Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
File: NoBlGroGa0CEp-0g1_UgGyKWwZc.mft (raw, json)
Hash identifier: cQupzj3pbtN56SAdknWfZnUUCqU6zS2yLKTx9YdUE24=
Subject key identifier: AF:D2:1F:17:70:C7:92:40:E5:ED:C1:3B:46:B4:C7:87:CB:37:6B:81
Authority key identifier: 36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
Certificate issuer: /CN=3680651aba066b4084a7ed20d7f5201b2296c197
Certificate serial: 019F943773CE89033EB12698BCF558E973FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
Manifest number: 09E9
Signing time: Fri 24 Jul 2026 13:01:29 +0000
Manifest this update: Fri 24 Jul 2026 13:01:29 +0000
Manifest next update: Sat 25 Jul 2026 13:01:29 +0000
Files and hashes: 1: 4OrfC0gESmi91J763IQoNP33VaY.roa (hash: UOBol6M5aYlHh1KzK/jjTCQLc+/4wpm6CbL5n4iAyts=)
2: NoBlGroGa0CEp-0g1_UgGyKWwZc.crl (hash: 7HdwIxAFhVWy5cjDhAw0DFk5byhbSaMtrgbjb3YM8Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:73:ce:89:03:3e:b1:26:98:bc:f5:58:e9:73:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3680651aba066b4084a7ed20d7f5201b2296c197
Validity
Not Before: Jul 24 13:01:29 2026 GMT
Not After : Jul 25 13:01:29 2026 GMT
Subject: CN=afd21f1770c79240e5edc13b46b4c787cb376b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:24:17:fc:da:39:40:ae:dc:e4:f9:99:1b:b7:
c2:53:c7:c9:38:c5:49:75:18:91:e0:4d:d7:2d:1a:
91:62:94:82:d2:f7:0b:c1:b9:4f:5c:2b:35:a9:42:
8b:25:ac:b4:3b:51:eb:57:c3:92:db:86:8c:13:e5:
8c:bd:97:2f:49:cf:a2:5a:94:72:f0:b6:64:5f:b0:
1f:f9:b3:e3:6d:90:12:eb:7e:c7:46:6a:4a:e5:0c:
fd:42:4a:f8:99:ac:8f:c2:9e:e1:21:ea:e5:b4:df:
54:4a:0f:23:be:a6:04:e2:fe:f8:8f:6b:97:6f:95:
05:e5:51:8c:fd:0e:84:11:15:f2:f2:b2:e5:80:4f:
a7:fb:2f:4d:bc:61:6e:1d:d6:1c:f4:bb:ab:1d:2f:
be:f9:6e:dd:16:11:66:fe:dd:3f:f2:26:85:bf:ae:
32:74:90:4f:46:60:a5:5d:be:98:63:e4:b9:05:fb:
90:d3:28:61:9c:5c:ff:90:f1:78:9c:1f:3e:6d:e9:
0d:2c:9e:e5:04:0d:a2:48:fb:4e:1e:25:13:fc:7a:
a1:e0:e3:e0:ae:c8:bf:bd:21:53:ff:d0:8b:47:a3:
d9:77:ea:c7:98:88:dc:bb:5b:76:53:ce:9f:bb:7e:
32:08:3c:1f:06:42:71:fa:22:d1:73:07:9f:48:be:
a1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D2:1F:17:70:C7:92:40:E5:ED:C1:3B:46:B4:C7:87:CB:37:6B:81
X509v3 Authority Key Identifier:
keyid:36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:cb:90:e4:e3:c8:f9:64:25:ae:d2:d6:1a:16:cc:ee:5f:02:
dc:c2:58:7a:20:b8:05:12:6c:5d:01:6b:8c:f5:bc:ac:ef:2b:
8a:25:ec:5a:a0:84:a1:0d:0b:e3:86:74:f6:e9:6a:9f:33:65:
f0:45:34:5e:ee:cd:5a:62:f5:cf:b3:50:41:6e:72:71:2d:fa:
9b:a1:1a:7f:fc:34:42:9f:2f:e8:5a:d0:ff:ba:14:cc:9e:a8:
e5:1f:0e:01:3d:bd:0f:e2:d3:27:92:69:12:5c:e4:ec:44:38:
5e:83:c4:f5:44:b6:7e:51:79:d8:b7:69:67:ef:1f:a6:c4:a9:
b5:36:69:1f:76:c2:63:37:39:23:bf:01:9b:28:cd:24:c4:1b:
84:4e:e6:67:34:12:be:aa:1c:d3:9c:63:fc:9c:ff:3d:cb:5c:
9d:e2:61:ee:2a:6f:82:f6:db:56:85:d0:63:ee:de:b3:7f:e0:
25:90:f8:3a:a0:a9:5d:38:8a:90:5f:67:c1:d6:ea:4f:bd:89:
ce:2c:09:a5:28:39:17:39:ee:c6:58:ee:70:8b:11:f3:51:59:
04:06:55:2b:04:9f:a4:32:c3:8a:91:89:7c:72:dc:9e:7a:b4:
aa:d8:8a:3f:d2:dc:1b:fc:c9:7d:0a:9e:77:9a:69:12:a2:77:
62:0d:32:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:18 2026 by rpki-client