Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.mft
File: NOBtFKhPWbf99CyIEC5O3mbMseE.mft (raw, json)
Hash identifier: Jd/E5uKgSgqIwoTOfhps6noKZalNO98PMmFMxgx15qI=
Subject key identifier: 01:C2:0B:BC:C2:B7:DD:DB:C9:3B:45:20:6B:B6:B9:F4:6E:93:5B:4B
Authority key identifier: 34:E0:6D:14:A8:4F:59:B7:FD:F4:2C:88:10:2E:4E:DE:66:CC:B1:E1
Certificate issuer: /CN=34e06d14a84f59b7fdf42c88102e4ede66ccb1e1
Certificate serial: 01A0C66AB843CE25BDCFD02C063DEC304A01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOBtFKhPWbf99CyIEC5O3mbMseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.mft
Manifest number: 015B
Signing time: Tue 22 Sep 2026 00:01:17 +0000
Manifest this update: Tue 22 Sep 2026 00:01:17 +0000
Manifest next update: Wed 23 Sep 2026 00:01:17 +0000
Files and hashes: 1: NOBtFKhPWbf99CyIEC5O3mbMseE.crl (hash: 3KMlSzcEyJUaQbFPFfGdlSB0saNYV7JEra9F5mJ4Xb4=)
2: f0k9PdW54aZnaOgufUpai3FHCL4.asa (hash: fGjE6UkpfoztTFVUEWxABwiZskKbhaDqlncTca4+x7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOBtFKhPWbf99CyIEC5O3mbMseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:b8:43:ce:25:bd:cf:d0:2c:06:3d:ec:30:4a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e06d14a84f59b7fdf42c88102e4ede66ccb1e1
Validity
Not Before: Sep 22 00:01:17 2026 GMT
Not After : Sep 23 00:01:17 2026 GMT
Subject: CN=01c20bbcc2b7dddbc93b45206bb6b9f46e935b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6d:c0:42:1d:46:d5:85:fc:8c:15:9e:fd:32:
ad:3b:95:71:00:fc:7b:66:b9:d5:3c:17:61:76:00:
e2:d7:8e:ce:0f:11:3c:fd:a0:d8:45:d6:aa:e2:76:
52:12:a5:d8:c1:8a:d6:d7:dc:2a:93:17:b0:19:3f:
16:f9:a2:3c:cc:e5:dc:c7:c5:bc:c4:b6:78:3c:26:
91:25:13:d7:e8:93:f0:fa:5e:15:db:30:38:32:89:
d7:7d:13:d0:14:40:0a:bd:f2:2d:c0:06:a5:50:36:
ca:0d:91:4a:94:93:6f:3d:70:a7:e4:51:51:29:fe:
bd:d0:91:56:62:33:35:d2:ff:b4:e1:5a:1b:14:d7:
20:36:e1:bf:1d:81:f5:8e:04:dc:c8:27:ca:74:2f:
84:eb:a5:62:13:ae:16:ef:89:82:fd:0a:7b:3a:82:
30:00:53:a7:a1:c3:57:f1:7d:fa:d9:2a:0d:7f:f4:
45:a5:86:9e:c9:88:66:8b:10:07:c7:5f:99:0a:c5:
a3:7d:26:45:82:ea:3d:53:80:9f:75:a9:eb:00:2e:
45:bd:7c:f2:04:d5:13:cf:d8:95:25:6b:61:b5:e8:
89:1a:b3:94:6e:81:4f:71:9a:1b:b8:f1:18:d8:41:
bb:c2:38:60:ac:f7:9c:69:bc:65:9b:ff:ac:47:26:
4f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C2:0B:BC:C2:B7:DD:DB:C9:3B:45:20:6B:B6:B9:F4:6E:93:5B:4B
X509v3 Authority Key Identifier:
keyid:34:E0:6D:14:A8:4F:59:B7:FD:F4:2C:88:10:2E:4E:DE:66:CC:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOBtFKhPWbf99CyIEC5O3mbMseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/89fae7-4a5f-4cea-98ae-9f396974d81a/1/NOBtFKhPWbf99CyIEC5O3mbMseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:53:0c:ed:97:b6:d9:6f:c4:7d:ad:d6:2f:af:75:f8:5f:42:
e9:23:db:1d:bb:ea:1e:10:d5:fc:10:dc:65:6e:68:bc:44:81:
82:7d:b6:40:26:42:2a:3f:4f:81:77:2e:8c:68:b0:1f:8d:46:
0b:85:5a:9a:e4:9b:fe:66:6a:e6:ef:40:bd:a7:58:5f:3d:92:
28:54:92:a8:7f:ee:2e:40:60:5e:cd:a6:7a:c7:2f:d3:d7:37:
d2:2a:8d:3e:31:37:fd:d3:1e:da:ad:1c:88:66:e6:4b:47:5f:
ae:49:5a:41:ff:97:1b:f7:9c:fe:1a:d9:0d:58:d2:08:da:fa:
17:9d:5a:50:d4:fa:a9:84:ea:d8:c6:0b:9c:cd:01:d1:84:c1:
13:ff:2b:ef:01:70:64:f5:70:14:12:0b:dc:1b:bc:43:2c:9f:
0c:d6:aa:46:bd:f0:df:73:1d:71:66:d9:8d:0b:27:33:58:d4:
2c:54:7f:49:97:f1:0a:c1:01:b0:31:ce:63:c9:26:ce:6f:67:
c4:bf:4e:e8:1a:80:69:5a:d5:80:de:62:01:1c:92:40:9f:57:
e1:96:59:39:c5:2c:0d:19:1a:b0:a8:3d:31:24:f8:bc:a4:9d:
41:1c:da:21:8e:17:17:a8:d9:b7:0e:14:d9:22:cc:e6:19:1b:
6d:9a:7b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:42:00 2026 by rpki-client