Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
File: ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft (raw, json)
Hash identifier: 0JcdUVgtmHrf/Q1qGoJp6c1vyI4TrhL2a/C1bMbCbec=
Subject key identifier: BE:CF:48:17:79:16:6E:70:43:77:0C:1C:D1:A9:C4:DE:8B:CB:3D:D3
Authority key identifier: 9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
Certificate issuer: /CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Certificate serial: 019D2A3B56DEC1479FD5B2B7431E5C01D606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
Manifest number: 1528
Signing time: Thu 26 Mar 2026 13:00:25 +0000
Manifest this update: Thu 26 Mar 2026 13:00:25 +0000
Manifest next update: Fri 27 Mar 2026 13:00:25 +0000
Files and hashes: 1: ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl (hash: gfPea8iVRFYM/WH8naQwT7OycwnxJU1a0MHR+sbRAGs=)
2: tEmNq7LovUuc8Au30SanbkNv0So.roa (hash: s2pSdz/lU/3uCLBb+gthkVpfgt/RCLo0Ow4VSLUvvBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:56:de:c1:47:9f:d5:b2:b7:43:1e:5c:01:d6:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Validity
Not Before: Mar 26 13:00:25 2026 GMT
Not After : Mar 27 13:00:25 2026 GMT
Subject: CN=becf481779166e7043770c1cd1a9c4de8bcb3dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:32:ef:30:c9:cf:92:54:e7:e8:54:9a:d5:f7:
24:ff:32:d4:f1:6b:97:38:4f:d0:b3:d1:a0:8c:4e:
18:0b:1e:b6:e2:6c:c9:b2:cb:b0:a0:b9:8e:46:3b:
eb:8d:0e:73:b3:8f:b3:2d:36:ef:e9:0c:2c:3e:f6:
f5:3c:3d:f5:55:45:cd:a3:69:06:4b:5a:79:c7:52:
ed:34:06:39:84:24:1b:87:b7:71:f3:22:c7:12:6f:
1e:02:0c:08:90:5c:9a:43:f2:5e:07:df:64:88:7c:
35:57:8d:00:76:83:04:a6:f9:4a:15:29:07:64:98:
4f:ba:a1:7c:ab:2f:dc:95:b4:bf:ea:19:89:28:f3:
d0:67:2c:98:ca:f6:92:a8:08:e7:cc:5c:d2:bd:27:
89:81:b4:18:4d:35:2d:d8:9b:ae:cd:a1:4d:45:c2:
9e:24:f5:12:53:6c:14:dc:b8:cb:7e:ca:e7:aa:7d:
b0:ca:1d:8c:31:cf:b9:06:2b:6c:53:e1:db:71:9f:
f3:dc:1a:16:76:7c:cc:66:2c:70:33:79:22:7f:94:
4f:8e:de:fd:fd:62:8f:55:4e:c4:88:c0:47:f6:19:
0a:9b:a2:78:1f:bd:7f:9b:28:12:3c:c6:57:41:64:
3b:cc:6f:70:d6:32:76:31:f6:46:1f:e8:15:0a:e1:
d8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CF:48:17:79:16:6E:70:43:77:0C:1C:D1:A9:C4:DE:8B:CB:3D:D3
X509v3 Authority Key Identifier:
keyid:9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:27:2b:3a:34:75:83:a8:3b:d6:42:00:35:03:24:f7:a5:e4:
0c:19:2b:88:57:cc:6a:3d:75:d2:6b:ea:89:ff:8b:d6:82:f7:
92:f9:5c:81:d6:e3:da:63:2d:b6:96:82:31:9f:68:be:da:c6:
b3:68:ba:bc:9c:13:3b:9d:30:b9:59:a2:ac:70:f2:51:25:ae:
0a:c3:e0:9c:83:35:f9:f2:dc:d5:31:b5:ca:7c:db:22:d6:a1:
bf:0b:83:62:a0:6e:b9:a6:bc:d7:42:24:a2:62:50:f5:9c:90:
16:eb:c0:d3:93:19:92:94:c9:7a:9b:41:06:ea:b7:df:e4:77:
2f:18:84:5d:e4:9d:8e:ec:b0:17:c7:df:ee:ed:67:b6:35:1f:
f3:4e:67:3a:0a:eb:aa:3f:37:12:70:4d:a8:08:9d:f2:89:e5:
a6:cd:b3:84:49:bb:e9:1e:6a:e8:f6:e2:ee:3f:14:72:da:b4:
5c:26:5d:cf:f3:f1:04:26:fe:6d:1d:26:8b:9e:c0:df:b1:07:
c4:b9:fa:01:30:22:7b:49:ee:05:1a:a6:9c:46:3b:11:47:96:
e8:8a:07:d2:12:c2:37:b8:df:0d:ed:8a:89:bd:12:56:88:64:
2c:8e:a0:d9:b0:03:f7:9d:03:40:63:ff:c6:e9:fd:bb:78:05:
90:28:8c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:26 2026 by rpki-client