Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
File: ncAOnjBGWR-LpVJEgN33xvxMYOA.mft (raw, json)
Hash identifier: qiBlUpXjZ6BzrdqLSDkUhxJBCPWroIX5G2SEc5v8Ix4=
Subject key identifier: BB:14:D3:A1:F5:DB:88:CE:99:96:74:68:92:C0:E5:DE:65:ED:6A:84
Authority key identifier: 9D:C0:0E:9E:30:46:59:1F:8B:A5:52:44:80:DD:F7:C6:FC:4C:60:E0
Certificate issuer: /CN=9dc00e9e3046591f8ba5524480ddf7c6fc4c60e0
Certificate serial: 019D2816EE4228B12472C0A8015A236BABB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 03:01:24 +0000
Manifest this update: Thu 26 Mar 2026 03:01:24 +0000
Manifest next update: Fri 27 Mar 2026 03:01:24 +0000
Files and hashes: 1: ncAOnjBGWR-LpVJEgN33xvxMYOA.crl (hash: YP4/TdKZQpLpyI7hfTyqLWp6taRXjXi+Zya+Ifp476s=)
2: zOlbYakBDFrDkzOA_oQQlx1iDuY.roa (hash: e4ZY7J1Y5uCYePF8wJU1/GcTHqOerk0hFlX4a1/MwvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:ee:42:28:b1:24:72:c0:a8:01:5a:23:6b:ab:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc00e9e3046591f8ba5524480ddf7c6fc4c60e0
Validity
Not Before: Mar 26 03:01:24 2026 GMT
Not After : Mar 27 03:01:24 2026 GMT
Subject: CN=bb14d3a1f5db88ce9996746892c0e5de65ed6a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:63:f5:0b:a1:5c:49:7a:da:81:0d:d5:b1:24:
b1:b3:54:ee:b0:c0:d0:b2:16:d3:1e:bf:f8:77:93:
0d:4d:04:97:66:c2:bc:1a:fc:e8:e1:c8:f8:a7:a4:
a9:9b:7c:d8:2e:e3:3e:9b:8d:50:28:b8:2b:2c:87:
09:27:06:8b:40:06:35:5e:50:9c:b2:41:52:92:ed:
77:af:1f:0e:3d:f5:b9:1d:ab:ae:e1:b0:f6:0b:33:
49:f0:e9:68:a5:c5:63:5e:52:c0:c7:60:fb:dd:a2:
16:84:c0:de:dc:d2:06:aa:6f:bb:5c:a7:6e:63:0b:
2f:58:21:53:be:ca:69:43:69:aa:bd:90:45:ca:3a:
55:09:b7:75:eb:d6:f0:93:89:9f:6a:57:2a:29:68:
1f:e5:28:a7:f0:15:d7:09:ae:35:e2:53:6c:c8:c8:
ff:fa:a6:94:15:0b:8e:89:14:fd:48:fe:b7:25:f1:
48:79:b2:c1:a0:0c:65:db:7f:81:35:58:ee:4b:7f:
21:26:46:81:a8:a1:95:6c:65:b5:1c:fc:0a:d8:b4:
73:46:da:73:b6:d7:2c:1d:44:41:2a:5b:26:c5:3b:
13:c7:80:1d:22:77:d2:e4:03:53:a5:34:13:2a:95:
33:d6:3c:84:03:91:ca:42:2a:30:5b:23:08:7d:ed:
fd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:14:D3:A1:F5:DB:88:CE:99:96:74:68:92:C0:E5:DE:65:ED:6A:84
X509v3 Authority Key Identifier:
keyid:9D:C0:0E:9E:30:46:59:1F:8B:A5:52:44:80:DD:F7:C6:FC:4C:60:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncAOnjBGWR-LpVJEgN33xvxMYOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8ad573-5977-4d76-83eb-bb0319213a29/1/ncAOnjBGWR-LpVJEgN33xvxMYOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e1:1c:06:85:4b:1d:66:40:83:ec:bb:74:da:36:7c:04:28:
c6:34:aa:70:5c:71:3a:27:59:31:ff:d8:3c:a3:c7:69:c0:f2:
7e:c2:d7:44:16:a2:85:2b:36:e9:a3:76:f7:2d:2e:6e:04:5b:
e0:65:c4:91:71:a1:a0:61:d8:04:1a:82:2c:a1:05:ad:ea:e2:
75:a9:db:a6:24:e3:a6:ed:c0:df:f0:a5:67:e6:bc:1e:6b:ea:
5b:10:32:bd:22:8b:58:a2:9b:a8:73:67:7e:c3:d1:c7:8f:32:
34:df:ed:68:83:7e:eb:8b:52:ce:ff:ce:8e:a8:0b:b3:0c:97:
4e:67:b8:33:7c:f1:3a:e4:e9:80:11:b9:e0:d5:b2:ba:0b:76:
cc:08:9f:0f:b3:0a:02:95:97:e5:fa:72:7b:3b:38:7d:b9:e1:
f9:8f:08:c9:c4:16:1f:c7:45:1c:06:47:b7:b5:c8:03:f7:88:
31:2a:15:91:cf:1a:25:d2:d9:af:26:85:87:72:3d:bc:fe:e7:
24:ad:01:ef:0a:1b:f1:9f:ba:d9:e4:d2:43:82:49:a7:e9:12:
f9:46:78:e7:65:16:51:0a:2c:f6:27:bd:71:42:94:d5:1d:6f:
71:b0:34:94:37:bc:2b:f8:8f:d4:f6:de:d5:fe:ed:89:13:3d:
5f:fc:40:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFu5CKLEkcsCoAVoja6u0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYzAwZTllMzA0NjU5MWY4YmE1NTI0NDgwZGRmN2M2ZmM0
YzYwZTAwHhcNMjYwMzI2MDMwMTI0WhcNMjYwMzI3MDMwMTI0WjAzMTEwLwYDVQQD
EyhiYjE0ZDNhMWY1ZGI4OGNlOTk5Njc0Njg5MmMwZTVkZTY1ZWQ2YTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2P1C6FcSXragQ3VsSSxs1TusMDQ
shbTHr/4d5MNTQSXZsK8Gvzo4cj4p6Spm3zYLuM+m41QKLgrLIcJJwaLQAY1XlCc
skFSku13rx8OPfW5Hauu4bD2CzNJ8OlopcVjXlLAx2D73aIWhMDe3NIGqm+7XKdu
YwsvWCFTvsppQ2mqvZBFyjpVCbd169bwk4mfalcqKWgf5Sin8BXXCa414lNsyMj/
+qaUFQuOiRT9SP63JfFIebLBoAxl23+BNVjuS38hJkaBqKGVbGW1HPwK2LRzRtpz
ttcsHURBKlsmxTsTx4AdInfS5ANTpTQTKpUz1jyEA5HKQiowWyMIfe39kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsU06H124jOmZZ0aJLA5d5l7WqEMB8GA1UdIwQY
MBaAFJ3ADp4wRlkfi6VSRIDd98b8TGDgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmNBT25qQkdXUi1McFZKRWdOMzN4dnhNWU9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC84YWQ1NzMtNTk3Ny00ZDc2LTgzZWIt
YmIwMzE5MjEzYTI5LzEvbmNBT25qQkdXUi1McFZKRWdOMzN4dnhNWU9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC84YWQ1NzMtNTk3Ny00ZDc2LTgzZWItYmIwMzE5MjEzYTI5
LzEvbmNBT25qQkdXUi1McFZKRWdOMzN4dnhNWU9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOEcBoVL
HWZAg+y7dNo2fAQoxjSqcFxxOidZMf/YPKPHacDyfsLXRBaihSs26aN29y0ubgRb
4GXEkXGhoGHYBBqCLKEFreridanbpiTjpu3A3/ClZ+a8HmvqWxAyvSKLWKKbqHNn
fsPRx48yNN/taIN+64tSzv/OjqgLswyXTme4M3zxOuTpgBG54NWyugt2zAifD7MK
ApWX5fpyezs4fbnh+Y8IycQWH8dFHAZHt7XIA/eIMSoVkc8aJdLZryaFh3I9vP7n
JK0B7wob8Z+62eTSQ4JJp+kS+UZ452UWUQos9ie9cUKU1R1vcbA0lDe8K/iP1Pbe
1f7tiRM9X/xAIQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:42 2026 by rpki-client