Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
File: NoBlGroGa0CEp-0g1_UgGyKWwZc.mft (raw, json)
Hash identifier: ydaKwu2xwrpZJ/1XHB19DYhnI33cZAmktGmfgc7My8E=
Subject key identifier: C1:20:13:50:1F:51:73:AF:1A:02:63:33:97:27:4B:F7:03:F1:90:C6
Authority key identifier: 36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
Certificate issuer: /CN=3680651aba066b4084a7ed20d7f5201b2296c197
Certificate serial: 019CACB4810828892BBE38B034DF30A3BBA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
Manifest number: 0868
Signing time: Mon 02 Mar 2026 04:00:36 +0000
Manifest this update: Mon 02 Mar 2026 04:00:36 +0000
Manifest next update: Tue 03 Mar 2026 04:00:36 +0000
Files and hashes: 1: 4OrfC0gESmi91J763IQoNP33VaY.roa (hash: UOBol6M5aYlHh1KzK/jjTCQLc+/4wpm6CbL5n4iAyts=)
2: NoBlGroGa0CEp-0g1_UgGyKWwZc.crl (hash: GaQ7TyY1gUs4JYm9pSak4X16XkDW6+b0AxCL3rHuH0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:81:08:28:89:2b:be:38:b0:34:df:30:a3:bb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3680651aba066b4084a7ed20d7f5201b2296c197
Validity
Not Before: Mar 2 04:00:36 2026 GMT
Not After : Mar 3 04:00:36 2026 GMT
Subject: CN=c12013501f5173af1a02633397274bf703f190c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:37:d9:b4:09:33:75:7c:e6:fe:8b:6e:cd:
44:e7:9b:10:ca:ba:53:d2:e6:2b:6a:bc:8f:ed:49:
b0:ee:2e:5f:ea:25:30:e4:7a:94:44:ee:58:16:11:
95:09:41:c4:6d:19:18:01:b2:96:60:65:f6:51:e9:
7b:18:fe:1c:c4:d1:48:61:79:a0:c9:97:27:90:4e:
4a:8c:27:9d:a7:b2:f0:37:2d:6b:3f:32:c9:29:2a:
eb:8c:56:1f:5c:e3:ed:48:bc:ff:f3:3f:58:66:0b:
22:05:01:80:f0:31:6d:a2:eb:fc:19:09:53:38:2d:
80:84:af:55:0b:bd:70:9a:18:52:e3:14:1e:bb:12:
2f:cb:47:12:7d:0f:ef:f7:45:55:4b:d8:3e:1b:36:
cd:99:f8:f5:18:0c:1f:70:41:c2:49:c2:8e:b6:34:
cd:c1:f7:83:70:f1:99:c3:0c:1f:d7:eb:57:39:82:
08:5c:31:e7:7e:74:fe:47:42:83:e5:11:4e:fb:2a:
f3:6d:9d:06:a4:1a:f1:73:18:d7:1e:0e:0d:ab:23:
90:bc:a5:ba:72:d4:c2:fe:d1:10:ee:22:5b:fc:a9:
f1:8e:7e:0c:6e:75:d2:b7:eb:a5:c0:d2:24:f8:f3:
50:d3:39:5d:47:72:28:a8:82:ec:16:37:20:bb:66:
8b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:20:13:50:1F:51:73:AF:1A:02:63:33:97:27:4B:F7:03:F1:90:C6
X509v3 Authority Key Identifier:
keyid:36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:da:15:90:c4:17:d3:7e:47:57:e2:a4:32:e1:29:48:3d:4a:
42:f5:4f:e2:dd:dc:ba:5a:2c:72:84:4a:ba:54:c7:50:a5:cf:
a5:43:28:bc:7f:6c:40:ea:e1:54:1c:1f:46:43:52:3a:83:98:
ab:e5:95:ac:7f:e7:83:45:71:93:d0:81:84:a5:c9:ba:e1:3c:
6b:da:b4:74:cd:ab:a0:f9:34:6e:54:40:d4:c5:96:e5:e4:78:
96:cf:70:72:30:5a:50:89:b6:80:93:48:67:59:e6:ce:07:09:
27:67:20:fa:0c:51:8c:0d:21:a2:19:e6:6b:a4:39:58:ef:ce:
05:09:73:e1:64:9e:a6:88:be:5d:a7:7e:d2:f3:88:2c:e7:5b:
b8:c0:9b:23:34:a3:2f:6b:ed:f2:93:38:ab:72:71:88:07:52:
b4:3e:26:8c:3c:1e:97:97:ab:49:cd:8e:e0:be:e1:5a:88:25:
aa:1e:a7:2e:ee:ff:1f:83:33:e7:97:ee:bf:96:2b:f6:a3:84:
54:0c:a0:d2:6d:7e:10:43:d6:43:ac:1e:f4:4a:7a:a7:ab:6b:
34:87:b6:0e:96:ce:d5:83:a1:11:0f:ce:e1:4d:31:4d:0b:b9:
05:fa:7d:3c:fe:77:ba:f7:69:51:82:41:b4:7b:27:85:03:dc:
87:5d:28:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:32:26 2026 by rpki-client