Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
File: NgAOvu0kK5VkrclUhTI7lr1vXAI.mft (raw, json)
Hash identifier: y0UhCYP+w4ma2NfyDaq7chro6xeSfnBLLNXqojbqMh4=
Subject key identifier: CC:0C:F9:CA:1A:00:33:9D:20:4B:33:D0:53:E9:4B:2D:71:93:15:E7
Authority key identifier: 36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
Certificate issuer: /CN=36000ebeed242b9564adc95485323b96bd6f5c02
Certificate serial: 019D29294AC9003EE2EB6E1885417A57F0F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
Manifest number: 13F5
Signing time: Thu 26 Mar 2026 08:01:05 +0000
Manifest this update: Thu 26 Mar 2026 08:01:05 +0000
Manifest next update: Fri 27 Mar 2026 08:01:05 +0000
Files and hashes: 1: BHf8SWUieWyp8CsFi-LkKjkwID0.roa (hash: r6mZHm7Sd1CEnMX4mNcO0XlOAIiIxrl1PQK5EqAyZj4=)
2: NgAOvu0kK5VkrclUhTI7lr1vXAI.crl (hash: d3AcHBp/2S+Cdj5e2HOQ72feQxXS2d3uGBcZCe/iwUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:4a:c9:00:3e:e2:eb:6e:18:85:41:7a:57:f0:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36000ebeed242b9564adc95485323b96bd6f5c02
Validity
Not Before: Mar 26 08:01:05 2026 GMT
Not After : Mar 27 08:01:05 2026 GMT
Subject: CN=cc0cf9ca1a00339d204b33d053e94b2d719315e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0d:78:1a:00:d2:4e:20:32:c8:d4:d7:7e:d3:
0c:b9:19:db:91:6b:77:c3:c1:36:29:ee:e4:f3:2c:
4d:64:af:38:ee:5a:43:19:71:e9:c9:94:41:99:eb:
d0:b1:34:86:f3:b6:ea:12:92:b2:ae:48:e0:80:9e:
d9:c2:92:d4:d9:c9:4b:a0:43:2a:5f:93:f2:e7:6e:
a4:9d:39:2e:a8:0d:6f:10:27:f2:51:91:3b:75:aa:
b5:27:11:c4:e2:86:24:cb:61:1a:0a:3c:43:3a:36:
93:10:04:b7:09:d3:3e:9b:b8:63:20:a9:76:8a:5f:
e8:62:06:a1:27:dc:45:e2:0f:48:f8:04:81:26:8e:
af:80:2b:9e:a9:72:43:0c:c9:8a:12:53:b4:e8:e9:
4f:33:c1:25:d8:00:30:89:3e:7c:af:83:b2:3a:66:
6d:53:b0:0b:a7:28:30:2d:57:d5:d6:0f:af:da:a9:
f7:de:91:f4:d4:7c:55:09:23:4f:56:70:3e:ea:39:
49:61:1b:83:b5:2d:dc:85:e0:88:64:31:7f:83:33:
a0:27:90:59:5f:b4:dd:a5:93:a6:6d:a2:7a:dd:e3:
eb:01:7a:a5:0f:a8:16:93:b2:9e:6b:3c:b0:76:0b:
7e:e8:0f:9b:04:ed:f0:19:ae:18:4c:bd:86:1d:ec:
90:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0C:F9:CA:1A:00:33:9D:20:4B:33:D0:53:E9:4B:2D:71:93:15:E7
X509v3 Authority Key Identifier:
keyid:36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:10:59:41:ec:e6:1e:46:a0:ba:f7:59:7b:67:a5:a2:b0:4d:
20:a6:e9:f0:eb:81:cf:60:20:b8:05:ab:7d:49:55:7f:73:c3:
6a:f2:8a:a2:59:f3:32:ec:89:c3:69:45:14:11:f7:9f:40:ec:
18:58:93:35:5f:b7:fd:45:56:0c:13:88:1a:47:2c:4d:d0:22:
33:3e:35:7d:2d:aa:f0:a8:a0:39:ef:aa:7f:89:d8:85:ab:45:
68:89:c3:d5:97:0f:00:d2:ac:66:7e:71:f3:c0:26:0b:3c:91:
8d:f4:76:44:4d:1a:d7:31:8d:f0:41:87:d6:d7:1c:0d:4f:a9:
32:77:e3:68:ab:f6:82:26:c6:2d:43:5c:2a:9d:7b:e4:a3:8a:
de:5d:27:9c:a0:e0:e9:90:3c:46:48:d8:ba:44:c0:26:f0:9e:
5c:bd:fb:14:fb:81:ae:91:8f:4b:74:22:31:10:82:2b:8a:af:
a0:1a:ad:df:a9:28:59:46:cb:36:00:65:c3:c4:57:97:9c:68:
53:1c:71:89:dd:c2:eb:87:0b:8b:25:99:52:d4:06:64:8a:2b:
61:5f:55:54:2a:5f:a0:e1:52:d3:b2:be:cc:88:f4:69:b7:bc:
4f:fb:5b:05:05:b7:39:79:9f:6b:d7:5c:81:23:25:2d:e8:45:
af:9f:89:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:59 2026 by rpki-client