Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
File: NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft (raw, json)
Hash identifier: xHCqPXiVmv2uIOUTDBlxG5j+Yn1m/Eju/zzlPpJ1K9M=
Subject key identifier: 67:DD:4D:77:DA:62:88:BF:DA:B5:54:A2:86:13:C3:9E:52:71:12:DF
Authority key identifier: 34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E
Certificate issuer: /CN=34e110b59362f673eae33b66ee7aea3c4028294e
Certificate serial: 01A12F20EDB36C6CD90E8AF2B5F99A57A3D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
Manifest number: 1215
Signing time: Mon 12 Oct 2026 08:00:49 +0000
Manifest this update: Mon 12 Oct 2026 08:00:49 +0000
Manifest next update: Tue 13 Oct 2026 08:00:49 +0000
Files and hashes: 1: NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl (hash: okTtO1niWPAAAr0JR4BaFjCd635vYmyytCRd/De0Dw8=)
2: aBl3-0AcK6bmhuQTyZ-3MgOZD0c.roa (hash: nalwbz5d9t6qM/4VzXCmDeulbj2o3iXz5ssXZiGjYK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:20:ed:b3:6c:6c:d9:0e:8a:f2:b5:f9:9a:57:a3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e110b59362f673eae33b66ee7aea3c4028294e
Validity
Not Before: Oct 12 08:00:49 2026 GMT
Not After : Oct 13 08:00:49 2026 GMT
Subject: CN=67dd4d77da6288bfdab554a28613c39e527112df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2b:21:2f:97:46:43:ca:2e:55:26:bf:68:48:
31:cd:a5:e2:25:12:ce:66:ef:b6:5c:ae:19:2e:30:
bb:6f:34:0e:6b:5d:95:5b:59:34:1d:22:57:d7:77:
76:51:f0:59:a9:bd:03:c3:15:56:9b:76:08:78:52:
d0:ea:0d:16:81:45:d6:b5:dd:ec:ef:2e:29:2a:bf:
19:ce:56:a6:07:df:2f:d5:0d:08:6e:82:ac:02:33:
4a:32:7b:28:85:b7:28:26:40:6d:12:c5:76:a8:61:
5d:c7:8b:ff:6a:e9:db:fc:98:26:7b:fe:49:eb:25:
66:22:e1:50:9a:a1:32:a0:84:bc:c2:a1:51:fc:39:
26:f6:47:1d:7d:ac:47:9f:c7:e7:56:70:04:07:6d:
08:5c:02:12:15:81:24:20:a3:81:d9:58:15:ab:34:
56:6a:68:ae:b3:4b:02:88:64:d7:d9:62:e0:55:c5:
a9:1c:f3:4d:37:c1:c4:ba:ef:4c:d3:9b:fa:9d:67:
9e:85:43:dd:9a:a6:16:96:9a:51:f4:82:58:8f:ed:
30:4a:74:88:b8:21:40:f0:ad:2a:c5:b1:3a:95:55:
a2:37:12:65:e4:b6:5e:33:f9:cb:75:6b:bc:bd:90:
75:ab:85:b7:58:8c:e7:e8:b7:3d:b4:7a:d6:ce:b2:
02:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DD:4D:77:DA:62:88:BF:DA:B5:54:A2:86:13:C3:9E:52:71:12:DF
X509v3 Authority Key Identifier:
keyid:34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6a:8f:a5:9d:76:8b:be:5b:5e:ce:ab:0c:1c:e3:6e:0b:ca:
2b:15:14:c6:d8:fb:3b:14:cc:f5:a9:45:34:51:f6:80:43:1b:
86:59:63:78:81:bb:ac:31:46:82:3a:36:18:bf:f5:da:63:1f:
0d:e1:09:a3:11:7e:46:94:bc:38:20:59:03:ce:c4:09:2b:a9:
11:11:77:90:b2:7b:bd:a8:95:a8:e7:54:e6:a1:2e:01:f6:37:
83:d5:48:02:3b:1c:47:85:d2:5a:5f:a5:01:2f:c3:97:5c:e8:
a4:5a:74:d6:15:af:2e:60:c0:cf:b8:f8:c2:76:2c:db:f6:40:
c3:ef:12:1b:2f:51:de:37:4a:41:34:6b:b3:be:1d:32:5a:3a:
f9:60:79:9c:03:4a:b4:5e:20:31:1e:33:97:5f:90:2b:56:50:
97:57:35:a2:11:60:1d:78:0d:e4:2b:74:03:3a:01:08:22:ca:
bb:3b:c9:f8:92:41:6c:a2:bc:52:10:a0:26:55:b5:09:cf:55:
30:a7:17:9d:07:92:6d:ce:0f:d5:51:82:1b:0f:fd:03:f5:34:
22:cd:39:19:63:18:57:b0:6a:14:c5:f6:cc:5f:a0:05:d7:06:
86:d8:76:c4:53:d8:c0:97:df:d0:af:f9:db:40:b1:2d:16:e7:
ff:55:5f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 17:01:01 2026 by rpki-client