
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.mft
File: NOBtFKhPWbf99CyIEC5O3mbMseE.mft (raw, json)
Hash identifier: OenWUScybaLIA+qWQsDr22fVr/NJTjDmyrgXVtc+rJQ=
Subject key identifier: E2:53:67:38:FB:86:54:93:72:64:95:73:7C:51:56:0C:EC:97:FB:04
Authority key identifier: 34:E0:6D:14:A8:4F:59:B7:FD:F4:2C:88:10:2E:4E:DE:66:CC:B1:E1
Certificate issuer: /CN=34e06d14a84f59b7fdf42c88102e4ede66ccb1e1
Certificate serial: 019F94DC2C999C57547665880FE1F25EEC55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOBtFKhPWbf99CyIEC5O3mbMseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.mft
Manifest number: BC
Signing time: Fri 24 Jul 2026 16:01:25 +0000
Manifest this update: Fri 24 Jul 2026 16:01:25 +0000
Manifest next update: Sat 25 Jul 2026 16:01:25 +0000
Files and hashes: 1: NOBtFKhPWbf99CyIEC5O3mbMseE.crl (hash: Xh0h3Rqm75Lz+i0TarPKGOh1uPj3LtMsnLxkyaUW8hU=)
2: p3aajzYyQBOL8_heQYtjgnkd4Rg.asa (hash: 7giw4YhEVVO6j0oSzpKw/4x3FTNih2DtbMv5u0hQCU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOBtFKhPWbf99CyIEC5O3mbMseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:dc:2c:99:9c:57:54:76:65:88:0f:e1:f2:5e:ec:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e06d14a84f59b7fdf42c88102e4ede66ccb1e1
Validity
Not Before: Jul 24 16:01:25 2026 GMT
Not After : Jul 25 16:01:25 2026 GMT
Subject: CN=e2536738fb865493726495737c51560cec97fb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2e:a7:8d:51:bb:03:48:0b:21:51:f3:4c:b6:
21:39:86:c7:94:ec:b2:67:68:5e:53:0f:bd:57:f8:
f6:63:49:76:69:b3:d0:71:86:ad:8e:72:f9:31:70:
84:86:8e:8b:bd:7c:21:9d:94:1d:61:34:8b:ce:21:
0e:33:af:e0:2c:37:2b:16:32:64:e0:75:ba:7b:73:
0b:10:e2:1c:f0:ef:a5:cf:f2:aa:a6:df:6c:d6:a6:
36:fe:15:d8:a7:ea:4e:24:e3:9f:02:9a:e1:14:3c:
21:1c:99:a0:83:f3:71:1d:fe:17:08:38:af:2c:41:
bf:9e:bc:8d:db:8d:92:ec:51:a9:c5:e0:0c:70:12:
89:76:7b:71:85:ab:ee:9e:3e:fb:ce:ce:d9:a4:38:
73:2a:c8:83:66:a9:4e:e4:92:04:d2:39:3f:a2:9c:
30:fd:a2:f5:37:4c:8b:5c:b3:80:76:f5:99:64:76:
b0:52:6a:bb:ea:55:6b:0e:30:76:f9:3e:34:e7:d9:
fd:75:a8:36:c3:82:b7:2e:b0:3d:ff:63:e9:35:08:
dc:da:79:13:65:c5:7a:c4:aa:a3:88:25:38:5c:bf:
d0:47:be:4a:bc:df:81:d2:5a:6f:e3:bb:ee:ce:76:
16:51:8e:47:c2:63:97:51:b6:51:1e:54:63:90:87:
a9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:53:67:38:FB:86:54:93:72:64:95:73:7C:51:56:0C:EC:97:FB:04
X509v3 Authority Key Identifier:
keyid:34:E0:6D:14:A8:4F:59:B7:FD:F4:2C:88:10:2E:4E:DE:66:CC:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOBtFKhPWbf99CyIEC5O3mbMseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:51:c9:51:04:06:43:72:75:66:95:a3:d7:2a:37:d5:9d:b7:
ba:e8:71:9f:f9:2a:2d:4b:22:8f:51:a0:23:e8:2a:4a:57:f0:
aa:cc:3e:37:f1:f4:87:09:a5:f4:17:e4:31:98:8c:20:e8:88:
b0:19:8b:cd:d3:bb:6d:3a:66:e3:22:84:e7:b9:51:00:e9:41:
61:e1:6b:29:54:5a:58:74:f4:ec:3a:c2:a9:ec:6d:6e:ba:45:
b0:1d:da:53:e6:6e:7a:b9:4b:a1:e8:ef:a2:44:1c:70:1c:e8:
4e:05:43:5f:5c:73:dc:f8:84:83:80:d1:99:e3:9f:d7:40:57:
d2:33:48:c4:7e:1c:56:03:e4:54:e0:8d:15:93:ef:90:4d:66:
ec:ba:88:82:da:c6:35:1e:f9:d7:39:a7:e9:cd:e1:09:42:66:
2d:42:dc:5d:04:6d:e9:cc:4b:d4:01:7e:b3:e5:d1:6f:9a:5c:
ee:b2:87:5d:28:2b:a0:1f:28:4d:4b:db:aa:8a:22:9f:2a:42:
75:97:16:dd:9d:4d:09:29:1e:49:f3:e9:73:ad:ca:71:a7:e0:
8d:7f:1f:1b:f4:8a:40:ad:a4:6c:a1:f0:06:ef:c8:ff:5b:fe:
8d:c1:48:ef:b6:63:b2:4e:01:96:00:8b:de:a1:2b:16:e3:ef:
05:3d:c4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:23:59 2026 by rpki-client