Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
File: ngoRprHRiWV8f7luwUWLr8oYZPQ.mft (raw, json)
Hash identifier: pqqeUum85iuYOG6+BX9WOdD51GNxlpRl976wzr8CgcQ=
Subject key identifier: 4F:C5:1E:47:38:45:F6:83:90:85:C8:4A:AC:B9:CE:79:72:66:44:23
Authority key identifier: 9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
Certificate issuer: /CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
Certificate serial: 019D27723EE65B579E7E9923C2569277A7CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
Manifest number: 0D40
Signing time: Thu 26 Mar 2026 00:01:31 +0000
Manifest this update: Thu 26 Mar 2026 00:01:31 +0000
Manifest next update: Fri 27 Mar 2026 00:01:31 +0000
Files and hashes: 1: 1-1Ic5gcyRLNc4y6lZMhKlnsHlIk.roa (hash: U8NuaZXQIXbJYqStLcZdEAJOjjGzKdcKPJX3ZKFHQ8A=)
2: ngoRprHRiWV8f7luwUWLr8oYZPQ.crl (hash: d1shbckr3DefAUVI1Ry0t5rzjLNRpHSfYHwdFpyn6b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:3e:e6:5b:57:9e:7e:99:23:c2:56:92:77:a7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
Validity
Not Before: Mar 26 00:01:31 2026 GMT
Not After : Mar 27 00:01:31 2026 GMT
Subject: CN=4fc51e473845f6839085c84aacb9ce7972664423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:0b:b7:fa:ea:93:12:cc:af:f4:07:4e:76:
0f:b9:4f:34:85:d8:76:59:90:54:9d:17:c9:5f:80:
9d:3a:e5:8d:71:dc:58:3b:d5:18:f0:e7:5d:b5:b5:
3f:40:03:fa:61:7b:45:65:6a:b1:62:c2:92:63:03:
c7:54:9d:52:d0:cc:9f:11:7c:ec:8f:6d:35:61:26:
a6:20:1d:96:88:0d:ae:d2:0e:45:c3:02:1b:8a:ce:
74:a7:c9:93:8a:bf:23:9d:b7:c1:3e:ba:a1:3b:b0:
b1:c7:74:17:86:d0:5d:61:cb:29:94:d1:0d:0c:83:
a4:40:67:ec:77:63:ae:61:84:48:11:36:81:48:ac:
87:e3:e4:93:0a:df:a8:f4:94:be:be:11:59:af:6a:
7d:d3:79:b8:50:e9:6c:27:80:6c:dd:70:c3:78:1c:
e7:15:de:a9:f1:82:49:67:70:dd:39:86:1b:a0:00:
00:99:be:3a:a9:a9:89:7a:0b:30:f8:cf:b8:e7:0c:
d2:b8:59:47:c6:01:69:ff:88:74:82:48:3c:2e:53:
77:5c:24:23:03:90:33:57:52:fe:54:dd:b5:f6:3a:
51:e4:65:66:4a:0a:28:1d:61:08:07:fa:2c:7a:c2:
14:71:7a:a8:b8:ae:1b:f5:a8:c6:e4:69:6e:69:45:
bb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C5:1E:47:38:45:F6:83:90:85:C8:4A:AC:B9:CE:79:72:66:44:23
X509v3 Authority Key Identifier:
keyid:9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7e:08:ed:f0:13:06:dd:12:74:0c:9f:f0:30:7a:fb:80:ec:
d8:9b:ca:d4:74:82:d4:34:e9:f3:4b:df:8d:74:9c:ea:93:88:
c0:90:6a:c8:9a:63:2f:f4:cc:d5:65:7b:66:33:a4:e7:71:56:
55:b3:86:f7:d0:83:2a:a9:0b:c7:1e:10:e9:82:1c:6d:74:9c:
08:2d:1b:23:fe:66:10:ca:43:a5:2b:f9:ea:ff:3a:df:10:7a:
29:5b:5c:d4:0c:2c:a6:98:b6:5a:a1:2c:05:04:de:bf:4d:c4:
1d:30:ac:33:7f:dc:5a:34:0e:0b:2a:10:68:4b:8a:ec:cd:75:
8c:e7:97:f4:7f:07:7e:9c:03:cd:77:cd:a4:56:3e:a5:ec:74:
f9:86:05:c5:29:84:8a:17:cc:98:98:ef:d6:b8:be:14:71:94:
18:6e:e9:02:47:06:7e:30:02:ca:ac:f3:2b:46:05:2c:d9:ad:
fc:f4:a6:4a:33:0b:7c:02:78:b4:d1:82:27:8d:dd:83:97:f4:
a0:a1:04:7e:2e:e2:c1:3d:6b:2c:3e:f9:2d:88:be:d2:78:7d:
60:da:65:ed:2f:59:07:cf:0e:9b:77:3b:55:dd:09:98:a5:93:
99:75:14:6f:04:c6:b8:64:ed:bb:33:8b:89:d9:7d:0d:28:2f:
ee:c7:31:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncj7mW1eefpkjwlaSd6fKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMGExMWE2YjFkMTg5NjU3YzdmYjk2ZWMxNDU4YmFmY2Ex
ODY0ZjQwHhcNMjYwMzI2MDAwMTMxWhcNMjYwMzI3MDAwMTMxWjAzMTEwLwYDVQQD
Eyg0ZmM1MWU0NzM4NDVmNjgzOTA4NWM4NGFhY2I5Y2U3OTcyNjY0NDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteALt/rqkxLMr/QHTnYPuU80hdh2
WZBUnRfJX4CdOuWNcdxYO9UY8OddtbU/QAP6YXtFZWqxYsKSYwPHVJ1S0MyfEXzs
j201YSamIB2WiA2u0g5FwwIbis50p8mTir8jnbfBPrqhO7Cxx3QXhtBdYcsplNEN
DIOkQGfsd2OuYYRIETaBSKyH4+STCt+o9JS+vhFZr2p903m4UOlsJ4Bs3XDDeBzn
Fd6p8YJJZ3DdOYYboAAAmb46qamJegsw+M+45wzSuFlHxgFp/4h0gkg8LlN3XCQj
A5AzV1L+VN219jpR5GVmSgooHWEIB/osesIUcXqouK4b9ajG5GluaUW77wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/FHkc4RfaDkIXISqy5znlyZkQjMB8GA1UdIwQY
MBaAFJ4KEaax0YllfH+5bsFFi6/KGGT0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmdvUnBySFJpV1Y4ZjdsdXdVV0xyOG9ZWlBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xY2RhY2UtNGUwMC00NjlhLThjNTAt
NThjYjgzMDg3NWY1LzEvbmdvUnBySFJpV1Y4ZjdsdXdVV0xyOG9ZWlBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8xY2RhY2UtNGUwMC00NjlhLThjNTAtNThjYjgzMDg3NWY1
LzEvbmdvUnBySFJpV1Y4ZjdsdXdVV0xyOG9ZWlBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUH4I7fAT
Bt0SdAyf8DB6+4Ds2JvK1HSC1DTp80vfjXSc6pOIwJBqyJpjL/TM1WV7ZjOk53FW
VbOG99CDKqkLxx4Q6YIcbXScCC0bI/5mEMpDpSv56v863xB6KVtc1Awsppi2WqEs
BQTev03EHTCsM3/cWjQOCyoQaEuK7M11jOeX9H8HfpwDzXfNpFY+pex0+YYFxSmE
ihfMmJjv1ri+FHGUGG7pAkcGfjACyqzzK0YFLNmt/PSmSjMLfAJ4tNGCJ43dg5f0
oKEEfi7iwT1rLD75LYi+0nh9YNpl7S9ZB88Om3c7Vd0JmKWTmXUUbwTGuGTtuzOL
idl9DSgv7scxxA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:30:13 2026 by rpki-client