Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft
File: noBwLuah3L864lehmUFfWbgzjqQ.mft (raw, json)
Hash identifier: UfdPzZHbKYyktSYiizAcJz3wegTWUWzYRRB11CKTeHg=
Subject key identifier: AE:19:5A:CA:5A:B0:CA:DC:11:22:95:EF:93:EA:C7:A9:DE:D9:B3:B7
Authority key identifier: 9E:80:70:2E:E6:A1:DC:BF:3A:E2:57:A1:99:41:5F:59:B8:33:8E:A4
Certificate issuer: /CN=9e80702ee6a1dcbf3ae257a199415f59b8338ea4
Certificate serial: 019CACB4830733D2F8B1FBD3017A1751CB10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 04:00:36 +0000
Manifest this update: Mon 02 Mar 2026 04:00:36 +0000
Manifest next update: Tue 03 Mar 2026 04:00:36 +0000
Files and hashes: 1: 7RZneK1-WhczwVXQZA7asvVmG0o.roa (hash: FToOU7r9z4r8w9cG4+WQTnBdMEmKBFJWnIOgnLoJvLs=)
2: noBwLuah3L864lehmUFfWbgzjqQ.crl (hash: 8Z/JgDk31ugaYaSKrOiVrmmPkk7LSbOBKuu7XQwKmEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:83:07:33:d2:f8:b1:fb:d3:01:7a:17:51:cb:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e80702ee6a1dcbf3ae257a199415f59b8338ea4
Validity
Not Before: Mar 2 04:00:36 2026 GMT
Not After : Mar 3 04:00:36 2026 GMT
Subject: CN=ae195aca5ab0cadc112295ef93eac7a9ded9b3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:89:d0:a4:26:22:9b:20:93:34:08:a9:44:
ff:71:61:9e:3d:81:14:f4:67:17:63:71:bf:1e:25:
ee:78:1f:5f:fe:70:d3:96:99:52:d0:db:63:1c:67:
b7:b0:23:ac:43:e4:5e:24:a1:ae:69:e2:b7:83:8c:
11:f6:13:e2:93:5e:71:a2:6c:dc:3d:d2:e4:39:3b:
d2:0f:d3:86:88:4e:1a:f4:17:7c:74:2a:8e:e3:21:
6c:0d:8f:f1:dd:96:e5:0d:9b:d8:45:bc:1f:30:58:
95:ea:b7:22:62:fe:76:b4:dc:4a:b6:23:99:e3:2f:
d8:72:90:e3:3c:c5:2c:cd:90:e1:bb:d9:4d:ac:23:
e4:92:16:aa:a5:4e:0d:dc:98:fd:94:fb:74:f9:23:
38:bf:57:8a:60:29:3d:a6:39:67:8b:56:9a:cb:50:
7b:67:8c:e6:ed:2e:48:5a:62:c8:cd:fc:bc:72:a7:
ee:d2:e6:ba:72:76:c9:e7:6b:98:e1:f1:8e:19:3d:
67:fd:fe:06:fa:1e:3a:90:a5:16:ca:a9:a0:03:a9:
c6:62:6e:6d:dd:8a:d0:50:ff:24:0a:fd:b2:7a:94:
82:64:a1:73:f2:eb:dc:b0:a6:c5:6f:0e:aa:74:10:
0e:e7:48:9c:ba:7c:9a:0f:79:7f:85:af:40:20:f1:
a1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:19:5A:CA:5A:B0:CA:DC:11:22:95:EF:93:EA:C7:A9:DE:D9:B3:B7
X509v3 Authority Key Identifier:
keyid:9E:80:70:2E:E6:A1:DC:BF:3A:E2:57:A1:99:41:5F:59:B8:33:8E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:0c:c2:4a:c1:0c:4a:37:72:ad:28:71:7c:67:81:49:bd:3b:
52:0d:8d:b6:8d:6b:c1:e1:0b:2f:4b:92:d3:ce:f6:2e:93:78:
d9:4f:97:e0:54:83:bd:6c:98:7f:e8:bb:64:b7:ad:31:27:a0:
47:fa:62:ed:aa:05:78:b8:a2:71:94:89:71:24:12:1c:c5:ec:
49:69:8a:d2:61:7f:9d:46:49:e8:17:74:6f:4f:a0:74:8f:fe:
f3:de:a2:ec:6b:a3:44:7f:9d:c5:eb:f1:d0:6b:bc:19:df:e6:
fa:bb:27:80:d2:4f:03:66:6f:69:86:3d:28:77:02:b5:45:cf:
67:26:4e:df:73:7c:b1:32:f6:6e:82:65:e9:c2:02:95:e5:be:
d3:1a:11:0c:81:8f:05:21:45:de:fe:24:e8:0a:63:02:59:22:
50:eb:8c:44:81:a5:b5:9d:67:b9:a5:0b:1b:c5:2b:8c:57:41:
47:11:74:7e:f9:bd:32:0c:68:ac:88:91:5c:54:7d:91:f2:0e:
21:ab:f8:cf:8f:9e:86:9d:f7:d9:ae:78:7f:2f:f4:01:ff:80:
b1:bf:89:f7:d8:52:43:d2:6d:d4:46:27:4a:94:e5:42:12:5b:
ec:30:91:7a:2d:86:7e:5e:2e:80:98:1c:62:c4:c1:34:34:80:
a5:ad:28:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:40:38 2026 by rpki-client