
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
File: NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft (raw, json)
Hash identifier: WhRalVFX9cV+qNsHU9Cao3hJYDN26MAm88FteVVM9Hw=
Subject key identifier: 4B:18:06:4C:F0:A1:AB:A0:AA:2F:6D:5F:60:37:D2:FA:A2:7C:48:31
Authority key identifier: 34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E
Certificate issuer: /CN=34e110b59362f673eae33b66ee7aea3c4028294e
Certificate serial: 019CADFE42EB14D03FBF6A0A780BD762F6DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
Manifest number: 0FBF
Signing time: Mon 02 Mar 2026 10:00:47 +0000
Manifest this update: Mon 02 Mar 2026 10:00:47 +0000
Manifest next update: Tue 03 Mar 2026 10:00:47 +0000
Files and hashes: 1: NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl (hash: cfZiPdYEzg+jAwEhAZ4uuZCgtOM1+TdQqrs8F1AtlaE=)
2: VqjhvtfIA_j9AGS9yJpDBA7pkTI.roa (hash: IZDq9Jb7er+qUs+ORA/YfhCgdw6n3hVb81p9+8Go++s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:42:eb:14:d0:3f:bf:6a:0a:78:0b:d7:62:f6:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e110b59362f673eae33b66ee7aea3c4028294e
Validity
Not Before: Mar 2 10:00:47 2026 GMT
Not After : Mar 3 10:00:47 2026 GMT
Subject: CN=4b18064cf0a1aba0aa2f6d5f6037d2faa27c4831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:77:b3:7f:67:57:7a:6c:02:72:cf:4b:15:cb:
af:ba:75:f1:c8:52:d4:8c:6d:0f:5f:d6:7d:cc:24:
ed:02:50:65:63:64:cf:9d:63:17:81:19:4a:72:ae:
72:18:c8:b8:b6:0d:5d:3b:e3:35:e5:9f:4d:04:1f:
0e:ca:8e:41:ba:98:41:47:72:70:3e:62:b7:32:45:
02:fe:89:31:90:a1:ca:3f:11:0e:18:45:a2:52:03:
16:73:8f:92:17:a7:46:72:5b:14:69:14:b6:d1:74:
c3:76:cf:9f:86:53:4b:08:d1:69:23:21:68:37:82:
a0:8e:2e:4f:8d:05:89:92:75:7b:eb:3d:5b:a7:73:
3b:1f:18:15:fb:5f:cf:5b:aa:09:b3:df:c1:1a:3c:
bb:a1:79:74:58:60:32:3c:4d:7f:99:f8:77:19:d0:
b9:40:75:a2:12:97:28:bf:91:47:c0:2b:65:b0:bd:
92:26:33:85:a9:28:58:7c:5e:03:2e:0d:3b:65:d8:
f5:99:3d:d1:e5:56:5b:b7:c2:16:0b:41:16:c7:36:
1c:ed:ee:d8:fe:3d:07:36:e0:15:23:35:7d:83:38:
8f:64:5c:28:18:2b:89:20:e6:28:ba:d2:7e:86:f7:
96:6b:07:9c:ee:fb:af:ff:6f:b1:25:ed:40:4d:83:
00:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:18:06:4C:F0:A1:AB:A0:AA:2F:6D:5F:60:37:D2:FA:A2:7C:48:31
X509v3 Authority Key Identifier:
keyid:34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:0f:1b:c3:80:22:69:b2:8f:fb:7e:dd:f1:7b:a1:30:c7:18:
cd:ec:f7:41:9a:9a:2e:f0:53:f1:16:78:40:3d:4b:c2:9f:f4:
50:f1:c3:c1:54:3e:25:54:0c:b3:8e:fa:64:25:2c:0e:40:a7:
e0:c4:95:c0:44:21:57:48:8e:10:8f:ff:7e:8e:62:0b:dd:d9:
30:38:d0:5e:16:42:a7:65:b2:d0:97:c6:12:6e:0d:35:75:14:
96:18:c5:7f:70:95:a9:7d:9f:8b:9b:e1:43:9a:9b:ee:f4:13:
7d:97:bd:85:d2:49:c2:6b:eb:a8:d2:33:21:e3:15:3f:1c:78:
71:65:e3:a1:5c:88:33:42:54:61:cc:a5:89:f4:48:71:d7:ad:
1f:f2:d8:8e:6b:3e:39:0e:a7:c8:86:7a:ac:8f:6d:06:32:76:
63:6a:96:ea:c6:ca:5d:38:2c:5b:7d:ec:af:e4:ba:3b:d4:56:
30:47:bf:0c:6c:be:cc:d8:9b:67:9e:52:90:cd:12:e8:e2:9a:
b9:9e:03:c7:35:b1:2f:93:24:16:5e:e5:71:8f:49:c5:6b:c3:
17:ce:07:6f:75:b8:1b:01:44:6f:ff:e4:81:af:16:2f:1c:58:
d5:76:59:cd:b1:8d:83:4b:5b:20:d6:75:0a:ea:8e:b2:49:51:
26:8d:23:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/kLrFNA/v2oKeAvXYvbbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZTExMGI1OTM2MmY2NzNlYWUzM2I2NmVlN2FlYTNjNDAy
ODI5NGUwHhcNMjYwMzAyMTAwMDQ3WhcNMjYwMzAzMTAwMDQ3WjAzMTEwLwYDVQQD
Eyg0YjE4MDY0Y2YwYTFhYmEwYWEyZjZkNWY2MDM3ZDJmYWEyN2M0ODMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nezf2dXemwCcs9LFcuvunXxyFLU
jG0PX9Z9zCTtAlBlY2TPnWMXgRlKcq5yGMi4tg1dO+M15Z9NBB8Oyo5BuphBR3Jw
PmK3MkUC/okxkKHKPxEOGEWiUgMWc4+SF6dGclsUaRS20XTDds+fhlNLCNFpIyFo
N4Kgji5PjQWJknV76z1bp3M7HxgV+1/PW6oJs9/BGjy7oXl0WGAyPE1/mfh3GdC5
QHWiEpcov5FHwCtlsL2SJjOFqShYfF4DLg07Zdj1mT3R5VZbt8IWC0EWxzYc7e7Y
/j0HNuAVIzV9gziPZFwoGCuJIOYoutJ+hveWawec7vuv/2+xJe1ATYMAEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEsYBkzwoaugqi9tX2A30vqifEgxMB8GA1UdIwQY
MBaAFDThELWTYvZz6uM7Zu566jxAKClOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk9FUXRaTmk5blBxNHp0bTducnFQRUFvS1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wYmY4ZmItMTYwNC00Y2QxLTlkYTYt
MWJiMjdjNWQzOTdlLzEvTk9FUXRaTmk5blBxNHp0bTducnFQRUFvS1U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8wYmY4ZmItMTYwNC00Y2QxLTlkYTYtMWJiMjdjNWQzOTdl
LzEvTk9FUXRaTmk5blBxNHp0bTducnFQRUFvS1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmw8bw4Ai
abKP+37d8XuhMMcYzez3QZqaLvBT8RZ4QD1Lwp/0UPHDwVQ+JVQMs476ZCUsDkCn
4MSVwEQhV0iOEI//fo5iC93ZMDjQXhZCp2Wy0JfGEm4NNXUUlhjFf3CVqX2fi5vh
Q5qb7vQTfZe9hdJJwmvrqNIzIeMVPxx4cWXjoVyIM0JUYcylifRIcdetH/LYjms+
OQ6nyIZ6rI9tBjJ2Y2qW6sbKXTgsW33sr+S6O9RWMEe/DGy+zNibZ55SkM0S6OKa
uZ4DxzWxL5MkFl7lcY9JxWvDF84Hb3W4GwFEb//kga8WLxxY1XZZzbGNg0tbINZ1
CuqOsklRJo0jOw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:38:30 2026 by rpki-client