Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
File: bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft (raw, json)
Hash identifier: zCUTVJ2ndMIloimMhL/6X/gnuNbKyfEMnmOsm99zbMg=
Subject key identifier: EA:3D:1E:18:AA:9C:57:AB:F6:7E:6A:32:59:A2:EF:4A:56:B1:E8:22
Authority key identifier: 6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC
Certificate issuer: /CN=6cda1500f5c963ed234fd94859f23b32f4885dfc
Certificate serial: 019D3A8A8A850F444D98BA85B1532F57DAEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
Manifest number: 166F
Signing time: Sun 29 Mar 2026 17:00:50 +0000
Manifest this update: Sun 29 Mar 2026 17:00:50 +0000
Manifest next update: Mon 30 Mar 2026 17:00:50 +0000
Files and hashes: 1: Uqn6iMFS0A-L6D9kMDDjbMCbWuM.roa (hash: TeSeZwoDHMz9koxsVTB//jq8uP6vjAXuwnX8VHNH6GY=)
2: bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl (hash: vF4VBrBWVGdMnoQzIcnrOJkiMp1OTgLMEVIbsJ/YFTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:8a:85:0f:44:4d:98:ba:85:b1:53:2f:57:da:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cda1500f5c963ed234fd94859f23b32f4885dfc
Validity
Not Before: Mar 29 17:00:50 2026 GMT
Not After : Mar 30 17:00:50 2026 GMT
Subject: CN=ea3d1e18aa9c57abf67e6a3259a2ef4a56b1e822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e4:55:6c:09:cc:bb:73:e2:1b:e8:ba:3f:d2:
d4:11:45:8d:43:6e:51:ea:e7:53:1b:09:7d:7d:18:
0d:2e:36:31:22:16:2f:e3:4d:8e:1e:16:87:48:13:
3e:2a:e3:c9:7e:5e:23:87:e5:3e:4f:ec:54:8c:24:
b8:66:02:25:ad:0c:a0:f7:f9:be:ad:98:e9:8e:a5:
64:cf:11:d7:d9:25:38:e6:83:5e:db:19:b4:e9:b3:
fa:33:07:18:6c:0c:96:88:1b:f5:d1:06:3b:25:a1:
7e:07:0d:bb:3c:02:79:14:5e:f4:06:d2:9c:9a:49:
dc:57:e5:75:f5:a0:69:72:4a:b5:47:0d:ec:f2:77:
b6:87:42:f2:72:4e:0d:9c:1f:fd:9e:a3:83:18:dd:
4a:65:a0:54:f3:29:82:01:e3:d2:e0:21:15:a4:0d:
9d:b5:d6:b5:f2:b7:ea:f1:7b:9c:27:4c:b3:ce:ab:
8f:56:41:8c:41:ba:21:17:e0:11:58:b5:be:7e:2b:
d4:af:9c:c4:ed:ae:40:f8:8a:71:ba:71:66:d7:40:
a3:f9:85:8f:7b:9f:6f:88:6d:c2:80:af:03:c0:31:
39:90:8a:b1:4b:1f:b3:f4:1a:84:3d:29:2a:15:02:
56:34:0e:43:8f:2b:98:76:d8:6b:f5:aa:d1:cc:05:
95:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3D:1E:18:AA:9C:57:AB:F6:7E:6A:32:59:A2:EF:4A:56:B1:E8:22
X509v3 Authority Key Identifier:
keyid:6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:90:01:12:04:c1:e2:c8:5d:dd:65:1e:f6:85:03:5b:bc:75:
76:2e:df:38:fb:0b:57:1f:d6:86:08:0b:1a:4b:d7:96:2d:88:
e9:c5:2f:a1:f1:05:1c:b3:43:35:e6:49:f3:bb:e3:5d:21:e5:
35:59:ca:41:0c:e3:6f:8d:e1:35:13:3f:f6:a0:dc:89:a2:d8:
1a:69:f8:54:fd:2d:43:11:39:3c:c2:5b:f1:98:16:78:86:68:
a2:22:1e:49:5e:d0:58:4e:69:98:c4:9d:38:73:6d:8e:48:ad:
f9:9f:65:1f:2d:87:79:79:e9:3f:4a:f9:f0:09:33:f5:28:be:
df:e6:ea:cd:7e:df:6d:0d:5f:64:a0:59:ad:f1:f0:a8:cf:53:
fe:90:10:82:0d:0d:15:ef:ee:c8:d2:08:34:1c:e1:33:01:13:
30:d7:40:2a:58:53:47:d1:a4:a2:a0:b6:b6:90:c3:b7:9f:af:
10:0e:d7:51:d6:a3:43:29:53:5c:12:4f:b9:f9:eb:02:fd:f6:
50:47:7e:3a:b8:da:a6:9f:79:9a:dc:85:10:88:9f:e4:db:ec:
ee:42:be:49:a1:f5:e7:7a:4c:3d:b6:e9:03:1d:01:fc:89:79:
98:c1:1c:b4:27:33:11:b7:ed:5b:e6:ea:37:e4:90:56:58:4a:
e5:35:f4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:05 2026 by rpki-client