Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
File: NgqWAeAvgSjvZG9VlTNuCleRfK8.mft (raw, json)
Hash identifier: 4BlzRxo+tpfA5mggCxBtB1D1IcjF2/QTPht23Zsmec4=
Subject key identifier: 61:D6:DC:6D:1C:1A:8D:F6:7E:55:B3:04:96:CE:13:2B:87:C8:97:B0
Authority key identifier: 36:0A:96:01:E0:2F:81:28:EF:64:6F:55:95:33:6E:0A:57:91:7C:AF
Certificate issuer: /CN=360a9601e02f8128ef646f5595336e0a57917caf
Certificate serial: 019D2772C46F61045C30028FA70474854279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
Manifest number: 0340
Signing time: Thu 26 Mar 2026 00:02:05 +0000
Manifest this update: Thu 26 Mar 2026 00:02:05 +0000
Manifest next update: Fri 27 Mar 2026 00:02:05 +0000
Files and hashes: 1: NgqWAeAvgSjvZG9VlTNuCleRfK8.crl (hash: CR+EZW1dzVvj6YrAFqk2a/Uup9iTACmLgt4qFarMzf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:c4:6f:61:04:5c:30:02:8f:a7:04:74:85:42:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360a9601e02f8128ef646f5595336e0a57917caf
Validity
Not Before: Mar 26 00:02:05 2026 GMT
Not After : Mar 27 00:02:05 2026 GMT
Subject: CN=61d6dc6d1c1a8df67e55b30496ce132b87c897b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:81:aa:40:6e:ae:e6:d9:07:02:1b:8d:4c:68:
c3:64:91:88:1e:91:45:20:51:72:7d:cb:5e:04:1e:
ee:1c:86:fe:ef:4b:f8:9f:0d:72:5f:32:a0:8e:6c:
6a:c7:e1:65:ef:cb:29:40:b7:25:85:32:b3:fc:58:
bc:19:92:e4:21:9f:b1:31:0a:e9:8c:a4:da:27:98:
5f:f4:72:86:30:2e:c0:01:cb:8d:31:9c:3e:e8:1d:
50:14:10:0a:9a:11:c8:e6:60:8e:78:74:6b:14:62:
e1:8c:56:b2:fd:e0:39:b4:fe:77:42:a9:0b:e8:05:
cf:a0:84:54:b7:f3:dd:39:53:bb:79:40:14:3f:2d:
55:f2:b1:ea:44:d7:59:38:85:69:9d:05:32:06:b0:
da:4c:28:c4:7f:a8:ad:3c:c4:06:0d:90:de:2f:7c:
32:f8:23:92:ff:bb:7d:6f:29:c5:8c:dc:56:bd:a5:
3a:b0:c1:51:ac:df:e2:2b:a0:2e:a2:70:09:49:de:
68:be:61:70:ef:fa:3d:28:11:4c:fa:75:72:f1:d6:
64:05:ec:e9:57:44:d1:c4:b0:55:2d:46:40:c4:04:
4d:c2:74:04:5d:74:8b:63:30:91:0b:84:6f:e1:89:
5e:19:d5:1c:93:ac:44:f1:e5:c2:22:3e:f5:72:1f:
8b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D6:DC:6D:1C:1A:8D:F6:7E:55:B3:04:96:CE:13:2B:87:C8:97:B0
X509v3 Authority Key Identifier:
keyid:36:0A:96:01:E0:2F:81:28:EF:64:6F:55:95:33:6E:0A:57:91:7C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e1:60:dc:e6:87:29:ba:22:50:3b:a6:c1:d5:39:5a:d5:c2:
c5:25:15:4f:fc:ae:a1:9f:fb:8b:f1:31:17:37:13:d7:81:a2:
45:c0:88:7b:08:59:5a:af:ff:65:6f:e7:96:8a:73:e1:65:47:
e4:38:4e:29:21:25:42:95:b4:8c:e6:98:7c:28:7e:04:99:31:
0b:81:1f:aa:0f:03:5b:65:bc:4a:97:5a:6e:6f:03:6d:13:5f:
87:df:c6:f5:bc:47:4b:db:92:81:2e:c1:9a:04:fa:b7:d2:1d:
c1:42:0b:59:fc:89:53:d0:bd:7f:43:05:ab:0b:0c:b9:69:2c:
c8:01:82:6a:4e:53:a9:7c:06:8f:d9:bc:1f:48:b0:45:92:c3:
6b:d3:31:0e:e4:c3:f5:fb:ed:e3:1b:31:07:22:aa:20:d8:ba:
19:cf:df:eb:2c:fd:07:8e:ae:fa:91:33:65:62:9d:c7:e5:a5:
21:70:78:f9:a5:1e:37:8b:3d:fd:a6:74:6f:c6:9a:4d:72:69:
cd:68:15:c4:d6:17:d4:7b:95:02:49:39:0a:d1:f5:ce:d1:ae:
1a:ca:e4:2d:6a:73:4c:90:a3:0e:57:41:55:0e:c9:ea:e8:cc:
10:85:1f:dc:10:a4:2e:8d:f9:fd:9e:f4:09:3d:98:63:b8:a6:
c2:9d:d5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:51 2026 by rpki-client