Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
File: NOg_QeXSQlTJCobjsrt6gK8DlyE.mft (raw, json)
Hash identifier: mh09RmSLnlJfUK7GtgYZk/Toxve2soO+1x1BXNakgIM=
Subject key identifier: 67:B7:E3:B0:F7:68:DA:04:1D:3D:B8:24:F1:1F:05:57:A5:BF:C0:61
Authority key identifier: 34:E8:3F:41:E5:D2:42:54:C9:0A:86:E3:B2:BB:7A:80:AF:03:97:21
Certificate issuer: /CN=34e83f41e5d24254c90a86e3b2bb7a80af039721
Certificate serial: 019CBD3A5FDACA02E7137FC1C1E075E35ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
Manifest number: 16E3
Signing time: Thu 05 Mar 2026 09:00:45 +0000
Manifest this update: Thu 05 Mar 2026 09:00:45 +0000
Manifest next update: Fri 06 Mar 2026 09:00:45 +0000
Files and hashes: 1: 7LLie0DeHG282OERB_LWP0JeCm0.roa (hash: SMK15rz3Hj/SmmxxmBAEgvdYYQjWQf8IMkbvZ+tYBlU=)
2: NOg_QeXSQlTJCobjsrt6gK8DlyE.crl (hash: VUH7sgRVx3xSR2wguoMlT8BegGk8kNnHSVBRbMOjtaM=)
3: Vy7BMpJqoZuVvWR4mEN_bNvm9dM.roa (hash: rY6uJJwF9xIMyt0dN926zSvzL2uJcZ2tadxHonT2i4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bd:3a:5f:da:ca:02:e7:13:7f:c1:c1:e0:75:e3:5e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e83f41e5d24254c90a86e3b2bb7a80af039721
Validity
Not Before: Mar 5 09:00:45 2026 GMT
Not After : Mar 6 09:00:45 2026 GMT
Subject: CN=67b7e3b0f768da041d3db824f11f0557a5bfc061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:07:66:d3:68:f2:40:87:29:48:39:75:ea:92:
df:c1:b5:02:38:aa:11:f6:20:c0:69:dd:3a:4a:45:
3f:a5:d5:8a:fa:bb:a6:5d:ab:65:d7:11:8d:d0:ea:
e6:5c:75:1f:41:d5:96:67:55:21:90:b7:b6:13:fd:
e5:3c:11:45:1c:06:3d:8c:af:0a:b4:ae:80:ca:45:
3f:ac:23:2e:10:eb:9b:e9:1c:68:54:99:2f:05:cb:
d5:9e:21:6a:ae:79:6c:3d:16:cf:9a:c9:51:8b:7c:
10:96:7e:dc:7b:e5:6f:ce:48:16:83:6c:3a:c5:63:
5d:cf:da:c5:c6:91:2b:d8:e2:a8:19:70:7c:75:55:
cd:71:c9:17:88:6d:c3:ce:0d:60:5c:00:ad:56:4b:
49:e2:7e:d8:26:3e:17:97:4d:3c:12:d6:8b:4b:28:
2a:e9:df:93:5f:69:ff:7c:14:c7:be:5d:05:62:82:
d7:35:4d:c4:a1:6a:f2:fd:b0:e2:9a:76:f7:84:6c:
75:5e:43:e5:05:4c:56:fa:f0:7e:a7:6e:98:bd:50:
95:46:9d:e0:0c:90:5a:22:81:bb:5b:3a:a3:5c:02:
7f:8c:47:50:b6:e1:39:8b:1c:02:53:0f:95:dc:37:
94:c8:2b:da:c5:ce:00:c3:23:33:ef:f3:05:05:45:
21:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B7:E3:B0:F7:68:DA:04:1D:3D:B8:24:F1:1F:05:57:A5:BF:C0:61
X509v3 Authority Key Identifier:
keyid:34:E8:3F:41:E5:D2:42:54:C9:0A:86:E3:B2:BB:7A:80:AF:03:97:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:08:c6:86:00:11:c7:3b:46:f1:d4:5b:39:56:82:db:68:c1:
b6:8d:56:d5:86:cf:de:21:b3:c3:fc:d8:e1:f6:73:94:6f:9d:
e3:e1:df:9a:68:fe:ec:cc:bc:52:a9:15:bb:e2:8d:df:aa:e7:
44:9b:13:b4:0b:2a:0b:a1:f8:7f:99:4b:0b:a5:23:a2:eb:83:
9f:4f:7a:b9:c5:92:6a:b2:f9:12:11:8f:e4:d3:06:56:c6:aa:
22:66:73:dc:01:b1:af:9a:b7:a8:21:47:1a:10:ac:0a:9f:27:
3c:82:9b:c2:ea:4a:81:8c:a9:fd:c2:ee:c8:b5:51:07:60:7a:
a1:2f:df:29:26:a6:bd:d8:77:70:f6:7d:7c:69:b1:74:8b:8c:
8a:6e:43:91:e8:29:40:fa:b1:aa:88:b3:38:0f:a6:fd:56:29:
90:09:2c:1c:ec:d3:10:02:2a:7f:8a:36:71:4e:c4:58:b7:4e:
68:e2:98:bc:12:1f:d6:c3:98:d9:46:b1:be:80:3e:19:08:14:
c1:f0:ba:f5:4b:72:84:ac:b7:e1:aa:4e:6c:3f:2d:ac:4d:3e:
59:70:96:10:f7:19:2b:99:83:49:11:f7:39:e5:b9:d6:b2:61:
67:08:04:cb:f3:1a:7f:1d:cc:b4:8a:b9:16:da:55:33:24:57:
f3:53:c6:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZy9Ol/aygLnE3/BweB1417WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZTgzZjQxZTVkMjQyNTRjOTBhODZlM2IyYmI3YTgwYWYw
Mzk3MjEwHhcNMjYwMzA1MDkwMDQ1WhcNMjYwMzA2MDkwMDQ1WjAzMTEwLwYDVQQD
Eyg2N2I3ZTNiMGY3NjhkYTA0MWQzZGI4MjRmMTFmMDU1N2E1YmZjMDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogdm02jyQIcpSDl16pLfwbUCOKoR
9iDAad06SkU/pdWK+rumXatl1xGN0OrmXHUfQdWWZ1UhkLe2E/3lPBFFHAY9jK8K
tK6AykU/rCMuEOub6RxoVJkvBcvVniFqrnlsPRbPmslRi3wQln7ce+VvzkgWg2w6
xWNdz9rFxpEr2OKoGXB8dVXNcckXiG3Dzg1gXACtVktJ4n7YJj4Xl008EtaLSygq
6d+TX2n/fBTHvl0FYoLXNU3EoWry/bDimnb3hGx1XkPlBUxW+vB+p26YvVCVRp3g
DJBaIoG7WzqjXAJ/jEdQtuE5ixwCUw+V3DeUyCvaxc4AwyMz7/MFBUUhjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGe347D3aNoEHT24JPEfBVelv8BhMB8GA1UdIwQY
MBaAFDToP0Hl0kJUyQqG47K7eoCvA5chMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk9nX1FlWFNRbFRKQ29ianNydDZnSzhEbHlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mYmEyOGMtNmIxNy00NjI2LTk2M2Mt
MDU4Y2M5NTNlODAzLzEvTk9nX1FlWFNRbFRKQ29ianNydDZnSzhEbHlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9mYmEyOGMtNmIxNy00NjI2LTk2M2MtMDU4Y2M5NTNlODAz
LzEvTk9nX1FlWFNRbFRKQ29ianNydDZnSzhEbHlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgjGhgAR
xztG8dRbOVaC22jBto1W1YbP3iGzw/zY4fZzlG+d4+Hfmmj+7My8UqkVu+KN36rn
RJsTtAsqC6H4f5lLC6UjouuDn096ucWSarL5EhGP5NMGVsaqImZz3AGxr5q3qCFH
GhCsCp8nPIKbwupKgYyp/cLuyLVRB2B6oS/fKSamvdh3cPZ9fGmxdIuMim5Dkegp
QPqxqoizOA+m/VYpkAksHOzTEAIqf4o2cU7EWLdOaOKYvBIf1sOY2UaxvoA+GQgU
wfC69UtyhKy34apObD8trE0+WXCWEPcZK5mDSRH3OeW51rJhZwgEy/Mafx3MtIq5
FtpVMyRX81PGPw==
-----END CERTIFICATE-----
Generated at Thu Mar 5 12:53:09 2026 by rpki-client