Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
File: NoBlGroGa0CEp-0g1_UgGyKWwZc.mft (raw, json)
Hash identifier: h4DKp5xUtCoCfItZAxBXaRvmsqVroMBvcGD8SniS/3w=
Subject key identifier: EA:A0:23:B8:11:E8:F1:6D:C7:B2:39:FA:B9:CF:D6:C3:B6:E2:63:9C
Authority key identifier: 36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
Certificate issuer: /CN=3680651aba066b4084a7ed20d7f5201b2296c197
Certificate serial: 019D37C019B70C03DD62ED8962C86059955D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
Manifest number: 08B0
Signing time: Sun 29 Mar 2026 04:00:29 +0000
Manifest this update: Sun 29 Mar 2026 04:00:29 +0000
Manifest next update: Mon 30 Mar 2026 04:00:29 +0000
Files and hashes: 1: 4OrfC0gESmi91J763IQoNP33VaY.roa (hash: UOBol6M5aYlHh1KzK/jjTCQLc+/4wpm6CbL5n4iAyts=)
2: NoBlGroGa0CEp-0g1_UgGyKWwZc.crl (hash: WcSezXImPb9g4k3urciqLCQTHyTx7nzr6216mfuZnTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:19:b7:0c:03:dd:62:ed:89:62:c8:60:59:95:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3680651aba066b4084a7ed20d7f5201b2296c197
Validity
Not Before: Mar 29 04:00:29 2026 GMT
Not After : Mar 30 04:00:29 2026 GMT
Subject: CN=eaa023b811e8f16dc7b239fab9cfd6c3b6e2639c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:28:02:b4:0d:6e:d8:7a:f9:bd:ec:b3:be:8a:
46:66:fb:52:b2:8d:09:43:ff:24:70:50:5f:f1:6b:
45:47:af:f6:0d:10:7f:f3:70:c0:b9:44:10:67:5a:
e3:80:91:0f:9b:9d:b2:00:c9:c9:31:01:ab:77:d6:
ef:ce:f4:89:8d:26:fe:3a:41:fb:fd:60:72:01:86:
a6:c1:4b:de:11:73:ca:eb:6d:14:30:7b:59:46:a5:
56:c4:40:3e:0f:7f:9e:3d:73:d1:aa:27:b4:06:92:
8a:f8:03:bd:de:d4:ab:9c:6c:a2:35:0e:75:18:c0:
e3:79:3e:81:a9:56:a0:85:6a:52:6c:06:8d:6b:b8:
b0:9a:59:63:e3:c2:24:3c:82:da:68:0e:1d:24:42:
16:a8:e3:fe:e7:0a:5c:a8:ba:18:c3:c7:b7:f1:53:
5e:c5:6f:56:c2:84:41:b5:96:74:8d:fc:ca:49:7a:
14:8a:f4:9a:69:15:32:a9:1d:85:2f:a9:af:8c:a8:
e8:e9:db:a3:14:82:2c:6c:78:f0:59:c1:44:93:05:
28:11:2c:72:d4:7e:e3:dc:a0:55:77:5d:56:dc:05:
8a:31:4e:e7:11:8c:68:bc:c7:c6:ca:37:85:56:e9:
6a:b1:03:82:22:ff:47:24:a7:af:65:d1:dd:46:37:
bc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A0:23:B8:11:E8:F1:6D:C7:B2:39:FA:B9:CF:D6:C3:B6:E2:63:9C
X509v3 Authority Key Identifier:
keyid:36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:21:ae:65:78:a8:07:b9:ff:0b:0e:62:f5:31:69:71:53:a4:
b0:ea:7f:0a:88:2e:db:0b:45:4f:81:49:b8:89:6f:e4:73:99:
cb:6a:c7:49:4f:3e:b2:fc:20:7c:1d:d7:ef:93:62:a8:bb:41:
0a:0e:89:4f:99:74:c3:cd:a2:c7:f0:b6:13:8e:02:20:f3:04:
bf:5a:5b:5a:17:f1:0f:67:2d:73:c0:e8:a2:72:c3:b8:4a:da:
01:00:c5:fa:00:49:db:f9:53:7f:e8:e1:9b:5f:b5:d5:e0:c9:
cb:59:09:3a:f5:0e:8a:85:d1:ac:ee:22:80:c9:3c:80:08:d1:
21:78:7a:b2:4f:74:2d:9e:2c:90:e5:74:1b:9d:0f:5b:95:3e:
0b:74:bb:c5:73:29:ca:58:d1:66:18:c2:17:95:e9:d6:b5:d9:
ea:f8:fa:d9:6f:46:a3:9b:5c:86:11:f4:d5:be:5b:9f:1e:25:
33:f3:57:10:8d:b9:67:b0:7b:40:b0:0c:8e:ae:d1:01:06:be:
16:77:75:e7:d8:14:68:31:6a:74:26:1b:4a:1a:82:37:36:56:
d3:d7:9c:dd:fe:60:61:6e:91:3a:b6:1c:da:47:2d:85:6b:07:
12:d5:0f:58:d3:9e:ef:57:33:57:3a:27:f1:3e:d5:cd:85:41:
74:01:3f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:15 2026 by rpki-client