQf8IMkbvZ+tYBlU=)
2: NOg_QeXSQlTJCobjsrt6gK8DlyE.crl (hash: V3kmB3NEA0jcL3PisTncquxwDJcc8xQPx/5DCYIX3Rk=)
3: Vy7BMpJqoZuVvWR4mEN_bNvm9dM.roa (hash: rY6uJJwF9xIMyt0dN926zSvzL2uJcZ2tadxHonT2i4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:bf:af:89:0e:64:c2:00:c3:ef:77:69:47:2a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e83f41e5d24254c90a86e3b2bb7a80af039721
Validity
Not Before: Mar 26 00:00:59 2026 GMT
Not After : Mar 27 00:00:59 2026 GMT
Subject: CN=d06c68144dbb66cdb0fa69e3eba59374f0b351f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d1:43:67:2d:b6:d3:d6:e1:2d:c0:82:e5:1c:
da:a7:14:54:b7:f6:55:dd:95:1a:ab:0f:57:15:85:
76:b3:0e:71:18:4f:8d:b3:a9:30:04:b6:35:cf:0c:
d6:6b:f8:3c:12:68:73:26:37:77:3f:d6:9f:b8:be:
54:2b:1a:40:fa:21:91:36:b0:97:97:a7:4c:84:9a:
63:c4:e6:00:99:15:3e:04:7c:5f:d0:bd:16:3d:5b:
07:d7:58:18:2c:74:92:bc:a8:1a:c1:7a:21:c7:d6:
40:11:11:a4:f5:6e:69:43:4e:77:98:1c:4b:40:d2:
3b:89:fa:99:82:87:32:0e:1d:9d:59:bb:1b:3c:a5:
a1:4c:4a:3c:43:f6:80:ef:90:25:75:09:51:f0:db:
0d:25:b0:b3:2c:52:76:51:ec:57:dc:73:a9:12:75:
24:ab:10:75:31:72:db:7d:4c:fd:db:9c:e4:26:ca:
40:75:31:0b:83:22:3b:46:53:fa:a9:97:05:f5:83:
2f:a6:db:67:f3:52:b3:97:1b:b9:78:ba:e9:91:17:
a1:38:9c:d1:f9:62:61:95:ec:f3:eb:71:5b:27:aa:
95:34:c9:c1:30:4e:77:64:ff:02:ca:2b:58:3a:9a:
70:54:f0:3e:5f:6a:e1:50:a5:91:06:1a:f4:e9:64:
fb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6C:68:14:4D:BB:66:CD:B0:FA:69:E3:EB:A5:93:74:F0:B3:51:F9
X509v3 Authority Key Identifier:
keyid:34:E8:3F:41:E5:D2:42:54:C9:0A:86:E3:B2:BB:7A:80:AF:03:97:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c0:28:e6:c6:9a:1f:f2:ea:66:94:1e:b7:b4:ea:0c:20:c8:
42:0a:21:70:cb:9a:23:5c:3d:d9:e1:9f:11:3f:ce:ef:c0:c9:
87:2c:c5:1e:eb:4c:c5:ef:8f:5d:37:9e:f1:20:99:ec:9a:6a:
19:e8:e5:bc:ad:5c:04:18:4e:be:fe:1c:0b:90:52:90:c1:a1:
8e:f5:4b:14:95:76:19:6e:52:1e:ad:8d:84:f9:6c:b8:3b:7f:
fb:3c:8a:9b:40:a2:58:de:16:2a:93:1b:25:97:62:43:45:95:
85:93:86:fb:68:eb:03:4f:d1:30:83:94:18:34:93:13:8a:bf:
08:ff:3e:64:44:f1:24:3c:89:5e:cb:0d:1f:64:78:f2:50:05:
16:a8:c0:ac:77:a9:45:5f:e2:c0:42:87:75:48:16:48:4d:aa:
35:50:2a:9a:0b:4c:1c:4d:9f:f2:e5:16:a2:1c:51:b7:68:61:
52:7e:ab:b5:33:3c:21:ba:13:1c:fb:11:59:01:88:15:40:11:
ea:f6:5e:35:c7:67:c8:fb:d7:bb:02:2a:f6:30:4d:52:04:fc:
7b:16:24:5b:e7:1a:39:54:1e:09:74:b5:ea:eb:2c:46:97:d1:
4a:06:07:1f:96:d0:32:79:4d:69:8a:5f:56:23:18:cd:74:56:
ae:2e:0d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:18 2026 by rpki-client