Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft
File: noBwLuah3L864lehmUFfWbgzjqQ.mft (raw, json)
Hash identifier: 35987eUIFWNKb/cV/nz7j1eJzJX5JRdhzm3sFrpiuRc=
Subject key identifier: FE:AA:F2:37:7D:84:07:1B:0C:12:2D:1C:59:81:55:42:B4:78:91:A3
Authority key identifier: 9E:80:70:2E:E6:A1:DC:BF:3A:E2:57:A1:99:41:5F:59:B8:33:8E:A4
Certificate issuer: /CN=9e80702ee6a1dcbf3ae257a199415f59b8338ea4
Certificate serial: 019D9C2C8E0F9180C62A7D2EDE6BB42A29CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 16:00:58 +0000
Manifest this update: Fri 17 Apr 2026 16:00:58 +0000
Manifest next update: Sat 18 Apr 2026 16:00:58 +0000
Files and hashes: 1: 7RZneK1-WhczwVXQZA7asvVmG0o.roa (hash: FToOU7r9z4r8w9cG4+WQTnBdMEmKBFJWnIOgnLoJvLs=)
2: noBwLuah3L864lehmUFfWbgzjqQ.crl (hash: BOEqgA5boc/8Neu98caPE4HvX4HFfNBSprW/G7XL/5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:8e:0f:91:80:c6:2a:7d:2e:de:6b:b4:2a:29:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e80702ee6a1dcbf3ae257a199415f59b8338ea4
Validity
Not Before: Apr 17 16:00:58 2026 GMT
Not After : Apr 18 16:00:58 2026 GMT
Subject: CN=feaaf2377d84071b0c122d1c59815542b47891a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a0:3a:60:64:dc:74:46:18:3b:2f:f9:55:b3:
38:d7:1e:b9:51:0a:88:3d:9b:8e:d9:8f:03:6f:f6:
b9:73:92:4b:08:cc:e2:c4:22:17:72:58:09:8f:f0:
67:51:b8:b7:4a:4f:7c:b5:b4:97:68:00:ff:15:1f:
4d:b1:8c:56:e8:0e:d5:7f:67:18:57:0f:d2:12:87:
36:cf:f7:e9:4a:8e:a7:28:7c:d8:8f:1f:91:23:5e:
f6:79:e5:e5:57:46:9a:69:06:52:60:bf:30:5b:32:
ec:d3:d1:68:8f:c0:93:22:b0:12:5d:16:53:86:c5:
8d:11:4a:4a:31:39:ac:39:64:b6:15:c4:fb:61:b0:
2c:51:bd:a5:4e:87:15:eb:79:c3:4c:9f:7b:12:93:
4b:aa:9b:75:09:4e:b0:e9:12:95:29:27:f1:33:70:
bf:46:85:99:be:cd:2a:a0:42:a2:69:4d:4d:26:41:
9a:d8:47:33:54:14:c1:b6:2c:1c:82:87:96:8a:eb:
ee:f3:dd:62:49:e2:b8:09:cf:41:b9:02:da:69:fe:
d4:21:97:8a:c5:8d:f7:7d:e0:66:d2:c7:a8:ae:e5:
45:a0:3e:c1:3c:78:ee:63:8f:05:13:3c:08:e0:de:
64:75:c9:e7:aa:58:69:93:b8:48:4e:4b:4f:cb:06:
98:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AA:F2:37:7D:84:07:1B:0C:12:2D:1C:59:81:55:42:B4:78:91:A3
X509v3 Authority Key Identifier:
keyid:9E:80:70:2E:E6:A1:DC:BF:3A:E2:57:A1:99:41:5F:59:B8:33:8E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:1f:37:2e:75:cd:fd:94:1d:13:82:8d:3c:30:a7:dc:68:48:
34:a1:f5:b0:d4:87:11:77:a8:4a:51:f0:4f:85:37:73:bf:d9:
84:b4:c1:19:3c:59:18:52:2c:f5:08:88:b1:f1:a6:d4:e8:88:
cb:fc:b4:b4:6f:5d:df:98:6b:7b:1d:54:0a:17:15:bb:a5:07:
62:fd:70:a3:98:1f:22:48:64:ad:2a:52:2c:a8:d0:bd:87:e2:
29:71:7f:64:b5:3e:eb:71:56:c2:87:f1:44:43:26:e3:00:1a:
79:fe:43:cd:85:47:95:c0:83:37:47:1c:4e:dd:d2:26:9b:3d:
20:f9:d3:02:a0:7c:70:17:a5:7c:52:3a:ce:4f:a2:2c:4c:98:
ac:3b:94:80:97:b1:19:aa:4c:a5:e0:ef:c9:85:69:09:6c:62:
bd:9b:ca:c4:70:10:3a:5b:23:95:4e:e4:3c:1a:68:b7:00:57:
10:f1:2a:78:ab:8a:34:dc:98:d6:66:c5:a1:31:26:f0:b7:1e:
1b:e4:ae:c9:b8:60:66:14:e2:27:f8:f1:9f:c5:47:c4:7f:55:
24:17:82:ce:10:9d:82:db:a9:6c:8e:59:b7:79:a1:55:eb:eb:
f2:5b:2c:0b:cf:2f:d8:48:a1:c5:c9:2d:57:e5:b6:31:24:e9:
f7:d0:dd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:51:07 2026 by rpki-client