Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
File: NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft (raw, json)
Hash identifier: lJ6Y/KVTOdebY6x+Iknm4AoF2nLZdEwgggT557XVeD0=
Subject key identifier: DF:87:81:94:BF:24:28:83:2C:C4:FC:70:82:A4:B4:30:ED:D6:76:10
Authority key identifier: 34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
Certificate issuer: /CN=34e40348463c60ce9fc694060a37f4683093f045
Certificate serial: 019EDD2E9A757E8BF5BA50090DDAC2FCCCF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
Manifest number: 0D53
Signing time: Fri 19 Jun 2026 00:01:19 +0000
Manifest this update: Fri 19 Jun 2026 00:01:19 +0000
Manifest next update: Sat 20 Jun 2026 00:01:19 +0000
Files and hashes: 1: NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl (hash: 2cipdyIH3khCO8BnXMMOtkHNH72wCVkts9LPyrVQAc8=)
2: ghpA5fCdi4-vZdLYzD8KSMnNUUQ.roa (hash: z5taojLfDf55uPGabR8q/HQ0BFw+j/KvT8vFcA5Y8Zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Jun 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dd:2e:9a:75:7e:8b:f5:ba:50:09:0d:da:c2:fc:cc:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e40348463c60ce9fc694060a37f4683093f045
Validity
Not Before: Jun 19 00:01:19 2026 GMT
Not After : Jun 20 00:01:19 2026 GMT
Subject: CN=df878194bf2428832cc4fc7082a4b430edd67610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:32:f8:e2:ea:25:1c:cf:2c:9a:3c:7f:5f:fc:
10:e0:b0:f8:9a:b1:95:3d:f9:ac:f4:f2:46:eb:f8:
4b:fb:ce:73:6f:47:49:2a:a6:09:68:88:d1:df:66:
30:04:ba:0b:ca:4c:84:3f:d2:63:0c:46:90:04:b0:
82:3b:6e:e3:d6:b1:37:c7:cc:38:a6:ec:58:f8:f5:
75:30:65:0f:1b:d3:7c:28:be:3b:a5:7e:25:7e:5e:
05:d8:43:51:ce:99:13:f9:9c:5f:6b:94:91:25:09:
a1:44:41:ea:c5:fb:40:ce:b4:47:df:6d:ba:68:4a:
5f:5e:4b:70:6e:e0:32:01:b0:36:78:8f:14:63:91:
6e:4f:92:7e:a3:1a:94:a8:6f:61:e2:e5:b6:9c:8b:
84:8f:c4:8c:5d:76:b1:33:ed:88:f0:ba:60:9c:3c:
e9:48:0d:64:cb:4c:63:18:29:bb:12:ca:f8:4a:5d:
4b:c7:91:86:89:d8:6a:0d:ed:3b:ec:45:1f:8e:b3:
43:38:f8:39:08:48:ab:8c:c8:2a:5f:49:77:e8:66:
80:a2:aa:c8:2a:ac:57:6a:38:3a:26:b0:ce:2d:a5:
aa:4a:1f:a8:0f:be:29:a2:44:08:3a:e4:88:b5:5b:
b5:06:ea:a9:48:18:f9:7a:21:5c:21:0f:51:ed:5f:
bd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:87:81:94:BF:24:28:83:2C:C4:FC:70:82:A4:B4:30:ED:D6:76:10
X509v3 Authority Key Identifier:
keyid:34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b6:3d:ee:b1:53:1f:b5:c5:7d:ad:12:70:d7:f6:b0:1b:82:
9b:ac:ac:f7:5a:c0:40:62:1d:19:9d:ee:7b:fa:d4:a1:c9:1a:
1b:e0:56:65:26:4d:5c:05:4b:7b:35:d7:7b:dd:6d:bc:ab:25:
0e:c9:a7:5f:cd:fe:27:bc:51:a7:9e:09:11:31:be:28:ab:a9:
0d:61:e6:5c:01:30:26:d8:7c:4e:ed:a3:8b:57:c8:81:fc:4c:
f0:46:89:dc:eb:5e:f0:7d:14:30:25:c7:68:66:1d:36:fd:7f:
37:d6:f6:7b:70:8e:68:48:00:57:b6:78:d8:2a:51:d4:0c:d6:
ed:14:3d:55:6d:8d:2d:72:49:f6:2c:45:95:29:87:ab:10:d1:
36:26:50:0f:9e:3e:a3:e2:07:b7:2a:2a:4e:65:d5:4e:4d:3a:
b9:13:fd:b3:1e:ba:a7:17:02:14:cd:74:f2:f4:a7:4f:d7:3e:
7e:ad:59:b7:2d:b9:7d:34:7c:bd:a5:ea:ee:d9:4a:10:ae:c3:
23:5e:8c:b8:73:95:21:0c:c4:71:26:4e:44:03:4e:e5:18:f7:
35:39:ec:7d:8c:e0:54:64:54:ec:da:cb:43:91:d2:e4:0d:54:
ce:26:bc:50:c5:c8:fa:7e:34:18:4a:bf:43:b8:28:6b:15:fe:
07:f2:59:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 03:34:37 2026 by rpki-client