Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
File: ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft (raw, json)
Hash identifier: KAutT+Tf9gEGN5NkVkvZChTQXtDBZKKQl9F0GiweyRA=
Subject key identifier: 13:CA:E8:78:1A:47:D8:2C:8C:D2:6D:D2:82:12:D7:1B:E4:82:AD:81
Authority key identifier: 9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
Certificate issuer: /CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Certificate serial: 019E1F7F2FEB569524124F810A9B7101896A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
Manifest number: 15A7
Signing time: Wed 13 May 2026 04:01:29 +0000
Manifest this update: Wed 13 May 2026 04:01:29 +0000
Manifest next update: Thu 14 May 2026 04:01:29 +0000
Files and hashes: 1: ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl (hash: Rjna2/ydXpoeW5IzywWX1mvlTFJcq8yU7pFYZXi5Vfw=)
2: tEmNq7LovUuc8Au30SanbkNv0So.roa (hash: s2pSdz/lU/3uCLBb+gthkVpfgt/RCLo0Ow4VSLUvvBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:2f:eb:56:95:24:12:4f:81:0a:9b:71:01:89:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Validity
Not Before: May 13 04:01:29 2026 GMT
Not After : May 14 04:01:29 2026 GMT
Subject: CN=13cae8781a47d82c8cd26dd28212d71be482ad81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cf:ed:a9:d7:5f:41:68:2d:c3:1c:c0:fb:01:
6b:d0:ad:e8:8e:b2:f1:54:f5:94:12:f5:3b:20:33:
37:84:c6:6c:69:1c:1b:77:85:57:ff:5f:44:37:97:
d1:73:b0:a1:6e:64:7b:b8:4c:2f:95:5d:77:d6:e5:
b4:dc:ee:15:37:8b:57:4d:69:fa:7f:96:a4:37:03:
33:a2:a7:86:59:e0:c3:dc:5f:31:96:72:69:2c:fd:
ba:da:6b:b5:4d:bd:30:bd:a0:be:6f:cd:97:7c:f8:
9b:52:f6:a0:3e:fd:2b:0b:b0:b2:c0:91:51:36:be:
21:49:4a:f9:76:35:ef:f2:00:25:5c:85:46:3a:71:
48:b3:f8:12:86:dd:9b:b5:3c:d0:d6:ab:95:f1:91:
34:d5:0f:10:b8:1c:b0:39:89:c3:2e:3c:b7:c1:09:
45:52:d1:71:0f:73:39:1d:48:14:b4:3b:43:cc:50:
c7:f2:8f:0b:17:c7:2d:2e:d9:93:ef:9c:31:53:8f:
40:5d:4c:6c:02:f2:5f:25:e7:19:f6:9e:b9:fa:4e:
34:93:f2:6f:31:35:b1:d7:49:df:6b:e1:33:8e:3a:
b4:c1:14:81:2d:e1:a4:22:1b:85:b6:df:a0:c1:b5:
95:cd:a4:9e:64:50:5c:d3:d0:c0:9e:2a:05:7d:94:
9a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CA:E8:78:1A:47:D8:2C:8C:D2:6D:D2:82:12:D7:1B:E4:82:AD:81
X509v3 Authority Key Identifier:
keyid:9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:75:62:58:1b:89:26:14:9b:30:c8:5c:52:67:8f:7f:7d:a5:
5f:d3:39:9a:5e:1c:ed:3f:1f:12:6d:b2:d3:61:27:df:ce:91:
e1:3d:b7:d7:88:70:e9:a5:f4:20:1e:40:be:08:b0:39:93:b0:
75:5a:b9:c4:e2:db:16:2e:ed:04:11:b4:01:49:81:5d:4a:72:
12:6b:06:7f:3d:51:b7:69:54:37:a6:a3:c6:6d:62:1b:75:ed:
31:85:dc:d5:4f:5c:83:e2:58:c3:cf:1e:cb:a7:15:ac:e9:22:
40:ff:8a:d9:54:f5:86:b4:c3:3c:98:d6:8f:70:06:f3:61:ab:
a3:2a:da:1d:f0:50:12:19:2b:07:a2:ae:50:e2:c6:60:28:e4:
00:df:62:43:fa:2d:13:30:8e:6b:bb:e1:e0:43:81:d3:c3:6f:
3c:32:6b:15:82:25:17:20:16:7a:7f:7a:b4:59:20:82:6c:a9:
ed:a0:83:d0:92:b1:b8:66:98:59:48:7b:52:a3:5b:02:97:2a:
45:bb:24:cd:0c:1a:c1:75:04:0a:74:62:97:50:e9:83:b3:e5:
80:48:a7:85:61:dd:01:ce:b7:97:29:73:34:eb:a8:df:52:18:
f6:73:75:d2:8c:a6:8c:f6:6f:e8:10:9a:f6:a7:c7:bc:1c:26:
ee:e9:e0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:17:04 2026 by rpki-client