Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
File: NoBlGroGa0CEp-0g1_UgGyKWwZc.mft (raw, json)
Hash identifier: ZEeLxPtMXmvxcMiXanPTwYtMgW6c8356+Y/on1KYeA0=
Subject key identifier: AC:98:6E:80:87:D1:2E:80:39:E0:51:2F:BA:C8:74:84:1D:8C:BD:5D
Authority key identifier: 36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
Certificate issuer: /CN=3680651aba066b4084a7ed20d7f5201b2296c197
Certificate serial: 019F924841C9C3195A6093C5FE97C2FDA485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
Manifest number: 09E8
Signing time: Fri 24 Jul 2026 04:00:36 +0000
Manifest this update: Fri 24 Jul 2026 04:00:36 +0000
Manifest next update: Sat 25 Jul 2026 04:00:36 +0000
Files and hashes: 1: 4OrfC0gESmi91J763IQoNP33VaY.roa (hash: UOBol6M5aYlHh1KzK/jjTCQLc+/4wpm6CbL5n4iAyts=)
2: NoBlGroGa0CEp-0g1_UgGyKWwZc.crl (hash: /Q5ljicNx0tnb/PHjdanMot1lzupeCZXx9FqpnqV4CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:41:c9:c3:19:5a:60:93:c5:fe:97:c2:fd:a4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3680651aba066b4084a7ed20d7f5201b2296c197
Validity
Not Before: Jul 24 04:00:36 2026 GMT
Not After : Jul 25 04:00:36 2026 GMT
Subject: CN=ac986e8087d12e8039e0512fbac874841d8cbd5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:23:bb:51:7e:0c:6a:14:bd:61:e3:0e:61:47:
53:8e:bd:83:9b:53:5e:0a:3d:38:23:80:51:d6:4b:
57:f0:b1:7d:51:92:58:97:72:8c:f3:82:91:04:bb:
c8:35:21:5f:5b:9e:7b:44:8b:ed:46:3a:99:12:2b:
b1:9f:ec:63:83:94:51:0c:49:3e:e0:a2:f2:11:14:
3c:ce:b8:b7:16:29:b6:a1:f3:52:63:27:d2:2c:b1:
2d:9d:62:fb:95:1c:f1:0f:2c:97:69:8e:b7:f2:41:
34:f3:bb:1b:04:13:bb:0a:f8:34:f7:77:1c:2d:f4:
83:85:69:09:58:3e:09:a3:72:62:e0:a4:6f:84:b2:
dd:90:c6:f0:fa:c0:f1:b5:a5:94:10:63:79:0a:62:
79:55:1b:e2:90:1d:9b:07:f8:0e:b9:e1:13:5e:8f:
13:ad:38:85:32:dd:1b:8d:6d:6d:3e:fb:6c:06:65:
13:71:f4:f0:38:f8:4e:b5:7f:fa:a8:f6:ff:f9:71:
53:bd:ca:e6:dc:2e:d9:bb:b8:80:cd:9c:8a:25:dc:
92:6b:e1:1d:41:6e:27:43:cd:8a:42:a6:64:4d:b4:
af:40:92:e7:a2:e3:a2:0d:0d:31:a4:6f:39:97:58:
cc:07:15:57:5e:0a:f5:6a:30:11:6f:41:ce:1a:d8:
9d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:98:6E:80:87:D1:2E:80:39:E0:51:2F:BA:C8:74:84:1D:8C:BD:5D
X509v3 Authority Key Identifier:
keyid:36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:97:0b:89:85:fa:34:3b:cd:15:aa:4f:07:ec:ee:23:84:1a:
cb:56:4a:9b:f5:16:04:18:e9:b1:08:24:63:42:90:33:98:7c:
a1:3a:ff:cf:6a:75:6a:74:c8:e7:01:fc:3f:09:ef:fc:25:e2:
f6:bf:4c:be:75:9c:39:5c:e8:82:9d:d9:38:7b:4e:7d:88:16:
20:b4:65:47:a2:30:5f:cd:6a:61:f3:41:1a:b5:31:83:f1:de:
55:5d:e1:32:20:b3:68:97:a2:00:ee:e2:d4:8f:2c:0b:c5:fd:
3f:4f:ef:de:e0:52:8b:45:fe:66:b6:bc:87:60:28:de:93:8c:
f4:05:d1:a0:17:50:d1:1f:84:4b:ec:be:25:9d:1a:42:af:63:
6d:9a:42:3d:01:7e:19:d7:44:a5:d6:66:bf:dd:dd:7d:07:c2:
6a:dc:22:bd:4c:dd:7f:e1:2f:27:2a:2f:a8:0e:22:51:58:fb:
d5:57:1e:5d:f3:06:82:6a:52:8f:5e:10:da:dd:24:c3:a5:80:
2d:cb:e9:3e:9d:41:7c:93:66:61:de:c6:22:32:fd:7b:36:bd:
1e:c1:38:4c:ba:8f:ab:5d:87:41:22:08:af:9e:20:01:0d:0b:
e3:05:e3:00:70:c1:3a:26:fb:2b:2f:ae:a9:51:99:13:de:7e:
85:fb:fb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:22:59 2026 by rpki-client