Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.mft
File: Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.mft (raw, json)
Hash identifier: Fqb+Cm5y2figJmDPdEhWeYc5XdhUjeQe8zkgdZ7hjv8=
Subject key identifier: 58:1D:94:5D:C5:AD:FD:00:FB:6D:DA:98:3B:A2:97:6A:2C:E5:2B:D1
Authority key identifier: 36:0C:26:F9:F5:BD:51:76:FB:9A:D0:B6:5A:94:8D:0E:8D:D9:0E:E4
Certificate issuer: /CN=360c26f9f5bd5176fb9ad0b65a948d0e8dd90ee4
Certificate serial: 019D265F57E3B3E0BA3B16F3182447A5470A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.mft
Manifest number: 52
Signing time: Wed 25 Mar 2026 19:01:15 +0000
Manifest this update: Wed 25 Mar 2026 19:01:15 +0000
Manifest next update: Thu 26 Mar 2026 19:01:15 +0000
Files and hashes: 1: Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.crl (hash: XE9Z3cFs4Ylvnb1zdZ3H02T70Z8lm8mzh9KAmY6XkBg=)
2: X7p4GpmVF8fRosHtWstP9WAbsfk.asa (hash: ifmWI2l5FXM2+xdgsA/GHYf01f0SXAv8H1iT8gXkOOo=)
3: sQjE4Ryf3azGzRpKF8iTxt9fGjI.roa (hash: sCZDZUEpHkq2HyKQrO/C9pxfE8YHa827nuwFp5PQA2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:57:e3:b3:e0:ba:3b:16:f3:18:24:47:a5:47:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360c26f9f5bd5176fb9ad0b65a948d0e8dd90ee4
Validity
Not Before: Mar 25 19:01:15 2026 GMT
Not After : Mar 26 19:01:15 2026 GMT
Subject: CN=581d945dc5adfd00fb6dda983ba2976a2ce52bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f7:3e:f7:1b:7b:06:d4:5f:3e:ed:9c:21:5a:
dc:e8:82:d0:c1:86:84:7f:b6:09:68:34:53:a4:c4:
b0:68:49:a2:6a:2f:4f:2a:68:45:1b:53:3c:35:d5:
e6:6d:19:d8:3d:93:70:ad:87:9e:65:d4:a4:a7:0f:
6a:71:a6:fe:13:fe:29:74:99:5e:af:c4:7e:b7:46:
7f:ee:e9:f0:15:ff:d1:1e:7c:82:41:1e:34:f2:45:
9e:73:e7:96:b8:38:c2:e6:d1:1f:3d:ea:dc:0b:19:
00:e2:f8:1e:7f:07:79:58:dd:b6:ee:88:60:64:55:
92:f6:61:6a:7f:4e:30:1e:ab:0f:97:50:7d:72:1e:
1a:0d:bc:f3:42:50:a0:61:dc:c0:52:02:2d:24:e1:
2b:f3:34:62:0b:1c:f1:a4:8e:56:76:b5:25:7c:44:
7b:0e:11:fa:4c:bd:e1:a4:65:34:63:fa:9e:a5:81:
8c:25:08:3a:f1:b6:80:a5:64:3e:03:25:92:aa:bb:
d3:cf:37:08:c4:b6:11:2b:7f:49:11:e2:bb:66:22:
c4:7c:3a:54:28:98:2f:ea:29:a5:85:31:f2:85:14:
17:e2:c5:80:3d:77:6a:83:ab:04:df:db:45:0c:6f:
f5:50:9f:3e:89:23:2f:62:a1:b4:e8:f0:d6:db:09:
73:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1D:94:5D:C5:AD:FD:00:FB:6D:DA:98:3B:A2:97:6A:2C:E5:2B:D1
X509v3 Authority Key Identifier:
keyid:36:0C:26:F9:F5:BD:51:76:FB:9A:D0:B6:5A:94:8D:0E:8D:D9:0E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:26:0a:4f:5f:d2:b4:64:cf:77:e5:cf:26:23:7b:f6:e0:1f:
a3:95:8e:56:7c:94:f9:62:77:18:c8:b1:a1:54:ab:9b:f1:ff:
89:cf:9e:29:50:1d:d5:dd:25:05:97:ce:6c:32:c7:20:0c:92:
d2:17:c4:b4:f7:9e:a6:2c:18:93:44:8a:9e:0d:b6:66:3e:f2:
88:62:13:04:28:5f:e9:0e:83:32:8f:9d:5a:29:6c:5e:a0:7e:
b4:4d:10:fd:7b:9e:28:03:64:c6:3e:66:2d:f2:99:dd:9d:89:
0e:ef:b1:69:a1:1c:8d:2e:c7:e9:a3:99:14:19:72:60:08:71:
5d:2f:2b:50:43:a1:23:39:d0:99:af:cf:ba:b4:e2:7f:82:e8:
20:8a:19:0f:f3:a4:51:bf:e6:d4:b3:7e:74:6a:1d:4d:2d:45:
d1:ff:9d:84:78:77:a2:00:fd:db:61:b8:a5:c0:6f:dc:57:b6:
27:54:9d:e0:b5:09:8f:cf:a4:96:2a:bc:d4:56:f6:2e:92:b4:
77:c0:f7:b4:7e:a6:64:66:3c:fd:72:3a:3a:a5:d9:9b:b1:a2:
ce:3b:22:cd:87:17:51:83:de:8b:93:17:54:bb:22:ef:20:25:
3d:ba:fc:ac:c7:23:b3:2b:f5:b0:ef:1f:08:c7:e6:ca:ad:a6:
fd:35:d5:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX1fjs+C6OxbzGCRHpUcKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MGMyNmY5ZjViZDUxNzZmYjlhZDBiNjVhOTQ4ZDBlOGRk
OTBlZTQwHhcNMjYwMzI1MTkwMTE1WhcNMjYwMzI2MTkwMTE1WjAzMTEwLwYDVQQD
Eyg1ODFkOTQ1ZGM1YWRmZDAwZmI2ZGRhOTgzYmEyOTc2YTJjZTUyYmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vc+9xt7BtRfPu2cIVrc6ILQwYaE
f7YJaDRTpMSwaEmiai9PKmhFG1M8NdXmbRnYPZNwrYeeZdSkpw9qcab+E/4pdJle
r8R+t0Z/7unwFf/RHnyCQR408kWec+eWuDjC5tEfPercCxkA4vgefwd5WN227ohg
ZFWS9mFqf04wHqsPl1B9ch4aDbzzQlCgYdzAUgItJOEr8zRiCxzxpI5WdrUlfER7
DhH6TL3hpGU0Y/qepYGMJQg68baApWQ+AyWSqrvTzzcIxLYRK39JEeK7ZiLEfDpU
KJgv6imlhTHyhRQX4sWAPXdqg6sE39tFDG/1UJ8+iSMvYqG06PDW2wlzPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgdlF3Frf0A+23amDuil2os5SvRMB8GA1UdIwQY
MBaAFDYMJvn1vVF2+5rQtlqUjQ6N2Q7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmd3bS1mVzlVWGI3bXRDMldwU05EbzNaRHVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTY3NDgtZTg1OC00NzNjLTgxYzUt
MDlmMjUwZTFiOWVhLzEvTmd3bS1mVzlVWGI3bXRDMldwU05EbzNaRHVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy85NTY3NDgtZTg1OC00NzNjLTgxYzUtMDlmMjUwZTFiOWVh
LzEvTmd3bS1mVzlVWGI3bXRDMldwU05EbzNaRHVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZiYKT1/S
tGTPd+XPJiN79uAfo5WOVnyU+WJ3GMixoVSrm/H/ic+eKVAd1d0lBZfObDLHIAyS
0hfEtPeepiwYk0SKng22Zj7yiGITBChf6Q6DMo+dWilsXqB+tE0Q/XueKANkxj5m
LfKZ3Z2JDu+xaaEcjS7H6aOZFBlyYAhxXS8rUEOhIznQma/PurTif4LoIIoZD/Ok
Ub/m1LN+dGodTS1F0f+dhHh3ogD922G4pcBv3Fe2J1Sd4LUJj8+kliq81Fb2LpK0
d8D3tH6mZGY8/XI6OqXZm7GizjsizYcXUYPei5MXVLsi7yAlPbr8rMcjsyv1sO8f
CMfmyq2m/TXVBw==
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:35:43 2026 by rpki-client