Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft
File: ngN01xvFfbltw5PpH-u56dWf75o.mft (raw, json)
Hash identifier: dhNVSzbhSeguVagyL4Rd71OUYzJGcc9cTYjs1HyhyZw=
Subject key identifier: 67:FF:39:95:9B:6F:C1:27:44:E4:9E:43:A2:20:C2:7F:7D:4D:21:73
Authority key identifier: 9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A
Certificate issuer: /CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
Certificate serial: 019D672C8BEB4BDC483C0F6D9D526D2B8874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft
Manifest number: 18AA
Signing time: Tue 07 Apr 2026 09:01:05 +0000
Manifest this update: Tue 07 Apr 2026 09:01:05 +0000
Manifest next update: Wed 08 Apr 2026 09:01:05 +0000
Files and hashes: 1: BeJNk9n8DYGbjTquSZbOtIDrziM.roa (hash: Zutqy3F5GANTK963UN96Wios5HRE6QVmB+2x04QKDnI=)
2: RymG3dgu32q1w2cKh-aQrObAOFY.roa (hash: vKDtrprX/YjsvTEOZs6TJziAhjR0Xm4oYJTGdbuLsSY=)
3: S1jpIYU2pdyOm86Ekw65pir3-bY.roa (hash: n376vHxrsIXOyQdU+e+2c3li+uvHApOskctbMarm8Dg=)
4: TYub0TncnmCJgK5YqhcQq6uxFY8.roa (hash: PVSgFXhha0Tttkf2YheReFWR8vkcxo99w+Rpb5iRQR8=)
5: ngN01xvFfbltw5PpH-u56dWf75o.crl (hash: WdWjtR+v9zFdp7ZPXPUK9h87G4Sek/Mjayx/k0HVN0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:67:2c:8b:eb:4b:dc:48:3c:0f:6d:9d:52:6d:2b:88:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
Validity
Not Before: Apr 7 09:01:05 2026 GMT
Not After : Apr 8 09:01:05 2026 GMT
Subject: CN=67ff39959b6fc12744e49e43a220c27f7d4d2173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:18:03:bf:c2:ca:80:e6:a9:7c:df:89:ad:54:
aa:46:b4:a4:db:cf:4d:af:f0:53:e9:48:73:1e:43:
58:c2:ed:c8:eb:45:23:5a:31:c5:a7:e8:c3:32:16:
57:cf:d5:3c:05:03:03:36:1b:7c:1e:d2:ff:76:92:
71:bf:14:30:22:46:07:ab:c2:e4:cd:e5:77:ae:ae:
e1:38:44:2a:31:97:81:b3:15:94:e9:c4:3e:97:55:
11:b2:ce:2f:b4:46:67:2d:30:98:68:62:9c:d3:a9:
bb:5f:96:52:ce:5f:65:47:92:28:06:32:f1:18:bf:
44:0d:70:59:77:82:20:1b:e2:f3:64:74:35:db:36:
a3:5a:a8:58:b2:49:ea:c6:95:8a:26:44:60:75:45:
f7:7e:92:d0:0a:26:1d:65:9f:ce:4b:dc:01:b8:2d:
ee:e7:20:aa:a0:fe:05:ca:1d:f1:17:61:64:ed:55:
bb:24:7f:a2:d6:fc:e3:9a:e4:13:99:08:42:96:e8:
d0:9e:c6:09:fe:69:4b:7a:1a:1b:2a:3c:bd:5f:29:
a8:ac:c4:59:31:29:67:ff:6e:29:88:b6:7c:f2:ef:
cb:eb:7d:ae:ca:e0:ab:38:63:27:5b:70:71:c7:b5:
bf:0c:ae:71:7a:ab:20:fd:90:d6:c5:ed:94:d7:63:
1d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FF:39:95:9B:6F:C1:27:44:E4:9E:43:A2:20:C2:7F:7D:4D:21:73
X509v3 Authority Key Identifier:
keyid:9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f7:dc:2e:ab:20:72:04:4d:e2:ff:79:16:37:b4:4a:56:7a:
5e:99:8f:68:1c:15:07:45:81:e8:bc:6a:56:53:b7:d4:1a:72:
5e:29:71:a1:40:ad:ce:0b:88:74:0c:c2:bf:1b:77:1a:e4:f5:
e5:ea:2b:22:b5:f2:bc:4d:60:14:60:d5:53:c3:c4:df:e1:32:
3e:40:aa:67:3f:72:c3:14:4b:10:76:69:58:5b:25:c0:00:07:
e9:e5:f1:b4:73:e7:7b:de:f5:db:b3:35:14:e8:51:4a:dc:81:
04:0a:ca:3a:38:3c:bb:1d:21:6d:00:f0:73:cf:a6:8b:c8:c2:
92:ab:83:16:3e:80:d8:50:25:f7:b5:4b:f4:d6:10:67:22:02:
0b:bb:10:0e:ef:97:fd:d8:1e:08:d1:01:bc:3c:76:4a:a8:ef:
4a:d7:f0:74:ff:38:d8:0c:09:14:24:2e:fb:e0:f8:44:50:bf:
b8:45:54:71:1d:1f:7f:2a:9a:b4:13:91:e3:e8:26:26:9b:7d:
f1:77:5c:ff:cc:5f:c5:36:80:91:4e:d3:9c:eb:d7:c2:70:70:
fb:33:8d:1e:51:86:93:fa:c3:ff:99:ae:4e:40:5f:80:1c:0d:
66:f0:37:3d:f2:0f:f6:18:f2:1f:7f:93:4d:f3:b9:d0:57:8c:
79:fc:ad:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 12:05:55 2026 by rpki-client