Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
File: NOg_QeXSQlTJCobjsrt6gK8DlyE.mft (raw, json)
Hash identifier: TIfGMVfDkn66BWuJzNGUWj/+hxPcRDoCFP2EVNkz0ZQ=
Subject key identifier: 87:97:DA:CC:89:DE:92:C9:C0:B6:73:95:86:20:D2:28:77:32:53:C5
Authority key identifier: 34:E8:3F:41:E5:D2:42:54:C9:0A:86:E3:B2:BB:7A:80:AF:03:97:21
Certificate issuer: /CN=34e83f41e5d24254c90a86e3b2bb7a80af039721
Certificate serial: 01A06F833598BEAC3A15E9E82C1F5AF2B42A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
Manifest number: 18CD
Signing time: Sat 05 Sep 2026 03:01:04 +0000
Manifest this update: Sat 05 Sep 2026 03:01:04 +0000
Manifest next update: Sun 06 Sep 2026 03:01:04 +0000
Files and hashes: 1: 7LLie0DeHG282OERB_LWP0JeCm0.roa (hash: SMK15rz3Hj/SmmxxmBAEgvdYYQjWQf8IMkbvZ+tYBlU=)
2: NOg_QeXSQlTJCobjsrt6gK8DlyE.crl (hash: RILl8aUwyFBiC24g7yRdPpKt09xpUkX6RMziVhjzw9Q=)
3: Vy7BMpJqoZuVvWR4mEN_bNvm9dM.roa (hash: rY6uJJwF9xIMyt0dN926zSvzL2uJcZ2tadxHonT2i4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:83:35:98:be:ac:3a:15:e9:e8:2c:1f:5a:f2:b4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e83f41e5d24254c90a86e3b2bb7a80af039721
Validity
Not Before: Sep 5 03:01:04 2026 GMT
Not After : Sep 6 03:01:04 2026 GMT
Subject: CN=8797dacc89de92c9c0b673958620d228773253c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3b:e5:c1:39:92:94:06:e9:24:5f:38:82:b0:
c8:cb:3d:cb:6c:e7:bd:c3:30:e9:15:d3:b8:2a:58:
28:72:b9:16:e8:2d:d4:e0:ed:0d:9c:18:61:05:73:
c0:c9:b6:f2:ac:38:1e:fb:7e:00:ec:94:6f:3a:62:
ed:1f:90:90:42:e8:f0:55:11:f3:fd:cf:f3:7d:5a:
c2:a5:05:cc:a9:be:7d:26:53:e0:8e:ca:05:6b:55:
dd:44:43:76:95:08:be:08:f1:ae:31:00:44:d6:71:
98:ea:57:7f:df:af:65:c8:2f:2c:51:12:b6:f5:f5:
e7:98:ab:36:09:e1:06:4b:49:f3:16:41:60:38:de:
a1:e9:15:33:f4:da:8d:2e:35:3f:ce:64:b4:7d:ed:
d8:90:6c:52:4f:cf:a9:0a:94:7f:ae:4b:b8:5f:a3:
70:e3:88:27:38:bf:ae:f3:11:28:9e:ff:08:c1:e0:
fa:a1:b8:65:c8:d3:59:6e:c9:da:be:47:d9:cf:f9:
53:41:da:32:2a:78:86:28:f5:83:47:d6:01:73:71:
fb:8b:47:ec:c4:4c:eb:7a:04:5c:8f:52:65:94:07:
2c:0a:1e:3f:dd:64:b1:e1:a3:2d:6f:ec:95:15:08:
06:95:59:82:35:c1:45:09:56:23:e6:60:a5:c7:c5:
22:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:97:DA:CC:89:DE:92:C9:C0:B6:73:95:86:20:D2:28:77:32:53:C5
X509v3 Authority Key Identifier:
keyid:34:E8:3F:41:E5:D2:42:54:C9:0A:86:E3:B2:BB:7A:80:AF:03:97:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e0:1d:9f:5f:66:da:01:0e:62:80:88:08:68:f0:59:6b:5d:
3e:ce:c8:f1:ac:f7:40:0e:dd:ff:6a:bb:1f:45:9c:a3:5d:df:
be:0f:30:53:1f:5a:89:57:e1:0c:87:f4:30:2e:7b:bd:ef:95:
c5:08:54:25:02:58:c4:3a:5e:92:10:7d:66:4d:4b:bd:cc:22:
70:d4:16:15:80:07:7e:33:38:6c:82:c3:e7:d4:c3:ea:49:79:
95:95:fb:c9:af:ff:30:af:3b:95:a3:0a:2a:b3:76:3f:cc:01:
eb:cb:8a:12:fd:07:c2:0f:4a:f7:1e:28:5b:35:2d:c4:38:6f:
6b:ac:96:fb:a9:52:39:e1:f9:7f:30:36:5c:4c:96:c4:bf:3f:
49:4e:e5:bf:76:d9:7c:75:f6:d7:60:e4:a5:01:24:55:c9:06:
b7:10:29:da:fb:90:8a:99:c2:3c:35:5a:69:a7:c7:aa:b2:13:
aa:8e:51:0f:a6:ff:96:d3:41:cf:c5:a6:5b:a8:ea:76:17:99:
5d:1c:29:d8:8e:36:8e:92:63:6f:ea:22:aa:b4:3f:23:4e:27:
e2:cc:67:2b:24:30:6b:fc:2c:9e:ff:b5:c4:58:b2:ff:9c:24:
52:75:7b:90:05:45:96:0a:eb:f1:d4:d7:c1:ac:ef:6c:b4:24:
d6:1d:f5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:21:15 2026 by rpki-client