Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.mft
File: NOBtFKhPWbf99CyIEC5O3mbMseE.mft (raw, json)
Hash identifier: K1vWvuDe2RSuE4QfpcfeUq5ch5mAsbQXmLsWpzNOzGY=
Subject key identifier: E3:A8:19:F2:D3:DB:55:14:80:D6:9F:77:5A:33:7D:CF:93:16:7A:9D
Authority key identifier: 34:E0:6D:14:A8:4F:59:B7:FD:F4:2C:88:10:2E:4E:DE:66:CC:B1:E1
Certificate issuer: /CN=34e06d14a84f59b7fdf42c88102e4ede66ccb1e1
Certificate serial: 01A15175ED9515D2A8A0BB5FDAE313DE8965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOBtFKhPWbf99CyIEC5O3mbMseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.mft
Manifest number: 01A3
Signing time: Mon 19 Oct 2026 00:00:45 +0000
Manifest this update: Mon 19 Oct 2026 00:00:45 +0000
Manifest next update: Tue 20 Oct 2026 00:00:45 +0000
Files and hashes: 1: NOBtFKhPWbf99CyIEC5O3mbMseE.crl (hash: 5Wa265qZQu1nzRjFsUBb+wSR/qH6TlyWdxrjhiXhfLg=)
2: f0k9PdW54aZnaOgufUpai3FHCL4.asa (hash: fGjE6UkpfoztTFVUEWxABwiZskKbhaDqlncTca4+x7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOBtFKhPWbf99CyIEC5O3mbMseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:75:ed:95:15:d2:a8:a0:bb:5f:da:e3:13:de:89:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e06d14a84f59b7fdf42c88102e4ede66ccb1e1
Validity
Not Before: Oct 19 00:00:45 2026 GMT
Not After : Oct 20 00:00:45 2026 GMT
Subject: CN=e3a819f2d3db551480d69f775a337dcf93167a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:25:fc:82:de:04:4a:3c:3b:ac:05:20:4c:b7:
12:62:7b:f0:51:21:1c:98:2b:84:60:17:f0:23:45:
54:93:c0:2d:e3:c5:b3:b0:57:99:50:70:92:21:5d:
11:86:fc:94:56:4a:5c:22:54:40:d4:31:7e:2e:8f:
7c:b9:8e:02:76:22:bd:04:18:96:2c:d0:ff:33:0a:
3f:73:4f:a9:c5:0d:28:0f:89:b3:11:28:80:00:d0:
68:a9:da:1f:0b:6a:fc:ed:7b:52:75:c7:ca:a1:8e:
da:74:6c:12:53:b2:dc:de:77:67:e7:b2:bc:b1:4c:
1e:44:ac:68:cd:c9:81:2c:52:f9:66:10:02:44:af:
b1:c2:f6:03:7d:49:a8:8f:63:90:04:2e:10:49:0f:
0b:47:e6:f2:f6:a8:11:ba:1f:e5:ab:8f:f5:6c:a3:
ae:c6:81:2a:2b:3c:a7:ee:a3:44:e0:28:6e:8d:85:
dd:e0:90:f0:a0:c6:1f:2f:03:e6:a1:c2:9a:52:02:
11:92:75:2e:1b:da:bf:3f:dd:bf:72:c9:bc:bb:04:
1c:b7:bc:ec:24:64:05:be:45:5e:5b:18:51:a1:0d:
9b:59:8c:2a:4a:84:af:5e:a4:ad:09:68:49:6a:bb:
4c:23:74:97:5a:f9:6b:44:c0:45:48:3d:6b:b6:88:
f8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A8:19:F2:D3:DB:55:14:80:D6:9F:77:5A:33:7D:CF:93:16:7A:9D
X509v3 Authority Key Identifier:
keyid:34:E0:6D:14:A8:4F:59:B7:FD:F4:2C:88:10:2E:4E:DE:66:CC:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOBtFKhPWbf99CyIEC5O3mbMseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:51:51:51:7b:28:f5:3f:7e:ae:21:9d:98:db:b4:e6:02:a6:
84:83:6c:1c:40:36:8c:60:54:c4:4a:99:5f:ae:e9:bc:84:22:
12:c0:d2:52:31:f0:d5:1e:34:20:04:64:9c:17:a1:94:8c:eb:
03:a3:28:f2:6d:49:5c:e1:16:99:94:b6:d6:6d:07:84:14:14:
88:37:e7:e4:59:bc:f7:da:ef:86:31:00:1d:45:c8:10:0e:70:
56:89:88:17:1c:4c:69:8f:22:5c:2d:e2:cf:74:c8:6d:ed:3d:
d2:58:c6:38:57:2f:bd:b2:11:a0:08:d3:13:c9:a5:fd:52:75:
2c:8f:97:fd:55:3f:5e:f0:98:fe:e3:f9:4a:16:2d:82:af:7a:
b8:6a:7b:ed:01:c3:c9:41:73:2e:91:07:99:76:b5:5a:b2:4d:
c9:d9:18:c2:42:10:cc:22:64:9c:a7:84:26:8c:45:64:98:59:
89:e6:61:1e:da:5c:fc:d4:e0:70:a4:ec:bc:34:79:21:e2:51:
72:fd:e6:92:e5:b9:aa:c2:55:a1:8c:19:79:c7:6f:f9:32:07:
c3:17:22:66:33:23:dd:93:be:56:8f:a3:2d:b5:86:8b:99:2e:
62:9e:eb:37:79:a3:8b:7b:5b:e1:14:b9:fd:0c:a4:77:7a:9d:
2e:c8:b4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 03:45:31 2026 by rpki-client