Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
File: NoEciv-vsKwfX39v97ZLtwNGRX0.mft (raw, json)
Hash identifier: dobP9bIX5NuZdoWfzMdkscZfRxwxiDcGbzrGcHAt+7E=
Subject key identifier: 0E:66:55:18:0C:B7:04:E1:A2:64:CC:B1:E2:8F:5A:8F:E3:D2:95:07
Authority key identifier: 36:81:1C:8A:FF:AF:B0:AC:1F:5F:7F:6F:F7:B6:4B:B7:03:46:45:7D
Certificate issuer: /CN=36811c8affafb0ac1f5f7f6ff7b64bb70346457d
Certificate serial: 019CA9EA800D5FC7C79D37F368DC68E4C8F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
Manifest number: 09F7
Signing time: Sun 01 Mar 2026 15:00:43 +0000
Manifest this update: Sun 01 Mar 2026 15:00:43 +0000
Manifest next update: Mon 02 Mar 2026 15:00:43 +0000
Files and hashes: 1: Ac4l1p_bZl-wINdkBGjJK6t5WOA.roa (hash: mExfVg4mEZkQfa/o53ZXrQKDJoTaHqGKP/mA0/Gw99A=)
2: NoEciv-vsKwfX39v97ZLtwNGRX0.crl (hash: YjiJ4XJuPx/eGwC6n293w19L9q2nJXa7A4EuKdc5tuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:80:0d:5f:c7:c7:9d:37:f3:68:dc:68:e4:c8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36811c8affafb0ac1f5f7f6ff7b64bb70346457d
Validity
Not Before: Mar 1 15:00:43 2026 GMT
Not After : Mar 2 15:00:43 2026 GMT
Subject: CN=0e6655180cb704e1a264ccb1e28f5a8fe3d29507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7a:14:ea:01:01:d9:ab:fa:c4:0b:00:89:2e:
91:9a:f0:25:68:09:14:20:e8:b9:40:07:d9:a7:74:
e6:88:f7:5b:ba:4c:1d:3d:1c:7f:3e:9f:b0:ce:92:
89:10:97:fc:4b:9d:e9:6c:fb:3f:94:b2:2c:ae:62:
7f:fa:b5:1d:77:35:f0:b9:9c:a4:9c:54:bf:95:64:
e0:9b:76:49:3f:00:f7:03:9a:f3:a8:1d:a0:42:f0:
5d:c9:2f:e3:ec:1e:82:9c:f0:f0:49:76:84:66:06:
88:d1:de:90:c6:2e:c9:a5:28:7e:e3:13:e0:b8:24:
4c:68:d6:c8:a7:d3:55:98:46:90:07:f5:df:dd:14:
bf:33:50:9b:9c:84:46:61:36:31:6c:21:f0:7d:73:
15:ed:e6:9b:e6:6d:8e:5b:a2:a2:b3:8a:47:b9:ea:
7a:fa:01:8a:5f:f6:a8:d6:d3:d5:bc:45:c8:22:5a:
c7:75:a9:f8:e9:03:1e:77:15:9a:c7:17:02:75:08:
27:42:e8:24:70:61:60:9b:40:48:88:c2:b6:53:7d:
08:dd:39:cf:4c:f0:a7:39:b5:86:e5:96:85:75:66:
da:3e:e2:66:96:16:b5:a2:ba:2b:6f:47:64:b5:36:
62:37:e1:ec:e6:22:70:ac:88:40:5d:bb:a3:33:d3:
24:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:66:55:18:0C:B7:04:E1:A2:64:CC:B1:E2:8F:5A:8F:E3:D2:95:07
X509v3 Authority Key Identifier:
keyid:36:81:1C:8A:FF:AF:B0:AC:1F:5F:7F:6F:F7:B6:4B:B7:03:46:45:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:51:65:08:c0:97:45:6e:78:f5:6c:d0:23:e5:dc:ac:23:cf:
d3:6d:ad:5e:c2:75:93:1e:b3:4a:6d:87:1a:ea:83:4d:b9:ec:
e2:ca:36:33:f7:c7:46:c6:db:d7:bd:13:c7:20:7f:31:0a:b7:
b3:e1:be:33:0c:ac:b1:77:e9:5e:83:0b:2c:cd:cb:df:cf:04:
1f:76:69:80:f6:0a:77:41:1e:04:4e:58:61:7a:a6:fa:0a:6e:
cb:d9:6f:e1:38:77:32:47:35:78:dd:66:00:8f:49:d6:0d:a5:
02:af:db:06:c5:8a:f2:3b:d0:61:41:cb:03:bc:f9:bd:35:3a:
cb:92:24:58:de:7f:b0:f4:06:2d:69:00:d7:cc:0c:96:40:0e:
d8:b6:cb:42:87:27:4c:4f:3c:9b:99:59:8d:4a:b6:94:e1:bd:
bf:ae:cf:66:87:c3:a9:68:34:c3:c4:41:57:de:29:ad:33:04:
b1:2c:20:c8:60:e8:bc:71:4b:b2:b9:57:03:ae:91:f4:cc:e3:
a1:c7:1e:ae:f8:2a:98:1f:e1:ee:55:14:23:05:ce:a8:2d:bc:
85:55:66:53:e0:02:9c:df:73:e7:80:b5:60:b9:b1:d4:85:b2:
81:1e:b1:86:e6:17:ae:f5:6e:50:90:09:cf:c9:a5:02:ea:43:
19:d3:5a:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp6oANX8fHnTfzaNxo5Mj5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ODExYzhhZmZhZmIwYWMxZjVmN2Y2ZmY3YjY0YmI3MDM0
NjQ1N2QwHhcNMjYwMzAxMTUwMDQzWhcNMjYwMzAyMTUwMDQzWjAzMTEwLwYDVQQD
EygwZTY2NTUxODBjYjcwNGUxYTI2NGNjYjFlMjhmNWE4ZmUzZDI5NTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3oU6gEB2av6xAsAiS6RmvAlaAkU
IOi5QAfZp3TmiPdbukwdPRx/Pp+wzpKJEJf8S53pbPs/lLIsrmJ/+rUddzXwuZyk
nFS/lWTgm3ZJPwD3A5rzqB2gQvBdyS/j7B6CnPDwSXaEZgaI0d6Qxi7JpSh+4xPg
uCRMaNbIp9NVmEaQB/Xf3RS/M1CbnIRGYTYxbCHwfXMV7eab5m2OW6Kis4pHuep6
+gGKX/ao1tPVvEXIIlrHdan46QMedxWaxxcCdQgnQugkcGFgm0BIiMK2U30I3TnP
TPCnObWG5ZaFdWbaPuJmlha1ororb0dktTZiN+Hs5iJwrIhAXbujM9Mk3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5mVRgMtwThomTMseKPWo/j0pUHMB8GA1UdIwQY
MBaAFDaBHIr/r7CsH19/b/e2S7cDRkV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm9FY2l2LXZzS3dmWDM5djk3Wkx0d05HUlgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84YmRiNjgtNzAxNi00NjhiLTk3NTEt
MGY1OTUyN2YzNGNiLzEvTm9FY2l2LXZzS3dmWDM5djk3Wkx0d05HUlgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi84YmRiNjgtNzAxNi00NjhiLTk3NTEtMGY1OTUyN2YzNGNi
LzEvTm9FY2l2LXZzS3dmWDM5djk3Wkx0d05HUlgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlVFlCMCX
RW549WzQI+XcrCPP022tXsJ1kx6zSm2HGuqDTbns4so2M/fHRsbb170TxyB/MQq3
s+G+MwyssXfpXoMLLM3L388EH3ZpgPYKd0EeBE5YYXqm+gpuy9lv4Th3Mkc1eN1m
AI9J1g2lAq/bBsWK8jvQYUHLA7z5vTU6y5IkWN5/sPQGLWkA18wMlkAO2LbLQocn
TE88m5lZjUq2lOG9v67PZofDqWg0w8RBV94prTMEsSwgyGDovHFLsrlXA66R9Mzj
occervgqmB/h7lUUIwXOqC28hVVmU+ACnN9z54C1YLmx1IWygR6xhuYXrvVuUJAJ
z8mlAupDGdNa0Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:14:26 2026 by rpki-client