Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
File: NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft (raw, json)
Hash identifier: Cms9dlTOD8cM6mgOOx5gj9LFo4c5h08TWExBPC6gyCc=
Subject key identifier: E7:9D:10:30:31:25:60:6C:E7:09:11:96:C4:14:EB:0A:88:70:DA:1E
Authority key identifier: 36:0C:59:35:E5:1F:E7:06:C2:44:75:19:D9:B5:F9:5A:E3:63:C1:86
Certificate issuer: /CN=360c5935e51fe706c2447519d9b5f95ae363c186
Certificate serial: 019D25F18934B990B68F7571EDCD268FDCF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
Manifest number: 1433
Signing time: Wed 25 Mar 2026 17:01:19 +0000
Manifest this update: Wed 25 Mar 2026 17:01:19 +0000
Manifest next update: Thu 26 Mar 2026 17:01:19 +0000
Files and hashes: 1: JEZzvSEhk9Rpppc7_JlZ8YDdHPU.roa (hash: 4z0GMSU1lSLpdGVWcEmJSBzIO5NLCUQwZ5krieoKIEM=)
2: NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl (hash: 3/QylBWqLZndmX4U111JrSsMzW82jr/LDQLlYMmBhjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:89:34:b9:90:b6:8f:75:71:ed:cd:26:8f:dc:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360c5935e51fe706c2447519d9b5f95ae363c186
Validity
Not Before: Mar 25 17:01:19 2026 GMT
Not After : Mar 26 17:01:19 2026 GMT
Subject: CN=e79d10303125606ce7091196c414eb0a8870da1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e7:dc:ba:6b:55:71:96:b0:8e:aa:9b:ad:55:
b0:7b:e0:90:ea:87:d0:02:c1:16:4e:fc:1b:a6:61:
47:02:13:a9:65:cd:3d:25:27:04:20:ea:83:0e:bd:
e5:c1:91:ee:3f:da:18:4d:e3:65:6b:4a:24:7b:d1:
7a:5d:8c:7a:9c:95:57:94:80:76:6e:5a:ef:67:9b:
9c:89:bb:7f:59:3e:bf:4f:79:b5:1f:02:a5:fd:3a:
36:07:33:37:3e:eb:99:63:b1:f6:3e:b2:d3:df:85:
9a:5e:a5:b5:4e:91:13:ce:a8:98:10:d6:d4:9a:56:
2b:d2:d8:3c:fb:42:33:35:ae:c6:99:8c:bf:27:21:
4e:23:d3:69:a9:f7:1b:cf:d2:5d:b4:4f:ae:6a:a6:
c9:63:16:a6:a4:1a:cc:34:2c:5e:5e:ac:6e:1e:c7:
21:d0:65:a1:6b:de:72:aa:ef:66:a8:70:53:6b:03:
62:fd:53:ce:03:82:c7:01:14:60:87:f6:d4:6f:3b:
7d:76:c5:6a:a4:97:3a:e6:60:54:cf:20:c6:cd:8d:
9b:04:eb:62:17:9e:c3:00:a2:52:8e:ad:53:f1:d1:
0d:11:5f:c7:fa:56:87:67:c2:e1:fa:45:33:37:ec:
1f:69:85:e7:6a:2a:c5:95:f9:de:9c:ff:ac:80:72:
6f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9D:10:30:31:25:60:6C:E7:09:11:96:C4:14:EB:0A:88:70:DA:1E
X509v3 Authority Key Identifier:
keyid:36:0C:59:35:E5:1F:E7:06:C2:44:75:19:D9:B5:F9:5A:E3:63:C1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:f3:fc:b0:08:12:dc:38:30:ae:7f:b0:e7:9e:b8:9c:37:8e:
8f:2c:75:01:0f:fa:4d:85:b6:f2:17:49:a7:01:7f:f3:32:4b:
63:66:2c:d6:d8:18:68:a2:b8:64:42:d5:6b:b6:27:a7:76:cb:
af:82:e8:58:d2:8d:c7:57:59:d9:63:5b:f0:59:1c:ef:50:5e:
0b:94:ed:58:e5:bd:2a:bc:f9:ed:85:a2:e4:13:04:43:4d:37:
fb:fd:87:49:99:06:03:eb:ef:1b:8a:53:3c:53:70:09:17:0a:
63:2c:31:1f:02:99:7c:8f:73:ef:36:52:04:07:8c:5a:2a:31:
39:f4:4e:8a:6f:04:bf:06:5e:0e:8d:74:7b:2a:e9:a4:1a:34:
da:10:e8:7d:9c:2e:a1:3d:57:3e:db:df:54:9f:bf:67:3d:0e:
3d:cf:65:19:a1:fc:9b:3e:84:42:75:1b:97:ee:62:c6:75:7c:
ac:bd:43:3e:37:a3:5e:17:bf:9a:53:07:2b:1b:c5:7e:66:0e:
71:d9:8c:39:99:3b:fc:3f:2b:07:b9:cf:fe:c2:de:bf:67:e8:
97:a7:b7:ba:89:7d:d9:61:06:9d:fe:6d:37:6a:18:10:5f:b5:
09:83:fc:87:df:d3:c9:76:76:39:e1:c4:25:f1:7b:9f:b9:ae:
72:10:d0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:53 2026 by rpki-client