Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
File: NoEciv-vsKwfX39v97ZLtwNGRX0.mft (raw, json)
Hash identifier: MfQmRNuzmwrclf1AD33t5RW4HVnwWO2EqSc3Dntwh70=
Subject key identifier: DC:3A:12:C7:BF:11:D6:9F:8C:68:4B:46:11:36:7B:59:57:9C:58:F5
Authority key identifier: 36:81:1C:8A:FF:AF:B0:AC:1F:5F:7F:6F:F7:B6:4B:B7:03:46:45:7D
Certificate issuer: /CN=36811c8affafb0ac1f5f7f6ff7b64bb70346457d
Certificate serial: 019D38D32DFDCE583E8D7F012DDDEF2DE797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
Manifest number: 0A41
Signing time: Sun 29 Mar 2026 09:00:57 +0000
Manifest this update: Sun 29 Mar 2026 09:00:57 +0000
Manifest next update: Mon 30 Mar 2026 09:00:57 +0000
Files and hashes: 1: Ac4l1p_bZl-wINdkBGjJK6t5WOA.roa (hash: mExfVg4mEZkQfa/o53ZXrQKDJoTaHqGKP/mA0/Gw99A=)
2: NoEciv-vsKwfX39v97ZLtwNGRX0.crl (hash: 0yRY6PUmpJLvhgBQBdkuo2SXfoDpvM0NHQoB7NVrDQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:2d:fd:ce:58:3e:8d:7f:01:2d:dd:ef:2d:e7:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36811c8affafb0ac1f5f7f6ff7b64bb70346457d
Validity
Not Before: Mar 29 09:00:57 2026 GMT
Not After : Mar 30 09:00:57 2026 GMT
Subject: CN=dc3a12c7bf11d69f8c684b4611367b59579c58f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:eb:00:cd:a1:b7:b8:76:b4:16:15:9e:8a:5a:
83:48:e0:a7:6a:25:f2:58:07:f9:45:ef:f0:b2:da:
a2:e1:fc:d3:4a:05:0e:94:78:96:f4:53:e2:ca:45:
42:91:1f:4b:6e:7f:32:1f:54:45:1f:24:ff:81:4b:
d5:69:81:21:00:ed:e6:22:be:51:29:8f:f6:77:e2:
36:cf:f2:00:ef:2c:50:eb:95:63:af:98:1f:5f:d4:
5f:0f:91:79:0c:4e:83:60:47:ab:e7:54:64:e8:b5:
de:89:92:07:7d:37:56:53:09:bd:98:1e:6f:3a:b6:
cb:47:05:80:08:9d:cc:39:04:02:3e:2b:b3:32:25:
50:69:83:7a:50:3b:1c:b6:a7:84:45:a1:25:66:b8:
58:1d:1b:6b:99:a5:63:bf:84:e0:e7:d3:fe:9a:00:
66:40:12:86:59:33:c5:01:80:9d:85:3d:5d:94:75:
06:ad:46:de:8e:55:2c:a6:65:8b:59:d0:90:04:d4:
ac:5a:2a:6b:7d:2c:83:b6:c8:c5:b7:a5:c0:d0:a6:
fb:21:4d:45:cc:48:50:fd:2b:9d:f4:77:12:e6:8c:
e0:57:5c:96:03:5f:2d:63:4f:f3:1e:39:68:d7:75:
75:db:cf:88:77:5a:83:d8:71:99:c7:6a:99:6e:80:
63:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3A:12:C7:BF:11:D6:9F:8C:68:4B:46:11:36:7B:59:57:9C:58:F5
X509v3 Authority Key Identifier:
keyid:36:81:1C:8A:FF:AF:B0:AC:1F:5F:7F:6F:F7:B6:4B:B7:03:46:45:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:99:67:8f:eb:e6:ad:fe:8a:54:9e:b4:bc:bc:e4:14:51:b8:
46:70:7d:cb:b9:7e:c7:a4:f5:05:c3:ac:40:cf:c7:5b:c2:f1:
e9:c8:c7:cc:fa:3c:41:23:4f:63:d0:17:12:5f:80:83:6f:26:
45:55:75:5f:d5:2b:f6:44:8c:a5:17:05:fe:19:fa:74:34:ea:
0b:8b:ca:9e:db:44:bf:e2:ac:16:73:7a:e8:b8:96:85:8e:b6:
da:c9:a5:1b:cf:98:d9:ce:dc:36:73:15:8c:07:39:16:57:e7:
5c:67:44:d3:5a:98:bc:cd:2a:7a:50:da:4d:c0:55:c2:f0:b0:
a6:27:94:0e:cd:bd:54:83:0f:5f:cf:3a:c6:6d:43:76:08:c4:
fc:36:58:8a:0c:b5:49:cb:f0:6b:17:3a:41:8e:05:3a:07:a4:
2f:4c:d9:cc:19:ee:aa:d6:d4:39:e0:2c:83:ff:be:10:ca:b5:
d5:95:09:33:10:6e:50:fc:4c:ba:7c:1b:8c:c6:59:a3:3c:25:
37:8d:0f:4d:dc:1f:72:50:12:68:98:6f:bb:88:cd:1e:d3:c5:
e9:40:5c:19:fd:79:6f:de:e4:19:0a:f8:75:55:b3:46:bc:c8:
63:b8:1f:a1:ea:03:28:b4:98:db:4b:5d:a9:c2:8f:9e:c6:50:
96:b5:f5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:15 2026 by rpki-client