Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/dad528-a6ba-4901-a73f-45ea9b8b6e89/1/no3TBFtnDAiRmNvNlSJ7p8UScP4.mft
File: no3TBFtnDAiRmNvNlSJ7p8UScP4.mft (raw, json)
Hash identifier: 59tZx2LAdUtQpCdv2HhtpKTqc6XIPdJ6gxTyEzMIuP4=
Subject key identifier: 2D:17:EE:B9:2F:BA:94:1D:D1:1C:02:2D:31:F4:C4:8D:10:23:A3:9D
Authority key identifier: 9E:8D:D3:04:5B:67:0C:08:91:98:DB:CD:95:22:7B:A7:C5:12:70:FE
Certificate issuer: /CN=9e8dd3045b670c089198dbcd95227ba7c51270fe
Certificate serial: 01A17B4D6EADD3DE7F347ED97E1C7012302E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/no3TBFtnDAiRmNvNlSJ7p8UScP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/dad528-a6ba-4901-a73f-45ea9b8b6e89/1/no3TBFtnDAiRmNvNlSJ7p8UScP4.mft
Manifest number: 5F
Signing time: Tue 27 Oct 2026 03:00:34 +0000
Manifest this update: Tue 27 Oct 2026 03:00:34 +0000
Manifest next update: Wed 28 Oct 2026 03:00:34 +0000
Files and hashes: 1: lr5pPhXtC_CqPrNuogf4lkr9PRk.roa (hash: lEm6/EmaZxK7xXQjs0gL6QBNZccCJ9C/Et7XzH7k124=)
2: no3TBFtnDAiRmNvNlSJ7p8UScP4.crl (hash: /j5PKohv12o82iMlEh3lXWM6MT0/Fj0GkHoG7c2L9bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/dad528-a6ba-4901-a73f-45ea9b8b6e89/1/no3TBFtnDAiRmNvNlSJ7p8UScP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/dad528-a6ba-4901-a73f-45ea9b8b6e89/1/no3TBFtnDAiRmNvNlSJ7p8UScP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/no3TBFtnDAiRmNvNlSJ7p8UScP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:4d:6e:ad:d3:de:7f:34:7e:d9:7e:1c:70:12:30:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e8dd3045b670c089198dbcd95227ba7c51270fe
Validity
Not Before: Oct 27 03:00:34 2026 GMT
Not After : Oct 28 03:00:34 2026 GMT
Subject: CN=2d17eeb92fba941dd11c022d31f4c48d1023a39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:64:f4:92:f1:1c:8c:47:33:2c:c5:fc:47:
4f:0e:c4:b8:19:03:f4:fa:04:0f:c0:9a:c3:ce:a5:
ab:53:6a:46:b8:20:dd:c4:94:07:29:2a:b4:29:7a:
fa:ae:24:28:4c:4b:7a:2a:c7:c3:e4:63:3f:a9:ae:
37:c6:7a:23:82:ef:22:18:47:78:f8:bf:e6:5f:c7:
0d:41:53:c0:89:1b:5b:5e:40:37:bf:01:23:5c:1b:
65:90:d3:76:b8:7d:2a:22:03:d5:ed:7c:9c:11:42:
bb:f9:2c:84:af:3b:e6:0f:2f:df:11:a5:08:5b:2c:
56:ea:06:f1:9e:1f:55:93:50:77:5f:12:ae:a8:28:
c0:7d:c1:48:76:14:4d:d0:24:39:f7:7d:e1:3c:e5:
2d:74:ae:ab:6a:9b:c6:14:63:30:a4:79:8b:a7:ca:
92:a2:4a:33:f5:11:2f:7a:29:ad:36:0b:e8:87:35:
5f:f5:fc:7b:4c:91:d1:f8:d1:6b:aa:c2:e0:fc:19:
f3:4f:ce:e6:dc:a0:34:d8:61:6c:a1:6a:62:ef:6c:
ab:af:c9:72:6a:8d:36:e5:6b:02:ae:34:7c:3e:ac:
51:52:97:5a:33:65:eb:58:65:20:6c:3d:5e:65:03:
6d:fd:31:2f:b4:55:21:16:22:86:da:e9:77:06:8c:
15:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:17:EE:B9:2F:BA:94:1D:D1:1C:02:2D:31:F4:C4:8D:10:23:A3:9D
X509v3 Authority Key Identifier:
keyid:9E:8D:D3:04:5B:67:0C:08:91:98:DB:CD:95:22:7B:A7:C5:12:70:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/no3TBFtnDAiRmNvNlSJ7p8UScP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/dad528-a6ba-4901-a73f-45ea9b8b6e89/1/no3TBFtnDAiRmNvNlSJ7p8UScP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/dad528-a6ba-4901-a73f-45ea9b8b6e89/1/no3TBFtnDAiRmNvNlSJ7p8UScP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b1:6a:14:38:2a:2e:67:e8:9e:67:e3:35:89:1c:21:28:f4:
d7:bc:45:12:3f:4e:08:3e:66:a9:96:c0:73:35:3d:50:0a:b3:
da:91:8c:a7:6e:6b:90:9b:08:15:70:72:cd:38:e9:04:b4:51:
0f:bb:6a:86:9f:53:76:24:a2:5f:11:ec:e0:c3:1b:ac:d9:e5:
be:bb:00:a0:37:ee:3f:41:f1:dd:28:dd:fb:69:34:45:7d:fa:
2a:71:da:75:1d:57:c9:18:a9:fa:ce:68:29:92:3b:3a:5b:04:
a1:71:c3:3d:63:ca:27:be:89:d5:0c:92:26:3c:71:e0:12:b0:
5e:c9:e6:22:a3:de:ba:27:27:9c:ce:4c:44:1c:b2:70:f3:ad:
60:9d:75:da:21:64:97:64:91:0b:6b:a3:6e:3d:c5:06:cf:ec:
85:cf:14:ac:fd:43:58:65:eb:0b:83:d6:df:1b:f7:39:8f:f7:
d2:f1:99:ed:6d:bc:6a:d0:14:a9:e1:ef:ed:1e:c5:b4:95:9c:
f9:b2:ec:7b:70:24:a8:4e:98:e3:ef:24:6a:c4:79:2e:c8:3f:
d4:eb:84:33:ba:92:89:85:97:40:19:c8:b2:51:ee:42:3e:7e:
b0:d9:5b:c8:32:cb:a9:6e:e9:65:22:6a:dc:37:e8:af:5f:84:
bd:02:05:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:56:41 2026 by rpki-client