Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft
File: NO2iVBz8z2guKd2uYx7cjR57b2A.mft (raw, json)
Hash identifier: zPBBWzRnxbBQ2OyI2VPO2LbQ8ZxbSryAvMf1S2dortQ=
Subject key identifier: 83:84:50:7B:38:E2:E0:AE:52:65:0C:05:CB:B8:13:14:A2:6F:D5:D0
Authority key identifier: 34:ED:A2:54:1C:FC:CF:68:2E:29:DD:AE:63:1E:DC:8D:1E:7B:6F:60
Certificate issuer: /CN=34eda2541cfccf682e29ddae631edc8d1e7b6f60
Certificate serial: 019D38665F810422F4CCFCC08681E76749E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NO2iVBz8z2guKd2uYx7cjR57b2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft
Manifest number: 093D
Signing time: Sun 29 Mar 2026 07:02:06 +0000
Manifest this update: Sun 29 Mar 2026 07:02:06 +0000
Manifest next update: Mon 30 Mar 2026 07:02:06 +0000
Files and hashes: 1: NO2iVBz8z2guKd2uYx7cjR57b2A.crl (hash: cNe8Mdrr38spkl91UoJwXra4AKTZ223N0K6CCwG3208=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/NO2iVBz8z2guKd2uYx7cjR57b2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:5f:81:04:22:f4:cc:fc:c0:86:81:e7:67:49:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34eda2541cfccf682e29ddae631edc8d1e7b6f60
Validity
Not Before: Mar 29 07:02:06 2026 GMT
Not After : Mar 30 07:02:06 2026 GMT
Subject: CN=8384507b38e2e0ae52650c05cbb81314a26fd5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:c7:05:64:1c:c4:e1:73:b3:6d:52:4c:45:
db:ad:c5:f5:5f:91:fe:07:bf:38:e9:61:ac:8d:18:
b4:bf:96:5b:7e:eb:57:53:86:14:57:e2:30:e7:fd:
44:13:70:fb:b9:6b:c8:0e:63:74:96:59:3d:f8:e7:
8c:b5:74:81:06:56:c8:51:02:d3:35:c8:4c:e2:45:
d2:63:11:98:e3:88:bb:64:54:ff:52:10:35:c0:89:
28:da:ed:7b:62:dc:9d:87:15:f9:0d:03:78:e4:1b:
a6:80:34:44:b5:a2:5c:ca:88:7d:4f:21:2f:d7:e3:
86:2d:93:a0:d6:0b:56:09:18:14:f0:79:22:72:92:
17:7e:8b:cc:1d:71:64:59:96:3c:a5:fd:6b:f9:e6:
4e:0d:f3:23:a4:c1:b8:4a:df:e9:2e:87:3b:d6:17:
a4:97:08:d4:12:25:ec:b2:07:9a:23:ee:7f:4b:dc:
ec:40:0b:67:a1:84:9b:88:d5:b6:74:eb:be:91:8c:
c1:a8:1c:78:00:19:7e:7d:b9:40:de:07:d2:73:f1:
f5:86:33:a8:49:01:87:0c:6e:0d:8a:97:95:3c:44:
95:12:55:25:3a:e2:ca:c2:5a:db:97:bb:cc:10:db:
2d:c0:4f:ef:14:05:e3:ab:59:b9:36:c8:a1:43:95:
5d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:84:50:7B:38:E2:E0:AE:52:65:0C:05:CB:B8:13:14:A2:6F:D5:D0
X509v3 Authority Key Identifier:
keyid:34:ED:A2:54:1C:FC:CF:68:2E:29:DD:AE:63:1E:DC:8D:1E:7B:6F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NO2iVBz8z2guKd2uYx7cjR57b2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c6:90:ef:d0:19:aa:6c:5f:2b:45:41:b0:27:f0:83:74:89:
ca:5c:f6:a8:0c:43:e9:36:82:88:d4:93:5c:0e:0e:0b:16:ab:
92:19:61:ac:09:6e:6c:d1:63:b3:41:62:cc:62:ac:c2:b9:8a:
fc:81:51:04:cc:3f:9e:87:4c:10:cc:ed:e0:a1:ff:39:e2:e4:
1f:21:2d:d3:b2:b8:20:d0:03:b4:ef:51:a1:d1:92:74:f2:56:
dc:16:1b:7b:aa:34:05:9f:c4:6e:58:35:00:f3:65:63:b9:ba:
33:73:34:67:63:1d:a4:94:4a:60:e0:58:3b:39:d1:15:da:dc:
34:93:ec:d8:7a:7e:ec:46:d4:ee:54:dd:92:44:03:02:6a:44:
19:d0:4b:07:b2:44:0e:ed:9f:33:ed:c2:52:68:67:c5:31:9a:
47:ce:dd:35:8d:21:96:0c:e3:34:fa:af:92:fd:f7:4b:8c:5f:
b4:a7:91:ce:8b:49:67:03:8b:fd:71:0c:c1:2e:53:74:c1:fe:
a4:68:98:eb:7c:b4:fb:66:14:58:1a:0e:e4:ce:91:87:4a:8f:
f7:36:f1:1a:01:d5:b8:f2:d5:2d:c0:cd:dc:8a:7d:33:04:47:
da:23:b0:2f:1c:b9:0c:73:89:b0:c7:ce:ae:25:5f:4a:1a:db:
7f:5f:86:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:41 2026 by rpki-client