Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
File: NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft (raw, json)
Hash identifier: 4ZU+Zyubw1Pa50Fv/T1zdCyWwsG327hXZeBfT1+dbOs=
Subject key identifier: 40:0A:0E:BA:8E:2C:B3:D4:10:DE:E0:6D:2D:F2:27:92:53:96:6E:53
Authority key identifier: 34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E
Certificate issuer: /CN=34e110b59362f673eae33b66ee7aea3c4028294e
Certificate serial: 019D9B87D68DDDAC57AD8F1A1CFA0E9D6CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
Manifest number: 103A
Signing time: Fri 17 Apr 2026 13:01:03 +0000
Manifest this update: Fri 17 Apr 2026 13:01:03 +0000
Manifest next update: Sat 18 Apr 2026 13:01:03 +0000
Files and hashes: 1: NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl (hash: zo+eBUkcgmHvsmEiRkZ2KibLisMApnFCuBrHSTMN+PA=)
2: VqjhvtfIA_j9AGS9yJpDBA7pkTI.roa (hash: IZDq9Jb7er+qUs+ORA/YfhCgdw6n3hVb81p9+8Go++s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:d6:8d:dd:ac:57:ad:8f:1a:1c:fa:0e:9d:6c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e110b59362f673eae33b66ee7aea3c4028294e
Validity
Not Before: Apr 17 13:01:03 2026 GMT
Not After : Apr 18 13:01:03 2026 GMT
Subject: CN=400a0eba8e2cb3d410dee06d2df2279253966e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bf:0d:a9:46:61:b5:2d:74:70:3c:e6:08:66:
c3:5d:1d:b4:fc:ea:e3:4d:96:5e:67:0c:2b:1a:9e:
cb:e1:ff:74:df:6a:be:4c:39:33:87:52:fe:b2:13:
6b:e5:3e:09:2d:c0:d3:2b:38:4e:e7:94:5c:d8:8e:
ab:8d:f7:ea:3a:05:3c:b6:f7:c4:93:84:c9:6f:43:
41:3d:a5:a7:06:b9:9a:55:07:aa:4f:95:61:a5:9f:
4a:4e:14:9f:17:97:f4:25:14:8b:48:5d:99:2e:55:
f5:c7:b4:d4:28:71:86:f7:65:53:a9:62:07:5c:30:
24:2c:6d:79:3b:9d:dd:ce:e3:37:4f:d7:3c:c3:bd:
3f:e2:6d:d8:03:28:7b:3c:ce:71:b7:b0:b6:5e:1b:
e0:53:2e:d0:5d:bc:28:86:e4:fd:79:83:f7:46:62:
96:2f:40:55:53:2e:86:c7:f8:f3:a2:f4:2a:4c:a6:
09:70:69:07:1e:54:56:1e:07:37:6e:0e:b6:96:29:
b2:04:e7:d2:6d:7f:8a:77:34:5f:70:1f:81:1f:b8:
b2:d4:da:75:71:51:f1:16:8c:fc:89:77:25:77:f5:
65:52:5b:9c:bf:80:6c:41:28:24:57:37:d4:16:73:
ac:9f:27:70:d1:7c:56:c5:0c:c8:0d:89:56:b8:fc:
7d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0A:0E:BA:8E:2C:B3:D4:10:DE:E0:6D:2D:F2:27:92:53:96:6E:53
X509v3 Authority Key Identifier:
keyid:34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:01:07:f3:b8:97:e1:a9:ae:c6:c6:77:3d:1d:ed:d3:26:ea:
66:76:17:96:94:39:0f:01:9f:b2:56:c6:69:39:e4:dd:59:31:
ac:8a:a5:1a:38:8a:76:c9:06:b9:9b:70:13:8f:6d:11:b9:e4:
15:2a:06:96:ef:3d:31:37:e2:21:36:e2:3d:09:02:42:70:ba:
20:2f:31:be:c3:fd:a9:c6:74:f8:53:d4:db:26:4b:c2:75:85:
e8:5a:51:b5:31:1d:de:cf:9f:12:4d:5d:f5:83:c2:3c:0f:8a:
c9:77:2a:26:4d:9e:33:b0:e9:3a:21:b1:c9:8b:34:e3:b6:19:
f4:83:3b:61:ae:6f:09:f9:4f:5a:28:43:bd:18:44:57:8e:ce:
b7:5d:4e:96:e2:c1:e4:97:c9:13:06:73:1c:1b:84:41:86:32:
70:c2:11:11:eb:39:b7:c5:64:ee:58:7d:5a:99:18:b4:97:45:
a0:f9:a7:d6:44:be:f4:de:7d:29:23:a5:d6:f5:17:c1:f1:9c:
b0:54:8c:05:7a:cc:55:56:03:78:a3:90:7b:55:7f:f8:09:8d:
e5:53:ce:71:2e:72:34:33:a0:d4:78:98:1b:f6:1c:8e:6d:28:
1d:d1:57:5d:06:93:37:26:d6:2a:5c:a7:9f:98:7e:e9:c7:a3:
10:87:a2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:39:00 2026 by rpki-client