
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft
File: NoTy9VGkNSosFNf45pMpqdxD_eA.mft (raw, json)
Hash identifier: i9cWEMk8DdZna9cBQgabu90q7VS0T1sD8Gu5d0cU5zc=
Subject key identifier: 7C:30:E7:F2:B4:85:93:30:9B:4B:F3:AD:6B:7A:42:5C:87:81:2B:44
Authority key identifier: 36:84:F2:F5:51:A4:35:2A:2C:14:D7:F8:E6:93:29:A9:DC:43:FD:E0
Certificate issuer: /CN=3684f2f551a4352a2c14d7f8e69329a9dc43fde0
Certificate serial: 019CACB53F767C5B5143D46056A2159D13DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoTy9VGkNSosFNf45pMpqdxD_eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft
Manifest number: 0448
Signing time: Mon 02 Mar 2026 04:01:25 +0000
Manifest this update: Mon 02 Mar 2026 04:01:25 +0000
Manifest next update: Tue 03 Mar 2026 04:01:25 +0000
Files and hashes: 1: NoTy9VGkNSosFNf45pMpqdxD_eA.crl (hash: 71j3/4hcElAEEGM7nnKKkzL7DjN6uWpNXjCBFlcp/mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NoTy9VGkNSosFNf45pMpqdxD_eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:3f:76:7c:5b:51:43:d4:60:56:a2:15:9d:13:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3684f2f551a4352a2c14d7f8e69329a9dc43fde0
Validity
Not Before: Mar 2 04:01:25 2026 GMT
Not After : Mar 3 04:01:25 2026 GMT
Subject: CN=7c30e7f2b48593309b4bf3ad6b7a425c87812b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:dd:b0:13:4c:96:1f:fc:1d:1d:a9:99:3e:89:
e2:13:57:71:a7:9b:57:a6:44:71:f4:69:b4:1a:54:
63:70:06:cf:e5:3e:37:83:45:92:a3:66:33:e7:76:
82:02:64:46:46:93:d2:c2:9a:cb:e1:a7:e9:c0:9e:
65:4b:28:30:e6:ad:31:cc:ca:bc:e2:84:b7:51:da:
60:6a:da:ba:16:57:ef:f3:7f:57:f1:79:b2:90:6c:
f2:ba:b0:12:11:c6:e3:a3:ab:e8:16:96:23:be:72:
be:99:55:4d:34:b1:8d:57:09:f1:ad:59:d8:97:bb:
f4:45:9d:44:db:59:0d:f5:cd:ad:70:e5:60:2e:00:
a9:54:a5:5c:8c:33:35:d4:44:dc:4b:00:3e:f9:d6:
9c:14:8f:82:dc:26:94:29:00:ec:58:67:5b:ed:92:
b4:e2:ad:75:51:f8:73:f2:ba:62:73:69:24:3d:87:
21:f7:8a:9d:c3:72:8e:3a:29:6b:32:4d:4c:a0:27:
09:bf:b6:a2:fa:48:7d:89:7f:fe:3c:f0:67:d3:03:
18:16:22:7c:26:b9:2d:5f:d3:da:18:19:32:4d:04:
79:7a:d4:9d:84:c6:71:42:2d:ae:34:0a:d2:b8:33:
96:c5:da:95:8f:b5:87:f0:b0:bd:10:cb:3f:75:d9:
ab:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:30:E7:F2:B4:85:93:30:9B:4B:F3:AD:6B:7A:42:5C:87:81:2B:44
X509v3 Authority Key Identifier:
keyid:36:84:F2:F5:51:A4:35:2A:2C:14:D7:F8:E6:93:29:A9:DC:43:FD:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoTy9VGkNSosFNf45pMpqdxD_eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9762d8-8952-4c39-b474-29abee3efbb7/1/NoTy9VGkNSosFNf45pMpqdxD_eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:c5:1b:93:c9:98:3a:f0:a0:7d:10:8f:fc:9a:2e:ee:99:5f:
50:5c:36:27:b3:c4:23:e4:40:92:74:43:f1:3b:8d:96:c9:4a:
e3:a1:e9:19:91:38:de:8d:99:10:f9:b8:b9:32:d2:13:ca:fd:
db:cb:5b:b5:c6:cb:47:fa:2d:33:75:b4:50:e3:82:ea:e6:1d:
e5:4e:4b:a9:30:94:af:02:35:f8:30:63:5e:a7:f2:d3:d3:db:
23:45:cd:50:02:f9:75:e8:68:79:2b:7c:b2:33:7d:ad:29:3f:
eb:7f:08:56:7b:71:26:e8:d8:a6:75:ba:3b:ea:f5:25:65:6d:
35:83:94:47:7b:54:5d:64:bc:ca:32:a3:e6:74:1d:fa:0d:72:
7c:b1:a3:b9:fb:aa:c9:82:be:df:32:9c:0f:28:c9:45:80:42:
66:7d:25:09:df:56:1c:4f:e3:4a:d7:2f:47:85:7c:12:38:83:
bd:26:5d:84:d1:a5:14:82:60:68:43:ae:d0:7f:8a:e9:61:31:
4a:4b:3d:9f:07:f1:ff:cc:8a:6c:7e:41:37:70:26:95:9d:6b:
6d:25:b2:93:7e:bd:79:d8:ec:4d:3d:2f:fc:1d:6a:7d:b3:bf:
3c:d4:1a:27:1a:11:a2:63:7b:46:c5:51:eb:b8:6f:59:e9:87:
20:93:12:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystT92fFtRQ9RgVqIVnRPfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ODRmMmY1NTFhNDM1MmEyYzE0ZDdmOGU2OTMyOWE5ZGM0
M2ZkZTAwHhcNMjYwMzAyMDQwMTI1WhcNMjYwMzAzMDQwMTI1WjAzMTEwLwYDVQQD
Eyg3YzMwZTdmMmI0ODU5MzMwOWI0YmYzYWQ2YjdhNDI1Yzg3ODEyYjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3N2wE0yWH/wdHamZPoniE1dxp5tX
pkRx9Gm0GlRjcAbP5T43g0WSo2Yz53aCAmRGRpPSwprL4afpwJ5lSygw5q0xzMq8
4oS3Udpgatq6Flfv839X8XmykGzyurASEcbjo6voFpYjvnK+mVVNNLGNVwnxrVnY
l7v0RZ1E21kN9c2tcOVgLgCpVKVcjDM11ETcSwA++dacFI+C3CaUKQDsWGdb7ZK0
4q11Ufhz8rpic2kkPYch94qdw3KOOilrMk1MoCcJv7ai+kh9iX/+PPBn0wMYFiJ8
JrktX9PaGBkyTQR5etSdhMZxQi2uNArSuDOWxdqVj7WH8LC9EMs/ddmrqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHww5/K0hZMwm0vzrWt6QlyHgStEMB8GA1UdIwQY
MBaAFDaE8vVRpDUqLBTX+OaTKancQ/3gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm9UeTlWR2tOU29zRk5mNDVwTXBxZHhEX2VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC85NzYyZDgtODk1Mi00YzM5LWI0NzQt
MjlhYmVlM2VmYmI3LzEvTm9UeTlWR2tOU29zRk5mNDVwTXBxZHhEX2VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC85NzYyZDgtODk1Mi00YzM5LWI0NzQtMjlhYmVlM2VmYmI3
LzEvTm9UeTlWR2tOU29zRk5mNDVwTXBxZHhEX2VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApsUbk8mY
OvCgfRCP/Jou7plfUFw2J7PEI+RAknRD8TuNlslK46HpGZE43o2ZEPm4uTLSE8r9
28tbtcbLR/otM3W0UOOC6uYd5U5LqTCUrwI1+DBjXqfy09PbI0XNUAL5dehoeSt8
sjN9rSk/638IVntxJujYpnW6O+r1JWVtNYOUR3tUXWS8yjKj5nQd+g1yfLGjufuq
yYK+3zKcDyjJRYBCZn0lCd9WHE/jStcvR4V8EjiDvSZdhNGlFIJgaEOu0H+K6WEx
Sks9nwfx/8yKbH5BN3AmlZ1rbSWyk369edjsTT0v/B1qfbO/PNQaJxoRomN7RsVR
67hvWemHIJMS4g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:49:05 2026 by rpki-client