Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.mft
File: NOBtFKhPWbf99CyIEC5O3mbMseE.mft (raw, json)
Hash identifier: 4/IhrZlhSmWWb2x05aPyT+Msm9LGgtOtPBCQbXgWogg=
Subject key identifier: 3D:29:9D:0A:73:33:2C:05:6F:E0:B9:CF:99:B3:1A:FF:CD:91:43:3B
Authority key identifier: 34:E0:6D:14:A8:4F:59:B7:FD:F4:2C:88:10:2E:4E:DE:66:CC:B1:E1
Certificate issuer: /CN=34e06d14a84f59b7fdf42c88102e4ede66ccb1e1
Certificate serial: 019E88D9F2ECDC8643ABB0023D26CC5762F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOBtFKhPWbf99CyIEC5O3mbMseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.mft
Manifest number: 31
Signing time: Tue 02 Jun 2026 15:00:45 +0000
Manifest this update: Tue 02 Jun 2026 15:00:45 +0000
Manifest next update: Wed 03 Jun 2026 15:00:45 +0000
Files and hashes: 1: NOBtFKhPWbf99CyIEC5O3mbMseE.crl (hash: lMzJKsGEwVpC0vZLj4/5MC1PqyBxih38TzAnJuGFdfI=)
2: xznMmB3AmOhTRlhv5xfhx1n5Qbg.asa (hash: n7u2+uFEYHK8SeHBIkaY8QZSURFreDFjbfMfNYzC68E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOBtFKhPWbf99CyIEC5O3mbMseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:88:d9:f2:ec:dc:86:43:ab:b0:02:3d:26:cc:57:62:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e06d14a84f59b7fdf42c88102e4ede66ccb1e1
Validity
Not Before: Jun 2 15:00:45 2026 GMT
Not After : Jun 3 15:00:45 2026 GMT
Subject: CN=3d299d0a73332c056fe0b9cf99b31affcd91433b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7d:ff:07:df:c7:58:2c:d7:3d:70:fe:6c:73:
7d:d3:1e:ce:27:7e:ea:e0:af:ba:b7:c8:c9:a7:22:
37:d4:a7:e7:d7:0f:1c:2b:2b:0e:c0:fd:2a:40:42:
1f:2a:9a:f6:a1:74:b0:70:8e:e3:a9:7c:8b:c3:43:
ac:e9:a4:66:bf:0b:82:e0:88:a3:43:34:20:bd:cb:
3f:31:92:c6:d5:84:31:fc:b2:26:ce:b8:db:75:6a:
20:c2:05:65:1a:54:ad:70:68:01:ad:53:dd:e8:4f:
61:cf:fc:7d:11:1e:44:d1:ae:22:09:88:dc:9e:98:
14:2a:15:fa:8b:45:fd:a8:67:e2:81:ce:ec:aa:50:
29:97:1f:6a:1e:81:27:8b:f1:93:9c:76:e6:7d:0c:
9e:d4:4f:c6:1e:4a:47:27:73:92:d8:35:16:98:65:
f9:9e:eb:3d:f7:a7:6b:d1:cd:fc:85:85:01:3e:76:
71:78:44:69:03:88:40:30:54:1f:37:0c:7f:0a:47:
d9:46:6d:25:ee:8c:74:13:a8:cc:89:7d:04:67:f8:
4c:03:90:6d:54:16:32:53:35:49:0f:3f:d1:74:62:
37:60:df:fd:7f:7c:04:19:03:86:0d:09:0a:3c:c9:
7a:37:bd:d0:c3:46:ca:d2:7e:5a:81:ab:5b:32:51:
cc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:29:9D:0A:73:33:2C:05:6F:E0:B9:CF:99:B3:1A:FF:CD:91:43:3B
X509v3 Authority Key Identifier:
keyid:34:E0:6D:14:A8:4F:59:B7:FD:F4:2C:88:10:2E:4E:DE:66:CC:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOBtFKhPWbf99CyIEC5O3mbMseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:06:05:22:91:32:cd:fc:45:54:ed:5b:30:39:96:a5:6f:4d:
f9:21:bd:9d:69:e1:ae:fa:9f:4f:71:cd:99:24:4d:1f:b4:28:
d3:30:7f:bd:49:5a:fb:27:c4:b9:5b:3f:ce:85:19:aa:e2:ca:
a8:54:58:9e:fd:7a:7e:6f:65:c8:39:e2:db:7f:6c:a8:45:0e:
f1:8b:72:b5:b6:ec:25:22:f4:9e:04:38:3d:9a:70:72:39:96:
6d:b3:ba:43:ee:88:ae:af:f2:3f:3f:09:26:de:bc:98:78:7a:
de:a5:4c:e3:ef:ce:e5:7b:67:a0:80:70:51:fa:46:db:c0:aa:
46:6b:2a:4b:05:a9:17:fd:d2:63:df:c3:54:09:2f:82:ff:a4:
f3:f7:64:76:51:a3:67:65:83:35:87:1a:99:75:75:d3:8a:d1:
c5:cf:af:0b:8f:d8:5a:6e:7e:ea:ae:4d:cc:9a:ba:ec:3e:37:
6d:2c:f5:62:72:12:75:b9:bd:e8:2d:4f:32:4f:d4:cf:d5:ba:
fb:bc:07:ef:a1:1f:8c:60:93:53:ad:ed:a5:2a:72:0f:12:c7:
86:39:cd:4f:89:a9:f1:02:f2:00:42:6c:2f:77:bb:3b:7c:c3:
e8:70:5c:4b:04:df:26:55:a4:fe:e7:e0:85:5a:96:6b:63:33:
5a:42:aa:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:57:11 2026 by rpki-client