Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
File: noHdqtiPcHFhLXw7dhjiTRpSM7s.mft (raw, json)
Hash identifier: H/DfCq6lIoB6P3/tkt7JsiNAZ0JBzFSOe4Kdrt5QWr8=
Subject key identifier: 12:1F:A8:45:B3:A5:AE:C8:F6:21:7A:12:C0:17:57:43:E3:56:E1:38
Authority key identifier: 9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
Certificate issuer: /CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Certificate serial: 019D37523BF8007B6A3554799285523202D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
Manifest number: 0F3A
Signing time: Sun 29 Mar 2026 02:00:29 +0000
Manifest this update: Sun 29 Mar 2026 02:00:29 +0000
Manifest next update: Mon 30 Mar 2026 02:00:29 +0000
Files and hashes: 1: WiXt3vLRsEbHO4V69Ernp9Pa3Dc.roa (hash: 5/0dAfxj8roSB2N+rzuNs50RghH7Q+7eLmnDrf3ejec=)
2: noHdqtiPcHFhLXw7dhjiTRpSM7s.crl (hash: FgaCTBAAkMnIHnWT3xx/+P9FbbNAgOuthExjf312hpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:3b:f8:00:7b:6a:35:54:79:92:85:52:32:02:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Validity
Not Before: Mar 29 02:00:29 2026 GMT
Not After : Mar 30 02:00:29 2026 GMT
Subject: CN=121fa845b3a5aec8f6217a12c0175743e356e138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:22:b9:e0:40:ab:4f:45:30:6c:86:8c:d9:af:
bb:60:64:13:01:c9:cc:04:35:64:d6:4e:1f:0e:ff:
95:5a:ad:bf:81:b5:9c:a7:e7:8b:55:30:82:b5:72:
5b:a5:b6:00:3c:3d:65:f5:a2:fb:b8:2e:cd:58:31:
e3:b7:31:d2:b8:84:72:9c:69:c1:aa:6e:69:ae:c1:
d1:ac:08:c0:69:a5:fe:85:b2:67:cb:66:52:9e:0e:
3f:bb:d9:ba:ae:8b:3e:6d:19:ad:39:02:03:7f:99:
f9:da:cf:2d:8f:41:3d:57:ae:34:99:ba:c9:08:39:
ec:4f:1b:72:75:f9:71:ee:54:ed:4e:bd:48:31:75:
c5:e5:dd:0d:0c:4f:40:50:80:a4:bf:c4:e5:69:55:
31:d4:fa:ec:ff:81:5e:71:fd:fb:14:ad:0b:b6:7d:
ab:e8:92:16:f3:b7:a9:d4:f8:92:3d:67:d7:9f:ca:
99:59:c4:08:3d:2a:74:14:8d:54:d0:a7:6c:cf:31:
55:3c:9b:49:c7:c2:28:ae:08:e4:9a:84:a0:1d:3f:
70:6a:be:fa:13:fe:81:08:70:1e:d3:47:ca:62:a8:
53:35:35:05:2a:20:de:27:36:92:53:c4:2e:f7:c5:
7b:fd:9c:7c:91:49:7d:b2:b9:27:48:da:fb:22:d9:
d0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1F:A8:45:B3:A5:AE:C8:F6:21:7A:12:C0:17:57:43:E3:56:E1:38
X509v3 Authority Key Identifier:
keyid:9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:94:38:75:21:b7:33:f9:af:96:54:3f:2b:22:37:77:01:c6:
87:bf:4b:5f:b6:a6:15:92:30:68:ca:47:c1:56:7a:9e:91:c7:
a0:d0:dc:95:15:50:c0:f2:67:7a:10:28:14:43:fa:71:64:dc:
ee:e1:96:dc:08:10:cc:36:c2:fa:65:e6:87:d6:58:09:b3:8d:
98:f7:ff:91:85:52:b5:67:58:8d:60:fa:21:2f:e7:f3:75:3a:
95:0d:7d:c5:cb:a7:b1:38:cd:d7:ae:39:c2:15:1c:69:44:80:
de:05:ac:59:c5:ed:a4:6b:b3:7f:c1:c9:59:cb:9c:a2:77:7d:
84:4b:a8:6b:18:8e:fc:0c:4c:9e:3b:96:09:7d:76:ec:46:09:
29:f1:72:ac:06:66:e5:24:ee:e2:58:99:8e:a5:df:53:d1:ef:
d4:c8:51:03:e8:93:a0:81:7c:c9:2a:5a:84:7d:90:03:a5:cb:
05:e8:21:8e:f2:37:fd:e0:9a:f7:38:36:90:80:a6:c0:91:84:
7e:68:8b:cf:6f:ac:fa:68:e3:70:85:1e:47:62:ee:44:d0:5d:
44:47:53:f3:2d:53:f9:20:8b:4e:e7:43:e1:14:cc:40:95:70:
bf:8c:22:93:e6:5d:3b:79:79:c8:c9:5b:e6:bb:af:c2:9d:d4:
de:ea:e1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:20 2026 by rpki-client