Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
File: NgqdJtuz6l36roO2GQit2Pxt028.mft (raw, json)
Hash identifier: l3hmlUARPhJAdzX3dmt7fGLEsPmti6LljIB7rMrRRtw=
Subject key identifier: BF:FA:60:DD:44:6C:83:DF:87:CF:EB:3E:03:FE:06:F2:96:4A:C1:F3
Authority key identifier: 36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F
Certificate issuer: /CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
Certificate serial: 019D2AA993DB2882B11E1141F85381251FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 15:00:49 +0000
Manifest this update: Thu 26 Mar 2026 15:00:49 +0000
Manifest next update: Fri 27 Mar 2026 15:00:49 +0000
Files and hashes: 1: NgqdJtuz6l36roO2GQit2Pxt028.crl (hash: g2SinKogMQFqCEs8sWwecIQxHdOFsS3Zz4dLJ7I8BQ4=)
2: pl6PNo8hUrBCcmdPr6uyLCgo9LE.roa (hash: JUhZmiTLChpqRA0MSl5whEAJwGew2IlHkB2zV8iZ9V4=)
3: sg3Ew_-j8eSBsSEqujV82pVTpmY.roa (hash: u5sONjGdKQ7+lq8JPUBVxgSwpY1PR0uLjyPXqaXUKG4=)
4: teABFGsGVj_scwJjrE3mhP8dVpQ.roa (hash: 2hJ5yRJDHs67/jo71c3Tu7rhezA7dGIjE7rutPTVstE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:93:db:28:82:b1:1e:11:41:f8:53:81:25:1f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
Validity
Not Before: Mar 26 15:00:49 2026 GMT
Not After : Mar 27 15:00:49 2026 GMT
Subject: CN=bffa60dd446c83df87cfeb3e03fe06f2964ac1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6e:2b:9c:5f:2d:1e:4a:5d:2d:b3:73:57:a2:
bd:79:4a:a7:75:a5:2d:c4:33:98:57:b6:03:c1:e5:
25:ab:f6:79:02:40:56:af:b4:78:78:ca:44:2a:36:
99:13:d0:34:4c:48:e0:c9:9b:c8:b3:9e:bc:4c:a5:
ad:38:9b:9e:2f:69:c3:73:87:21:de:9c:d1:9f:8a:
b2:8c:8f:ab:ad:bd:35:ea:01:b0:cc:aa:95:33:92:
34:45:93:3c:cd:b2:30:fd:5d:3e:3b:66:c8:fa:cd:
d8:e4:5b:14:3b:ec:03:95:9f:bc:b4:57:95:ed:56:
13:88:6d:51:55:e9:ec:34:c6:05:75:90:4d:1b:c7:
a1:82:bf:62:bf:ea:4d:1a:50:4b:d0:f2:1a:4d:db:
1e:84:70:f8:a7:e2:c6:63:ea:53:c0:a4:2f:ee:0b:
37:e0:06:95:55:69:f8:63:e7:d9:c1:84:0b:4b:e1:
9d:49:52:c9:5b:25:37:23:51:59:96:04:c7:ba:e6:
b3:50:79:05:bb:0c:e0:0d:6e:16:d8:ad:e9:07:d3:
48:ed:ae:7c:05:ea:4d:b8:54:f5:10:f8:c1:2c:d9:
d7:b6:16:4e:2a:ab:de:76:ea:01:cb:3f:d1:e1:2c:
3d:8f:23:c8:ba:02:bb:a5:12:fa:01:e4:39:12:9e:
ee:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FA:60:DD:44:6C:83:DF:87:CF:EB:3E:03:FE:06:F2:96:4A:C1:F3
X509v3 Authority Key Identifier:
keyid:36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:49:51:1a:47:3b:44:98:7b:26:9f:89:9a:97:e4:95:d9:63:
77:71:47:74:2b:18:e4:6f:5c:fe:f4:d5:46:a8:98:77:da:50:
92:89:80:d3:e8:cf:b2:d7:e0:23:f5:73:5a:3c:bd:f9:96:50:
44:37:6f:5d:80:5b:8f:dc:49:25:2b:5f:26:6d:a0:57:ab:6d:
35:0e:cb:b7:76:c8:80:20:12:b6:ca:5d:b0:74:64:9e:9f:b5:
37:1c:5d:fc:00:0f:e0:6e:74:0d:7e:34:df:27:d1:d8:ef:ee:
b0:57:fa:a6:c8:fd:38:fe:08:f9:39:21:b7:1a:15:b2:77:c3:
b2:c4:96:34:fa:fa:a7:5a:8e:46:dc:71:b5:67:38:c0:8d:08:
4e:0d:90:df:79:90:9c:32:03:a6:25:cd:45:9f:c9:da:a8:1a:
ce:53:af:35:db:40:02:f6:4f:f2:4e:2f:56:ae:fd:25:b1:f4:
d4:cb:7c:da:24:b4:16:04:d7:8e:03:fd:c3:dc:a9:7c:b9:5a:
d2:2e:38:79:a5:50:a0:36:dc:b6:1c:2e:d5:29:ce:dd:a7:f0:
f0:b6:bd:2b:e8:78:40:e8:7e:5d:6a:f1:66:be:7a:bf:90:f5:
27:44:d1:02:dd:d4:7c:3b:4c:6e:01:ee:a7:af:d0:78:fb:34:
00:d8:cc:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:23:10 2026 by rpki-client