Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.mft
File: NOBtFKhPWbf99CyIEC5O3mbMseE.mft (raw, json)
Hash identifier: D44wD7S+D3Tuy0V0XwmED4zJtD+XknhslYKP3w2qv9Q=
Subject key identifier: 5E:05:30:CF:81:97:F4:1E:36:FF:60:CA:7F:F0:EE:EF:6D:1E:18:C0
Authority key identifier: 34:E0:6D:14:A8:4F:59:B7:FD:F4:2C:88:10:2E:4E:DE:66:CC:B1:E1
Certificate issuer: /CN=34e06d14a84f59b7fdf42c88102e4ede66ccb1e1
Certificate serial: 01A1DE710C0F16E83CB597F2EC6FF4E9D62C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOBtFKhPWbf99CyIEC5O3mbMseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.mft
Manifest number: 01EC
Signing time: Sun 15 Nov 2026 09:01:52 +0000
Manifest this update: Sun 15 Nov 2026 09:01:52 +0000
Manifest next update: Mon 16 Nov 2026 09:01:52 +0000
Files and hashes: 1: NOBtFKhPWbf99CyIEC5O3mbMseE.crl (hash: GB2SjtUHIEEshnETSoE9KIm6kBKxLHIDRztl9L9MY5k=)
2: f0k9PdW54aZnaOgufUpai3FHCL4.asa (hash: fGjE6UkpfoztTFVUEWxABwiZskKbhaDqlncTca4+x7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOBtFKhPWbf99CyIEC5O3mbMseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:0c:0f:16:e8:3c:b5:97:f2:ec:6f:f4:e9:d6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e06d14a84f59b7fdf42c88102e4ede66ccb1e1
Validity
Not Before: Nov 15 09:01:52 2026 GMT
Not After : Nov 16 09:01:52 2026 GMT
Subject: CN=5e0530cf8197f41e36ff60ca7ff0eeef6d1e18c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a8:12:ff:f9:df:d5:09:d0:94:ca:1f:68:a4:
f1:e4:44:f7:bf:d2:f4:3b:eb:d2:53:f6:2d:fa:5d:
53:4c:b5:94:a1:25:37:f6:6a:5d:e8:6d:01:31:e9:
e0:d3:f5:fd:4f:e4:8f:7c:88:c2:47:93:90:12:3e:
36:93:f5:2a:54:ab:c9:e1:0e:47:82:6a:61:d4:bc:
ec:43:35:aa:7c:fa:36:09:35:bc:93:8f:25:c4:6a:
71:8f:59:60:a1:d6:14:98:b8:fc:d3:32:ab:33:80:
1f:45:28:a7:19:dd:a4:96:b4:c9:68:d5:ec:04:9a:
95:b6:f8:6e:69:5d:2a:f6:be:5e:c3:e8:a0:81:cd:
a8:41:19:01:cb:46:7f:fa:f5:0d:73:b2:39:ca:7d:
ae:3f:c8:b6:de:9d:78:f4:7a:98:1e:fd:63:c9:65:
46:d0:d6:ce:09:2e:23:54:69:44:2c:5f:c7:da:9f:
f4:47:e9:c8:e1:f0:68:2d:98:77:b5:89:b4:65:16:
55:01:27:57:28:d8:79:94:d6:e9:44:f4:48:52:7f:
3b:e2:cf:45:a6:10:8b:01:17:fb:6b:da:2b:b2:ed:
98:6b:3c:5d:ff:da:02:f9:82:5b:b3:6f:20:25:fe:
b7:8e:e6:42:71:79:d2:1f:b8:f8:4b:0a:44:5c:fe:
28:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:05:30:CF:81:97:F4:1E:36:FF:60:CA:7F:F0:EE:EF:6D:1E:18:C0
X509v3 Authority Key Identifier:
keyid:34:E0:6D:14:A8:4F:59:B7:FD:F4:2C:88:10:2E:4E:DE:66:CC:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOBtFKhPWbf99CyIEC5O3mbMseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:da:8f:99:f2:0e:7b:7c:22:5f:1d:94:21:95:f9:01:db:8c:
38:4d:4e:3c:f0:37:93:8d:49:d7:5f:02:3a:93:91:ab:58:41:
16:c7:91:29:8a:52:41:98:a7:35:f6:fe:47:d7:8d:3b:dd:71:
d5:c8:fb:74:14:de:3f:9e:81:1b:fa:ea:98:2e:b5:36:38:9f:
77:fd:db:c7:d5:19:79:6f:a2:ee:d1:ae:54:2f:8c:29:80:1c:
e9:fc:b5:39:ae:40:1b:08:f1:04:6d:2c:52:95:14:5f:3d:28:
47:b6:ad:81:36:65:e7:1e:af:5c:ca:7c:5d:47:49:7a:9d:bb:
ea:c0:30:23:f1:26:bf:64:2e:02:b9:81:f9:b0:71:e1:19:01:
73:a0:3e:e0:a6:be:61:cb:bf:89:d3:f5:a7:8d:e5:b8:46:66:
68:72:c0:5d:40:a5:5e:a7:fd:7d:2a:f3:d7:27:da:22:92:6d:
54:5a:cc:9b:d4:af:35:66:64:f6:45:6f:a8:13:e1:82:b1:fa:
88:a3:e2:c4:4e:53:52:72:a4:c6:93:39:47:2d:6f:a7:ce:09:
42:f4:94:69:f1:f6:0b:ea:08:91:a8:a4:60:e3:f1:55:ff:0b:
3a:3c:71:48:72:b4:ad:75:d7:78:1d:c4:5f:d9:0b:87:f9:03:
44:11:22:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:20:33 2026 by rpki-client