Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft
File: NoTy9VGkNSosFNf45pMpqdxD_eA.mft (raw, json)
Hash identifier: dFapcoKKCyNMBdPhRITXQNuGJKieVU3IjMDYb+npHRU=
Subject key identifier: 0E:89:40:D5:29:01:E0:D9:AA:3B:7C:6A:C0:43:C8:27:DD:88:2B:65
Authority key identifier: 36:84:F2:F5:51:A4:35:2A:2C:14:D7:F8:E6:93:29:A9:DC:43:FD:E0
Certificate issuer: /CN=3684f2f551a4352a2c14d7f8e69329a9dc43fde0
Certificate serial: 019D37C0D4895151D2D0A1E92DFA112DFDCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoTy9VGkNSosFNf45pMpqdxD_eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft
Manifest number: 0490
Signing time: Sun 29 Mar 2026 04:01:17 +0000
Manifest this update: Sun 29 Mar 2026 04:01:17 +0000
Manifest next update: Mon 30 Mar 2026 04:01:17 +0000
Files and hashes: 1: NoTy9VGkNSosFNf45pMpqdxD_eA.crl (hash: YaxMpaJLuUJ7r1uAprD2C2HU144iBDSq7AQj4v3/7HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NoTy9VGkNSosFNf45pMpqdxD_eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:d4:89:51:51:d2:d0:a1:e9:2d:fa:11:2d:fd:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3684f2f551a4352a2c14d7f8e69329a9dc43fde0
Validity
Not Before: Mar 29 04:01:17 2026 GMT
Not After : Mar 30 04:01:17 2026 GMT
Subject: CN=0e8940d52901e0d9aa3b7c6ac043c827dd882b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:85:d4:3f:a4:d2:72:f1:26:48:96:d5:7b:c6:
52:9a:37:8d:fb:09:41:74:d2:57:15:29:34:c8:23:
1d:03:42:c3:12:23:b8:64:47:06:eb:6e:af:c3:b2:
46:b8:b7:8e:b2:b7:66:73:bf:d0:97:e3:bd:9d:4e:
73:7d:9e:14:dc:fc:11:65:ef:5b:83:ab:eb:69:48:
a4:60:31:2a:99:d3:33:8f:07:74:e5:3c:ac:fc:ed:
aa:f2:48:d3:de:e6:91:c9:aa:06:ed:fd:7c:c6:2a:
37:e7:aa:f8:10:e1:0d:68:9a:55:45:19:5e:c2:31:
77:92:bf:d8:ff:7e:51:1d:ae:83:a6:47:29:17:76:
03:63:2b:4c:38:c9:ed:03:fa:19:ea:fa:57:7d:68:
a0:d8:93:79:63:a9:31:5b:77:df:10:84:27:69:8c:
dc:5c:7f:9c:18:9e:f6:0d:8d:ed:5b:bd:0d:6c:fd:
71:6d:25:fa:f3:55:60:df:1e:ca:48:69:ad:8b:55:
40:cd:e3:dc:35:a9:a6:31:56:41:51:57:f3:4c:cc:
a4:fd:b4:c7:7f:e1:80:39:c7:ea:19:71:59:d6:80:
00:4b:d9:b6:08:9e:74:81:60:8a:b9:09:47:dd:cb:
de:c4:a3:65:a0:91:7c:60:2d:ab:ff:bb:f6:f2:3a:
9d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:89:40:D5:29:01:E0:D9:AA:3B:7C:6A:C0:43:C8:27:DD:88:2B:65
X509v3 Authority Key Identifier:
keyid:36:84:F2:F5:51:A4:35:2A:2C:14:D7:F8:E6:93:29:A9:DC:43:FD:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoTy9VGkNSosFNf45pMpqdxD_eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:48:2d:55:b0:63:15:d1:e2:17:3f:18:5d:5c:ff:50:ba:1d:
60:af:11:6b:12:14:3e:b9:7e:20:ae:ad:cd:aa:73:7a:c4:1d:
69:53:2d:10:b2:ea:dc:d9:c4:75:2a:e9:5c:d5:72:e2:9e:45:
1b:3f:33:ed:6a:7f:08:a2:a2:92:67:88:a6:a6:f7:e0:b0:0d:
fc:7c:5e:fc:51:40:5c:18:3c:da:d0:0f:55:10:9e:a3:7b:28:
03:cf:d1:55:8d:fa:29:0e:89:f4:0c:c7:50:ef:b9:fe:39:a7:
f6:ac:8e:f4:3e:ba:f5:a9:e3:6a:5d:c6:0d:80:fb:99:dd:31:
d0:db:0a:fe:9b:36:8d:43:3d:e0:26:36:f2:5d:d4:db:2a:94:
a4:7f:25:90:7e:4b:4f:2a:a6:0e:91:84:af:5c:7e:4a:e0:d1:
8b:28:a7:a3:60:0a:66:2a:41:cd:d8:ba:0b:a1:b4:7b:21:f9:
ab:96:b8:9c:a7:ee:02:fe:79:39:30:51:a6:32:9e:b0:cb:4e:
43:8c:55:75:5c:a1:3b:f4:3b:bd:bb:ec:f4:a4:5d:4d:39:02:
0e:e4:52:bd:cd:7a:fd:52:11:2a:83:f0:d6:8d:49:f0:77:29:
d7:db:82:f2:99:41:ff:40:03:82:b4:a9:61:bb:31:d8:5d:48:
49:c7:61:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:16 2026 by rpki-client