Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
File: NoBlGroGa0CEp-0g1_UgGyKWwZc.mft (raw, json)
Hash identifier: MwfIyH3YOD0MYAF3btVp3Y+Yw6fIkeFPHiQGlYrBigY=
Subject key identifier: EC:B0:BE:43:DF:6C:D5:1F:33:9F:8C:67:90:82:40:A2:31:5D:02:BF
Authority key identifier: 36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
Certificate issuer: /CN=3680651aba066b4084a7ed20d7f5201b2296c197
Certificate serial: 019FAD5222EFF10558ECFE6C8E8E039BB5BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
Manifest number: 09F6
Signing time: Wed 29 Jul 2026 10:01:08 +0000
Manifest this update: Wed 29 Jul 2026 10:01:08 +0000
Manifest next update: Thu 30 Jul 2026 10:01:08 +0000
Files and hashes: 1: 4OrfC0gESmi91J763IQoNP33VaY.roa (hash: UOBol6M5aYlHh1KzK/jjTCQLc+/4wpm6CbL5n4iAyts=)
2: NoBlGroGa0CEp-0g1_UgGyKWwZc.crl (hash: WoYiPKEHdz1yJCSgp6eGIB1DTtk4d6n1UnLJUADRI0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:52:22:ef:f1:05:58:ec:fe:6c:8e:8e:03:9b:b5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3680651aba066b4084a7ed20d7f5201b2296c197
Validity
Not Before: Jul 29 10:01:08 2026 GMT
Not After : Jul 30 10:01:08 2026 GMT
Subject: CN=ecb0be43df6cd51f339f8c67908240a2315d02bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:27:37:8f:16:97:d5:26:65:a3:2c:c5:27:4a:
2b:05:ee:c1:94:d3:85:f1:b8:63:4a:a8:22:cb:de:
77:d3:34:85:73:69:13:22:40:99:96:6c:c7:a5:eb:
a5:00:41:51:38:63:c9:06:ea:4b:41:f2:5a:68:59:
6d:20:d9:23:1e:4c:df:25:c7:2c:6c:dd:dc:b9:0d:
16:88:d1:fc:cb:3c:5d:eb:ae:6f:5c:8f:3e:f1:6d:
67:73:34:4c:5c:73:63:94:f5:ff:1d:b9:fc:69:24:
6a:b1:dc:5a:c6:ea:cc:ac:e0:4a:f5:da:0c:29:a3:
49:21:f8:91:fe:f9:ef:92:38:a3:6f:78:e9:24:da:
3c:6c:41:45:25:e4:87:fa:4a:88:13:8d:a1:d9:39:
78:c1:29:3e:48:8a:34:a6:f8:79:8b:89:c5:2f:cf:
5b:ca:1f:bb:7a:f3:63:68:6d:2a:49:9a:f2:c9:57:
31:cd:a9:2a:2f:5a:17:16:51:fa:c4:70:d9:cb:52:
3b:0f:cb:98:c0:40:05:66:0f:7a:7e:17:c4:b7:ce:
8c:52:93:5e:15:4d:b9:90:9e:eb:a7:bf:56:71:41:
2e:4a:2f:1d:80:be:a6:af:dd:ae:27:20:b1:99:20:
88:6d:d0:9e:f9:50:fc:70:a2:d1:e2:e2:b5:47:8e:
4e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B0:BE:43:DF:6C:D5:1F:33:9F:8C:67:90:82:40:A2:31:5D:02:BF
X509v3 Authority Key Identifier:
keyid:36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:31:0a:1f:bf:dd:18:98:44:de:0b:12:e0:ac:01:7d:4b:94:
27:a9:f9:df:d0:03:83:25:80:f7:a7:85:51:29:11:e9:22:a2:
87:0f:c5:33:19:d3:a4:0a:6c:e6:5d:68:a4:ee:e9:ba:4c:3b:
28:fb:df:1d:38:40:71:60:13:b7:b8:07:34:23:b3:d9:f5:1d:
fa:07:0d:76:b1:30:9f:44:29:df:ee:fc:69:6b:a9:9e:75:fa:
13:c4:7a:96:bf:8a:05:04:3e:55:5d:94:61:6f:68:2d:74:64:
e1:53:36:a1:65:2f:da:1f:b3:c7:c6:e1:51:38:74:55:c9:ba:
d0:c9:1a:dd:1b:bf:42:3f:51:ff:45:56:03:48:c1:78:bc:c6:
23:c4:be:17:fb:59:6e:aa:d3:0f:07:71:03:5a:72:29:62:d6:
e8:6e:d0:84:98:62:0d:de:55:02:8c:6c:f2:5d:47:4d:9e:9f:
e0:cf:2b:32:e8:b4:be:b7:b2:58:b7:e2:a0:3b:7d:5f:02:93:
3d:24:e8:e7:4b:a0:43:96:23:0a:b2:58:9a:a7:40:88:39:7d:
40:e0:48:29:f5:78:b9:18:83:bc:bf:74:5e:16:4c:ef:7e:d3:
bd:ff:b2:38:ba:6c:f6:3d:cd:cc:15:ea:9e:33:f2:f3:74:02:
e8:2d:b2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:14:57 2026 by rpki-client