Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
File: NoBlGroGa0CEp-0g1_UgGyKWwZc.mft (raw, json)
Hash identifier: OUpZ2iYCLgcIbt/Gx2qNorkRuZUBLmEKWVIVjLvnPP8=
Subject key identifier: 22:0D:F6:05:47:4A:5C:02:5D:CC:77:64:AD:7C:B6:AD:32:7F:3B:88
Authority key identifier: 36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
Certificate issuer: /CN=3680651aba066b4084a7ed20d7f5201b2296c197
Certificate serial: 019EB9FCEB1805B57D921FEEF583B2C598D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
Manifest number: 0978
Signing time: Fri 12 Jun 2026 04:00:20 +0000
Manifest this update: Fri 12 Jun 2026 04:00:20 +0000
Manifest next update: Sat 13 Jun 2026 04:00:20 +0000
Files and hashes: 1: 4OrfC0gESmi91J763IQoNP33VaY.roa (hash: UOBol6M5aYlHh1KzK/jjTCQLc+/4wpm6CbL5n4iAyts=)
2: NoBlGroGa0CEp-0g1_UgGyKWwZc.crl (hash: RevUgKVGaFrV6CxmzgEcKhOq57VaYLQPkzOONReMwFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:fc:eb:18:05:b5:7d:92:1f:ee:f5:83:b2:c5:98:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3680651aba066b4084a7ed20d7f5201b2296c197
Validity
Not Before: Jun 12 04:00:20 2026 GMT
Not After : Jun 13 04:00:20 2026 GMT
Subject: CN=220df605474a5c025dcc7764ad7cb6ad327f3b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:34:3d:62:e3:8a:51:f0:8d:6c:14:5b:05:61:
ea:16:ee:aa:90:9f:3b:f5:bb:ae:8c:77:d0:37:cd:
a8:33:56:3a:0f:89:d4:93:00:04:aa:a2:29:09:21:
c5:df:44:f9:f4:47:3c:75:25:71:09:17:d8:3e:96:
d7:8f:f5:37:01:8c:01:97:58:ae:f1:0f:a5:c8:1a:
7e:bd:86:23:94:2a:f6:78:b7:5b:16:c6:45:c1:8f:
d0:76:38:25:2c:20:87:6a:87:d0:49:fb:79:12:53:
c3:23:bd:7a:cc:af:a9:13:53:b0:87:4a:1b:d3:5a:
d7:a7:61:ca:e0:81:1b:53:d7:0a:3b:c9:2a:df:8a:
91:2a:7d:a4:40:6e:8f:f8:9f:27:e2:a1:ed:2b:49:
39:66:87:b3:66:7a:8c:9c:ab:62:26:16:7d:18:b4:
93:26:83:9e:c4:02:f0:fd:28:85:a8:7d:b1:e7:4d:
6b:e0:90:7c:81:3d:e8:a0:d0:fb:62:76:34:3e:28:
03:1c:91:76:57:75:b2:6f:43:92:c6:bf:3a:23:d2:
14:9b:35:ad:de:4c:a3:cc:c3:52:e7:1d:7c:ee:5c:
20:9f:0a:35:b4:00:42:05:98:c3:cc:6b:f3:4f:8d:
93:60:27:65:c6:23:87:64:6b:41:50:1a:e2:31:d2:
6c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0D:F6:05:47:4A:5C:02:5D:CC:77:64:AD:7C:B6:AD:32:7F:3B:88
X509v3 Authority Key Identifier:
keyid:36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:2c:2f:50:61:12:56:4d:87:32:ae:13:14:13:05:dc:9a:5e:
df:16:25:38:be:48:3d:e9:56:c4:f2:af:0e:10:b1:19:00:6c:
1c:cd:29:15:c0:14:4e:d7:df:ed:39:1c:c6:19:dd:70:a5:58:
50:4b:c2:15:d1:64:5c:eb:7b:d3:cf:ee:17:95:52:39:e9:06:
65:e1:53:cd:bc:0f:c8:65:14:30:1b:26:60:ea:ef:e9:06:ff:
3e:2f:54:6b:92:4d:45:a8:00:db:f3:91:b8:15:9f:b0:8b:5c:
46:79:29:dd:87:b3:41:f0:0b:fd:72:5a:f9:9c:fb:19:ce:f7:
d7:f1:2f:a6:c0:01:2a:20:aa:63:4f:82:f2:e6:0c:31:5e:e3:
4e:0c:25:d0:72:82:aa:55:78:cc:da:d7:15:28:09:db:57:b6:
79:11:48:0e:00:c2:85:0c:5b:9c:8e:7c:be:d0:07:71:3d:2b:
38:33:db:79:02:3c:13:6d:88:18:51:cb:29:80:25:70:0d:90:
c0:98:a3:0e:06:d8:9e:d1:2d:fa:42:8f:f1:3d:b9:df:bd:a8:
c2:04:8a:43:c7:fc:b6:e2:6b:c0:4b:bd:e6:31:47:91:c6:47:
83:5f:38:2e:22:51:91:6b:18:3d:c5:a0:52:dd:57:63:e6:e7:
5f:7c:12:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:11:48 2026 by rpki-client