Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
File: ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft (raw, json)
Hash identifier: fpvvBTIMSVyRbwCIwUSOlrSC7vE6XHZOq1uP+EEParM=
Subject key identifier: 29:B3:C5:F8:36:D6:C0:E0:2D:EB:8C:AB:E5:EF:16:3D:13:7F:87:45
Authority key identifier: 9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
Certificate issuer: /CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Certificate serial: 019F9248B5388E499CF5B5D7412E858C453F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
Manifest number: 1667
Signing time: Fri 24 Jul 2026 04:01:06 +0000
Manifest this update: Fri 24 Jul 2026 04:01:06 +0000
Manifest next update: Sat 25 Jul 2026 04:01:06 +0000
Files and hashes: 1: ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl (hash: T2y9XicmCNhof3ZExFBCdPSlXReJGKQNZDpHMpYcos0=)
2: tEmNq7LovUuc8Au30SanbkNv0So.roa (hash: s2pSdz/lU/3uCLBb+gthkVpfgt/RCLo0Ow4VSLUvvBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:b5:38:8e:49:9c:f5:b5:d7:41:2e:85:8c:45:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Validity
Not Before: Jul 24 04:01:06 2026 GMT
Not After : Jul 25 04:01:06 2026 GMT
Subject: CN=29b3c5f836d6c0e02deb8cabe5ef163d137f8745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:04:a3:78:d5:28:11:8f:1d:ed:cb:44:bf:e9:
75:35:53:2d:08:eb:5b:23:b8:c8:33:a1:04:29:30:
28:f0:36:72:b9:76:fc:c9:d0:8e:1f:3d:ad:c5:ca:
45:88:ad:c5:9e:7c:1e:75:40:90:10:29:1d:78:df:
84:c0:9a:ff:02:54:f2:fb:ce:fb:5a:3d:70:76:e6:
07:01:cd:e9:8a:4c:27:30:aa:86:80:5a:19:5b:28:
72:7c:0f:fc:d2:4f:6a:e7:5b:ae:9c:30:35:54:00:
04:bb:bd:f1:0f:ef:a7:0f:67:26:3c:93:0d:ba:71:
1d:8c:b9:db:bc:e1:47:04:6e:e7:5c:bc:6a:8b:74:
5d:93:69:f0:fb:cb:b5:14:8c:0f:fd:a9:a7:fa:aa:
a3:76:0c:3d:12:77:d4:03:e7:82:97:f7:f7:e9:06:
a6:46:09:f8:7e:e4:0d:e2:b0:e2:89:aa:91:c5:69:
30:68:3d:84:80:45:f3:86:33:f2:e2:67:9d:f2:c2:
c8:d6:09:d6:d6:7c:6f:a0:cf:32:a7:57:67:0c:96:
2f:11:9b:d3:82:f2:6a:70:bc:38:95:db:80:b0:9f:
fb:85:36:67:9a:4b:ad:75:84:de:45:11:c1:f0:4f:
13:e5:39:75:68:68:d1:59:a4:c4:38:c9:24:8a:3d:
01:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B3:C5:F8:36:D6:C0:E0:2D:EB:8C:AB:E5:EF:16:3D:13:7F:87:45
X509v3 Authority Key Identifier:
keyid:9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:71:e7:8e:d3:ac:f4:e0:23:bc:44:7c:ca:62:a5:b4:48:4a:
1d:3b:cd:6a:08:20:a9:4d:51:6a:1d:9b:3d:1c:f8:14:ae:a5:
7f:73:59:e0:76:02:12:46:8a:21:a3:48:11:0a:5b:bf:6d:00:
90:16:0e:ef:71:c9:9f:45:b9:4b:0b:42:18:ad:cf:d5:a8:5b:
3a:fd:c0:0a:5b:c0:b3:27:88:4c:bb:df:d3:99:bf:8f:40:3a:
e2:6c:59:38:e9:b9:87:03:47:98:b0:2a:e0:24:49:cd:2e:6e:
0b:92:f8:d8:be:ee:99:50:dd:b1:b1:97:5e:9d:af:65:2f:65:
5a:3e:4c:ae:2d:b8:6d:d2:e8:7f:15:8a:90:64:0e:a4:a7:da:
23:fd:88:98:9b:39:69:98:40:28:31:3d:ca:47:1a:59:66:c2:
44:8d:cf:ff:4b:7c:fc:b2:1f:d4:bb:f5:0c:5b:3f:e7:49:f2:
29:1a:6d:7a:c1:d2:f5:7a:11:4c:92:3b:64:38:6b:66:c8:d5:
e8:c7:08:3f:85:8a:74:95:39:52:91:b3:8d:54:17:46:39:95:
7f:6d:1f:e0:64:82:08:64:f5:52:40:f8:54:e0:26:74:ad:7d:
af:b2:9d:d8:9b:0d:9c:31:72:84:fe:56:bc:6a:f8:c9:bf:8e:
af:e4:d1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:45:50 2026 by rpki-client