Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.mft
File: NOBtFKhPWbf99CyIEC5O3mbMseE.mft (raw, json)
Hash identifier: ODu6fYvi1zo8OyhWqN/kD/Q4p28/DuJQ8iE8mUxULz4=
Subject key identifier: 3A:7E:C2:4E:FD:AC:FF:7F:9B:7A:81:6F:4C:46:B7:71:53:C8:50:B2
Authority key identifier: 34:E0:6D:14:A8:4F:59:B7:FD:F4:2C:88:10:2E:4E:DE:66:CC:B1:E1
Certificate issuer: /CN=34e06d14a84f59b7fdf42c88102e4ede66ccb1e1
Certificate serial: 019F72182F2DD2DD8558D9FD08B1F469C4E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOBtFKhPWbf99CyIEC5O3mbMseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.mft
Manifest number: AA
Signing time: Fri 17 Jul 2026 22:00:15 +0000
Manifest this update: Fri 17 Jul 2026 22:00:15 +0000
Manifest next update: Sat 18 Jul 2026 22:00:15 +0000
Files and hashes: 1: NOBtFKhPWbf99CyIEC5O3mbMseE.crl (hash: V4BsHHfvxK13apohpexhvyE9ly0jX1Laiiz+OPImktQ=)
2: p3aajzYyQBOL8_heQYtjgnkd4Rg.asa (hash: 7giw4YhEVVO6j0oSzpKw/4x3FTNih2DtbMv5u0hQCU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOBtFKhPWbf99CyIEC5O3mbMseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:72:18:2f:2d:d2:dd:85:58:d9:fd:08:b1:f4:69:c4:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e06d14a84f59b7fdf42c88102e4ede66ccb1e1
Validity
Not Before: Jul 17 22:00:15 2026 GMT
Not After : Jul 18 22:00:15 2026 GMT
Subject: CN=3a7ec24efdacff7f9b7a816f4c46b77153c850b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:eb:26:a6:66:14:21:14:43:13:30:be:3f:97:
3b:41:50:3a:0d:b1:61:47:d9:14:56:6c:b4:aa:c3:
ab:0c:5b:08:41:6e:3b:f1:92:28:4c:4c:21:23:96:
8e:1a:99:16:b4:70:4f:33:c7:5a:bc:b5:b2:39:d7:
36:a0:45:6b:ec:37:35:0e:94:30:ec:a7:89:3a:17:
cc:b2:fe:bf:96:70:a5:85:42:c8:94:38:14:9c:a6:
a5:fe:1c:70:27:07:5d:87:ad:2c:a7:36:30:5b:57:
fa:e4:c1:1b:00:fa:81:45:f8:eb:93:fa:33:b3:20:
9a:a5:89:79:5c:1d:b7:7a:57:78:0a:f8:13:e1:10:
c0:dd:8f:16:3b:1b:cd:c1:6b:81:19:fc:50:12:e4:
b4:14:8b:ab:57:01:47:69:63:e8:7c:7b:a8:c3:bc:
1b:1f:b2:6a:49:57:f7:80:35:ae:b1:78:2c:a4:88:
d7:a0:2f:99:b2:27:09:fb:f7:b0:dd:25:ce:57:ec:
29:cb:69:a2:45:40:01:04:1d:f9:33:82:7c:af:19:
18:80:15:e2:d5:9f:84:06:ea:bf:10:4d:64:3e:05:
9f:4e:5e:18:56:de:22:1f:7c:00:a8:93:f0:dc:49:
8a:31:28:de:09:2e:71:2e:22:91:45:91:b5:3f:a8:
fc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7E:C2:4E:FD:AC:FF:7F:9B:7A:81:6F:4C:46:B7:71:53:C8:50:B2
X509v3 Authority Key Identifier:
keyid:34:E0:6D:14:A8:4F:59:B7:FD:F4:2C:88:10:2E:4E:DE:66:CC:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOBtFKhPWbf99CyIEC5O3mbMseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:67:a0:2b:25:5d:19:01:de:62:d4:a5:8a:d5:34:21:ed:a0:
9d:ba:60:2f:9f:b5:1f:50:06:57:bd:fa:99:6a:d7:40:9b:80:
14:b3:82:56:fd:07:04:e8:1d:9a:22:6b:ed:46:3e:56:0b:21:
21:75:8a:77:13:53:ba:f6:3d:f4:6d:43:8d:ce:74:35:aa:9c:
00:96:d3:18:ff:1f:3c:88:ea:e4:b7:2d:1d:34:96:0a:9e:31:
df:f1:4f:68:c1:1f:49:c7:26:5e:49:66:fa:61:90:89:36:40:
15:0a:7e:6d:04:3a:e8:a5:30:0e:0d:0a:28:d1:5a:ae:dd:b5:
e3:1d:05:cb:7f:35:c8:d5:4e:31:dd:d0:10:ec:95:5d:40:89:
ab:5f:9c:96:5e:fe:9e:fa:e4:78:8b:ac:bc:99:5f:a1:a8:d7:
ec:af:d4:b8:04:a9:93:33:58:04:25:06:a8:f1:4e:cf:7e:e6:
7e:82:0c:f5:e4:96:3c:38:cd:fd:af:52:19:ae:81:f7:69:5b:
26:17:9d:5f:50:0d:d5:60:6c:06:be:65:b5:29:46:d3:f8:f4:
8e:8b:bc:75:34:ca:fc:02:b5:fe:46:77:0b:1b:dd:80:ad:79:
12:c1:84:99:b4:db:c6:dc:3f:07:80:e4:16:4f:17:b7:64:57:
00:f8:b4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:16:00 2026 by rpki-client