Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
File: NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft (raw, json)
Hash identifier: ZhPn5h2+2bxBiGBeincWD8vtppA9VKRzi/bsywhPd5M=
Subject key identifier: 83:EF:CB:29:F3:7C:C6:A6:76:90:E5:61:9B:B1:19:F2:1B:18:1A:C5
Authority key identifier: 34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
Certificate issuer: /CN=34e40348463c60ce9fc694060a37f4683093f045
Certificate serial: 019D382DFD908074E5D35830013F93E1F074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
Manifest number: 0C79
Signing time: Sun 29 Mar 2026 06:00:31 +0000
Manifest this update: Sun 29 Mar 2026 06:00:31 +0000
Manifest next update: Mon 30 Mar 2026 06:00:31 +0000
Files and hashes: 1: NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl (hash: q9aO+F9ihO5F+JoQ6ohkV0+tGrv2D9/O3H/JEwHPWAs=)
2: ghpA5fCdi4-vZdLYzD8KSMnNUUQ.roa (hash: z5taojLfDf55uPGabR8q/HQ0BFw+j/KvT8vFcA5Y8Zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:fd:90:80:74:e5:d3:58:30:01:3f:93:e1:f0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e40348463c60ce9fc694060a37f4683093f045
Validity
Not Before: Mar 29 06:00:31 2026 GMT
Not After : Mar 30 06:00:31 2026 GMT
Subject: CN=83efcb29f37cc6a67690e5619bb119f21b181ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cd:e1:4a:0f:d5:2a:68:83:27:c4:1f:6c:23:
3e:3d:2d:1e:9b:d3:01:b4:d9:93:ac:68:76:34:b3:
9d:93:ca:ba:ed:df:5d:37:65:47:36:12:01:6c:ef:
af:ff:31:e1:00:1e:cc:4b:e5:51:4a:b7:76:88:62:
e6:63:49:a4:f8:8d:29:76:20:e9:57:bb:21:24:d8:
da:00:39:5d:9b:8a:8a:9d:3c:fc:dc:ac:f9:55:96:
97:8c:59:f6:d7:df:72:6a:19:21:0c:80:4a:48:c5:
d8:59:43:ac:d9:78:dd:d1:67:0d:8e:ca:c8:77:6e:
d7:2a:e1:16:3e:95:dd:28:3b:c2:32:11:c2:92:e2:
37:57:0a:e8:75:fb:87:bc:5b:4e:62:b7:dc:11:34:
50:04:15:22:76:8e:be:66:b9:b5:bb:34:c0:b1:b1:
0d:28:c7:eb:c8:c6:d7:ff:15:22:a5:48:e8:47:7c:
14:07:af:41:4f:6a:fc:16:93:74:14:4a:a0:18:89:
90:f1:ec:c2:8a:a0:a4:12:8f:06:70:d5:c3:a9:87:
03:cf:b9:dd:ed:d0:c8:c5:fc:7b:cc:6f:cb:04:07:
bc:a4:bf:04:10:c9:e4:f9:bd:6f:24:3a:12:f0:43:
95:a5:28:59:c3:5c:14:f6:fe:ee:2e:b3:ed:b4:a5:
17:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EF:CB:29:F3:7C:C6:A6:76:90:E5:61:9B:B1:19:F2:1B:18:1A:C5
X509v3 Authority Key Identifier:
keyid:34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d1:e9:2e:d6:94:a9:d8:8e:5c:9f:08:af:ad:48:0d:c9:f2:
e2:8e:41:da:51:0c:10:1c:0a:db:6a:f3:e7:11:95:e2:20:ef:
f6:2a:52:f5:13:7b:57:5d:4f:0a:5a:6f:c4:90:df:9d:94:e5:
9a:c0:4d:6d:14:1d:40:d4:31:2e:9b:40:dd:49:ac:ba:13:2b:
15:ce:be:de:ed:d7:c7:53:c2:29:be:99:0b:5c:b7:13:6b:3d:
38:32:9e:9d:0d:ae:59:15:7a:d6:53:51:e6:d1:4b:92:e7:e8:
ff:17:f9:fd:1b:09:d9:28:0b:e8:e7:31:bc:b1:f5:ff:7c:65:
35:94:2f:7f:34:2b:ab:e4:a0:d5:88:32:73:01:02:f8:37:d0:
79:89:45:24:4e:98:e8:0a:a6:ac:0f:57:08:1e:9a:1b:16:fb:
cb:79:cd:90:19:b3:94:24:4f:c8:41:7c:ef:fb:0c:c8:20:88:
05:77:db:e2:96:af:fb:64:f0:74:70:86:83:da:24:40:71:2a:
6a:6c:16:b9:6d:42:cb:0f:96:0f:9d:93:10:55:50:7f:cb:d0:
e5:38:1f:b1:ca:f1:42:b4:f4:62:e1:5c:2c:df:7b:b4:de:32:
7f:f6:28:4d:82:f5:02:5d:ee:7f:ed:0a:c2:c6:1e:0f:33:64:
45:83:4f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:26 2026 by rpki-client