Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
File: NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft (raw, json)
Hash identifier: feJqkpVBefJJCUerSyDpptfuvRVSPhgDnsd2D4ETKOk=
Subject key identifier: 1A:2B:E7:3E:7D:8E:63:AF:FE:D6:62:4A:2E:DF:39:FB:23:CA:51:89
Authority key identifier: 34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
Certificate issuer: /CN=34e40348463c60ce9fc694060a37f4683093f045
Certificate serial: 019EBE47777BF6C22B07B1E079D2A49C5B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
Manifest number: 0D43
Signing time: Sat 13 Jun 2026 00:00:15 +0000
Manifest this update: Sat 13 Jun 2026 00:00:15 +0000
Manifest next update: Sun 14 Jun 2026 00:00:15 +0000
Files and hashes: 1: NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl (hash: oaXLRr0UzwrLoZj3ygnhCqMqUx4MMTZthp/XGWyJoyU=)
2: ghpA5fCdi4-vZdLYzD8KSMnNUUQ.roa (hash: z5taojLfDf55uPGabR8q/HQ0BFw+j/KvT8vFcA5Y8Zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:47:77:7b:f6:c2:2b:07:b1:e0:79:d2:a4:9c:5b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e40348463c60ce9fc694060a37f4683093f045
Validity
Not Before: Jun 13 00:00:15 2026 GMT
Not After : Jun 14 00:00:15 2026 GMT
Subject: CN=1a2be73e7d8e63affed6624a2edf39fb23ca5189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5c:10:93:0c:8b:b6:77:ab:c6:f3:db:59:27:
1e:5d:36:9d:73:dd:ff:63:de:97:ce:a4:88:7e:53:
57:9c:13:20:35:40:a9:50:44:33:2d:85:6c:04:01:
9e:46:45:f8:9c:aa:b2:db:6d:a5:e1:30:e5:85:6b:
e6:5a:e0:62:ec:f0:bb:d8:1c:cc:a8:4f:37:0e:21:
76:81:74:62:18:12:16:4b:9b:f5:96:e2:31:4f:ab:
3f:c2:1e:1e:69:6e:41:12:55:f0:81:42:b8:39:91:
a2:e5:5a:f9:4d:e3:ce:bb:7f:54:b0:1a:9f:7a:cd:
d2:f9:2f:a3:03:94:92:01:25:fc:68:ab:2e:e6:0b:
3a:dc:c0:27:b8:a1:ba:a4:c1:e0:2a:f5:25:d5:3a:
c8:d4:18:0b:f9:d3:f5:23:5f:19:70:e4:d8:2e:4d:
29:07:20:21:e2:c9:75:ea:5f:9a:67:0e:de:70:62:
7c:89:59:ef:12:e7:97:ee:7f:b8:3a:01:c7:6f:6c:
7e:eb:9c:60:f6:1d:50:86:46:31:9c:5a:fe:7d:75:
58:8b:96:09:e0:57:0a:6a:07:8f:f3:7b:66:86:a4:
98:7d:48:61:73:47:ea:c6:77:01:9d:b0:83:5e:3c:
22:15:81:26:9a:ed:b3:32:82:a6:9e:f2:66:f9:05:
d4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2B:E7:3E:7D:8E:63:AF:FE:D6:62:4A:2E:DF:39:FB:23:CA:51:89
X509v3 Authority Key Identifier:
keyid:34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:69:10:9e:ad:5b:7f:dd:7b:1e:44:b6:3a:5a:96:57:02:79:
cd:21:45:a1:48:13:6a:49:2a:15:b9:bf:3c:1b:a1:3e:a5:00:
6a:1a:ec:8c:3c:ae:5c:55:d8:5d:ff:14:4c:ef:dc:e4:34:72:
21:09:dc:11:11:c2:a8:51:3f:30:6a:de:1b:a3:5b:65:f4:0e:
83:79:10:dd:d2:34:76:d0:07:60:87:a4:a2:16:86:7b:ca:02:
fa:74:07:ef:fa:c1:5d:46:2f:b2:78:76:1f:fc:b3:3d:0b:4a:
23:1f:b4:22:b1:03:d2:3b:94:30:ab:9a:0f:ef:3e:47:65:71:
66:4a:81:33:38:a4:1e:eb:11:c0:e6:7c:a6:e9:f2:ac:80:4b:
21:b7:9d:f7:08:09:72:d1:5f:fb:30:82:c9:be:7a:f7:16:47:
01:15:3c:0b:f3:9f:79:83:52:7c:8b:12:59:e9:12:63:e0:1d:
20:d2:5a:18:64:72:b2:6e:9a:0b:ce:d6:12:ec:32:ec:23:ea:
0a:a0:c5:a9:a9:a6:38:5f:4b:de:61:61:91:e9:50:f4:5d:b9:
fc:ab:87:d6:83:f8:06:a1:5b:c6:4d:00:eb:e6:23:37:bf:01:
d3:92:d1:33:fd:62:f9:c1:48:1f:1d:39:ed:40:1d:58:c2:f3:
ae:ba:2a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:21:18 2026 by rpki-client