Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
File: ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft (raw, json)
Hash identifier: S2I2b6riY8xsEWuw/u22z7WkfdqjoF+8cVfwy6FENFQ=
Subject key identifier: 42:F9:03:C1:EC:CD:37:DF:E1:E4:0E:BE:8E:EC:C4:05:18:CD:7E:EF
Authority key identifier: 9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
Certificate issuer: /CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Certificate serial: 019D284E2EB45A92F48953BA8E3E6F325954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
Manifest number: 1527
Signing time: Thu 26 Mar 2026 04:01:45 +0000
Manifest this update: Thu 26 Mar 2026 04:01:45 +0000
Manifest next update: Fri 27 Mar 2026 04:01:45 +0000
Files and hashes: 1: ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl (hash: Qjq22pDiH5bX7fVVQYz2yqCvyBY3PpXS6gCQa4GyIgg=)
2: tEmNq7LovUuc8Au30SanbkNv0So.roa (hash: s2pSdz/lU/3uCLBb+gthkVpfgt/RCLo0Ow4VSLUvvBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:2e:b4:5a:92:f4:89:53:ba:8e:3e:6f:32:59:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Validity
Not Before: Mar 26 04:01:45 2026 GMT
Not After : Mar 27 04:01:45 2026 GMT
Subject: CN=42f903c1eccd37dfe1e40ebe8eecc40518cd7eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:65:b6:9b:52:f1:4f:18:84:53:b7:15:87:91:
ba:e3:0d:36:25:10:39:c9:1f:79:2f:9b:ab:e9:c9:
9f:5d:2d:51:50:89:b6:13:63:f9:69:8c:07:73:73:
a7:54:21:ba:6c:36:36:45:61:bf:ac:d8:11:96:ab:
a1:6a:f0:24:a0:26:00:97:ab:c8:5b:55:e3:d3:80:
06:ae:a0:d8:bf:22:8b:d9:e4:fc:29:06:f8:64:ed:
75:5d:64:e6:e7:16:70:1d:ad:f3:d1:91:83:a2:56:
57:71:f2:fc:7c:e6:03:4d:ee:04:1a:e3:e4:b5:43:
12:ed:73:73:05:53:ba:f7:01:b2:53:ff:4b:18:9f:
82:83:30:0b:f8:c0:42:97:1f:48:f2:a0:ee:2d:62:
33:4b:b9:b2:69:59:1b:c3:3d:c2:2e:32:ac:4e:83:
4b:fd:24:4b:b4:09:f5:19:ae:a0:15:af:7c:99:c7:
ab:d3:d2:d7:39:90:8d:c2:ea:13:39:60:91:7a:14:
68:0d:61:e4:ac:a2:f0:95:26:d0:c0:a8:88:d9:06:
59:af:c3:73:58:30:83:31:ba:e0:db:54:26:c7:15:
58:a4:85:b7:cb:f3:41:6f:b3:75:ec:14:39:92:4e:
6f:63:ac:2f:ef:70:e6:6b:94:af:a2:c7:84:fc:c2:
cb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F9:03:C1:EC:CD:37:DF:E1:E4:0E:BE:8E:EC:C4:05:18:CD:7E:EF
X509v3 Authority Key Identifier:
keyid:9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:67:69:39:12:3a:74:c1:c0:f3:58:22:f7:be:fe:8a:85:46:
12:c1:da:56:ea:b6:8e:91:13:6a:c6:a8:9d:53:00:44:0e:f6:
e3:ec:24:d8:ff:72:92:d8:c2:14:9d:e4:aa:9b:0d:20:bc:56:
73:ec:f3:55:70:aa:48:1e:86:32:bf:89:e8:b0:3a:43:1e:f5:
71:9b:7f:18:73:bb:4c:4f:4b:c7:15:49:e5:93:10:40:d1:c2:
b3:08:df:c0:49:14:07:0a:ee:7f:3c:b5:f5:aa:e3:99:c4:fe:
1b:44:c7:04:e1:d8:b0:aa:87:36:f6:ba:ec:3c:2f:11:7e:72:
69:b6:11:4f:6c:bd:38:ec:15:9e:12:04:00:72:72:59:0c:fa:
0a:f0:93:96:09:ac:6a:24:27:b1:4e:0e:21:96:08:7e:2a:b9:
a3:0f:73:d1:f8:af:89:9c:01:30:31:22:4c:db:78:13:a3:33:
78:60:f1:87:c7:78:ef:bf:ff:22:64:c7:2f:ea:cd:b5:6b:6f:
cd:7f:b8:2b:8c:7d:ed:87:7f:e6:11:92:dc:04:b9:75:08:aa:
59:a7:59:e2:fa:4e:15:4e:2f:79:3c:11:05:13:0d:67:22:6f:
30:a3:04:84:e2:9b:1b:ea:83:6f:cd:88:0d:36:2e:f0:ef:8d:
12:36:47:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTi60WpL0iVO6jj5vMllUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMDJlMDY0Yzk4YjMyMzFjM2YyMTQ4YTFjM2Q5YzM4N2Q0
ODllZTkwHhcNMjYwMzI2MDQwMTQ1WhcNMjYwMzI3MDQwMTQ1WjAzMTEwLwYDVQQD
Eyg0MmY5MDNjMWVjY2QzN2RmZTFlNDBlYmU4ZWVjYzQwNTE4Y2Q3ZWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2W2m1LxTxiEU7cVh5G64w02JRA5
yR95L5ur6cmfXS1RUIm2E2P5aYwHc3OnVCG6bDY2RWG/rNgRlquhavAkoCYAl6vI
W1Xj04AGrqDYvyKL2eT8KQb4ZO11XWTm5xZwHa3z0ZGDolZXcfL8fOYDTe4EGuPk
tUMS7XNzBVO69wGyU/9LGJ+CgzAL+MBClx9I8qDuLWIzS7myaVkbwz3CLjKsToNL
/SRLtAn1Ga6gFa98mcer09LXOZCNwuoTOWCRehRoDWHkrKLwlSbQwKiI2QZZr8Nz
WDCDMbrg21QmxxVYpIW3y/NBb7N17BQ5kk5vY6wv73Dma5SvoseE/MLLNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEL5A8HszTff4eQOvo7sxAUYzX7vMB8GA1UdIwQY
MBaAFJ4C4GTJizIxw/IUihw9nDh9SJ7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmdMZ1pNbUxNakhEOGhTS0hEMmNPSDFJbnVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81ZDdiYzQtZTBjNS00YTQ4LTkwZTYt
NzUyNTE2ODkwZDNkLzEvbmdMZ1pNbUxNakhEOGhTS0hEMmNPSDFJbnVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi81ZDdiYzQtZTBjNS00YTQ4LTkwZTYtNzUyNTE2ODkwZDNk
LzEvbmdMZ1pNbUxNakhEOGhTS0hEMmNPSDFJbnVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWdpORI6
dMHA81gi977+ioVGEsHaVuq2jpETasaonVMARA724+wk2P9yktjCFJ3kqpsNILxW
c+zzVXCqSB6GMr+J6LA6Qx71cZt/GHO7TE9LxxVJ5ZMQQNHCswjfwEkUBwrufzy1
9arjmcT+G0THBOHYsKqHNva67DwvEX5yabYRT2y9OOwVnhIEAHJyWQz6CvCTlgms
aiQnsU4OIZYIfiq5ow9z0fiviZwBMDEiTNt4E6MzeGDxh8d477//ImTHL+rNtWtv
zX+4K4x97Yd/5hGS3AS5dQiqWadZ4vpOFU4veTwRBRMNZyJvMKMEhOKbG+qDb82I
DTYu8O+NEjZHtQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:23:17 2026 by rpki-client