Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
File: NoBlGroGa0CEp-0g1_UgGyKWwZc.mft (raw, json)
Hash identifier: gXLPBp7h8aNFnZmzEuL1KZOhZxjHex5WLLm83OebBF0=
Subject key identifier: 11:02:18:9D:EC:6A:6D:60:6B:F9:62:9C:42:19:98:7E:8E:C2:93:DE
Authority key identifier: 36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
Certificate issuer: /CN=3680651aba066b4084a7ed20d7f5201b2296c197
Certificate serial: 019D9A3DF3D8A5C86964FC407D3AE400B160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
Manifest number: 08E3
Signing time: Fri 17 Apr 2026 07:00:44 +0000
Manifest this update: Fri 17 Apr 2026 07:00:44 +0000
Manifest next update: Sat 18 Apr 2026 07:00:44 +0000
Files and hashes: 1: 4OrfC0gESmi91J763IQoNP33VaY.roa (hash: UOBol6M5aYlHh1KzK/jjTCQLc+/4wpm6CbL5n4iAyts=)
2: NoBlGroGa0CEp-0g1_UgGyKWwZc.crl (hash: In0wwCFhYubjiH4BaD+ihswMvZdgo8N4/c77DvDMVy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:f3:d8:a5:c8:69:64:fc:40:7d:3a:e4:00:b1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3680651aba066b4084a7ed20d7f5201b2296c197
Validity
Not Before: Apr 17 07:00:44 2026 GMT
Not After : Apr 18 07:00:44 2026 GMT
Subject: CN=1102189dec6a6d606bf9629c4219987e8ec293de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:33:11:a3:4f:09:03:4f:fd:de:36:08:5b:
86:b7:ce:8a:80:c3:03:71:b6:3e:83:ea:5c:79:e0:
73:9f:90:56:ee:10:05:0b:7d:47:a2:48:f2:14:3f:
e5:12:51:c9:69:d9:57:cc:f4:3b:b3:b2:f0:58:be:
c9:45:c3:c9:32:d0:70:35:f4:8f:41:df:60:a0:6e:
df:80:39:33:a7:b0:ca:0d:6b:3b:ac:09:2c:74:5b:
fd:0c:bb:9e:39:0e:dd:7a:d4:97:c4:10:c8:9e:c7:
a0:0c:b4:f3:f1:1f:ee:76:fb:f5:ca:b2:e9:e8:78:
fd:51:b2:6a:9e:56:26:a9:53:d7:91:5e:f8:3e:ee:
40:92:90:6f:ef:67:76:51:81:31:6b:1d:c3:03:45:
95:3e:6b:6d:64:79:17:13:0d:a6:b8:a5:c2:fb:eb:
c1:11:bf:23:a8:83:7e:fd:ee:09:ad:e1:16:72:56:
16:4d:a7:40:87:af:71:87:d5:95:13:59:03:d7:20:
b0:c8:d6:1f:37:1f:a3:ef:d3:05:08:21:e4:1a:49:
07:2a:c0:89:17:31:2a:aa:c5:7e:ab:e0:76:a2:12:
fb:cd:12:b1:d8:50:df:b9:a4:21:a2:88:c5:82:6d:
b0:fa:f6:53:5a:67:e1:c7:80:93:1c:61:94:2c:db:
9d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:02:18:9D:EC:6A:6D:60:6B:F9:62:9C:42:19:98:7E:8E:C2:93:DE
X509v3 Authority Key Identifier:
keyid:36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:dc:bc:41:66:83:52:89:15:f5:67:1f:5b:e3:11:de:7d:27:
34:64:53:e9:a5:99:26:a6:08:f6:d5:c5:73:54:f9:66:df:29:
df:1c:3a:b5:03:3d:35:f4:a0:17:50:fe:39:3c:b7:ba:05:c1:
a5:7f:1d:89:f4:44:3e:5d:bf:e4:45:b1:8d:a7:40:79:ed:ad:
00:57:fc:65:51:2c:f0:41:ad:cc:18:eb:60:14:57:b4:99:5b:
3f:59:c0:2e:bd:16:d1:51:62:e3:d7:ad:d8:f6:9e:7c:7b:ba:
7d:33:65:bd:09:7b:91:ac:53:36:72:8a:a7:ff:55:ce:29:ce:
c3:81:36:78:9b:3a:8a:1f:b4:6b:dd:08:89:c2:30:ea:9e:8c:
83:03:d7:f9:f4:26:dd:08:02:7a:16:1f:f7:16:f1:26:da:21:
62:a8:0b:87:74:32:a2:c6:5e:c9:d9:f8:70:e8:fb:1d:b5:17:
d3:ae:a4:31:a3:27:c4:74:16:e5:14:5e:e3:2b:15:eb:02:0e:
62:6e:72:07:39:c4:86:99:cb:4c:7e:f9:98:23:92:c5:ec:e2:
42:24:76:18:b3:09:d3:ee:c7:3e:23:cf:3f:38:90:92:89:4b:
10:c6:b5:62:ac:e2:0c:e3:08:77:d9:65:19:2f:cc:28:8a:3b:
d5:10:a7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:11:37 2026 by rpki-client