Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft
File: ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft (raw, json)
Hash identifier: GdhDLrH5I+8vwrrpwyI6nmbgSc6k6rFn6YpEtYgBg78=
Subject key identifier: 04:F6:5A:5A:24:51:19:1C:AA:7E:02:A5:B7:E5:B2:8E:ED:CB:8C:17
Authority key identifier: 9E:0D:E4:F2:62:75:EA:5F:C2:F2:3C:8B:4D:7E:06:D7:2B:3B:73:C7
Certificate issuer: /CN=9e0de4f26275ea5fc2f23c8b4d7e06d72b3b73c7
Certificate serial: 019D389BAE067DE3B5612E0650E46E5E8AB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft
Manifest number: 09E8
Signing time: Sun 29 Mar 2026 08:00:19 +0000
Manifest this update: Sun 29 Mar 2026 08:00:19 +0000
Manifest next update: Mon 30 Mar 2026 08:00:19 +0000
Files and hashes: 1: 89T2d-p1rI_t7zp4IKHTzVRe72U.roa (hash: u5qDexFa1LR5cVSk1zIhT1bruMwSgtsKPW6k4/CBkvI=)
2: ng3k8mJ16l_C8jyLTX4G1ys7c8c.crl (hash: n7klw0ZugnlSi3zHzG0j/vyJfzJKIF6e4wM2+X2P/x4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ae:06:7d:e3:b5:61:2e:06:50:e4:6e:5e:8a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0de4f26275ea5fc2f23c8b4d7e06d72b3b73c7
Validity
Not Before: Mar 29 08:00:19 2026 GMT
Not After : Mar 30 08:00:19 2026 GMT
Subject: CN=04f65a5a2451191caa7e02a5b7e5b28eedcb8c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:23:df:93:1b:5f:aa:22:48:47:46:8a:28:a0:
9b:77:0e:9c:32:1d:0d:df:0a:e7:ee:2b:b3:b5:5d:
a5:e8:77:5d:82:1b:05:59:fd:15:f9:1e:db:01:6c:
8f:22:19:97:52:c3:8b:07:aa:28:fb:5b:f1:5e:3b:
be:59:a3:72:10:1d:69:58:c0:98:65:a8:2d:9b:9b:
be:9b:94:be:e8:bb:2b:69:17:fa:c6:1f:d4:aa:30:
36:9c:19:19:46:42:48:e5:6c:fb:85:fe:66:bb:01:
3b:69:1c:08:82:6b:66:7d:75:ed:3c:27:b8:fd:64:
bf:e2:0e:82:b9:48:30:7c:ca:bc:9e:8a:92:8a:5b:
b9:8a:f3:65:79:49:8c:2a:7b:43:e7:48:ff:5e:40:
6f:6a:86:7f:f9:1b:a9:57:d0:8a:cd:84:b7:f2:2d:
d7:48:8d:38:9a:34:0a:06:b4:f6:23:9e:a0:18:05:
96:73:d2:00:53:70:87:61:07:96:aa:de:c7:a8:d0:
a2:ad:4a:c1:7d:41:af:7e:c5:3b:e8:6c:0a:ab:bf:
6d:be:d6:cb:72:f0:49:6e:6d:f9:b4:db:36:73:c5:
4e:0a:73:cd:d4:9b:8c:fd:1f:e4:eb:e8:fe:c0:b6:
a0:3d:91:5e:8d:19:f2:f3:83:72:ed:0b:ca:64:30:
00:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F6:5A:5A:24:51:19:1C:AA:7E:02:A5:B7:E5:B2:8E:ED:CB:8C:17
X509v3 Authority Key Identifier:
keyid:9E:0D:E4:F2:62:75:EA:5F:C2:F2:3C:8B:4D:7E:06:D7:2B:3B:73:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:36:8e:fc:d2:be:d4:0b:2f:6d:50:8a:4a:a5:af:4a:77:55:
ce:db:2d:54:1a:5d:93:c1:42:01:5b:97:29:9d:db:8e:31:7a:
bf:76:4f:ec:41:42:61:3f:79:f6:04:2e:67:dc:f1:e5:c1:f8:
25:90:c8:b0:f7:39:59:bc:ca:7d:14:20:5a:fc:74:02:4a:8a:
46:77:fb:c1:b4:79:bc:68:99:d5:89:7e:55:3b:a8:6b:37:57:
53:b0:fe:07:61:7a:19:89:11:c4:74:76:5e:8c:34:33:94:d9:
88:e4:74:bd:88:20:4c:45:4b:3e:1a:5f:e6:a4:b2:92:f7:53:
fe:03:47:4b:ec:54:47:2a:e1:1f:f3:f8:41:10:55:8b:df:98:
6c:1e:54:31:7b:cf:fa:53:c2:6a:28:c2:6d:02:41:94:6f:0d:
4d:15:a7:7e:fa:0f:25:d4:2b:c9:2d:84:8d:7f:20:63:4a:4e:
f0:3e:8e:40:71:07:e5:7d:2a:47:7b:e3:05:8c:7b:44:ee:56:
21:18:56:bd:57:a1:08:6e:22:0c:c8:70:e6:2b:51:69:ed:10:
65:a7:3c:e4:fd:c5:09:9b:0c:d3:8d:4e:a8:d4:c7:9b:6d:0c:
09:d1:b7:96:f6:21:d0:65:cc:ca:a0:84:9a:17:63:69:94:b9:
47:c1:65:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m64GfeO1YS4GUORuXoq1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMGRlNGYyNjI3NWVhNWZjMmYyM2M4YjRkN2UwNmQ3MmIz
YjczYzcwHhcNMjYwMzI5MDgwMDE5WhcNMjYwMzMwMDgwMDE5WjAzMTEwLwYDVQQD
EygwNGY2NWE1YTI0NTExOTFjYWE3ZTAyYTViN2U1YjI4ZWVkY2I4YzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyPfkxtfqiJIR0aKKKCbdw6cMh0N
3wrn7iuztV2l6HddghsFWf0V+R7bAWyPIhmXUsOLB6oo+1vxXju+WaNyEB1pWMCY
Zagtm5u+m5S+6LsraRf6xh/UqjA2nBkZRkJI5Wz7hf5muwE7aRwIgmtmfXXtPCe4
/WS/4g6CuUgwfMq8noqSilu5ivNleUmMKntD50j/XkBvaoZ/+RupV9CKzYS38i3X
SI04mjQKBrT2I56gGAWWc9IAU3CHYQeWqt7HqNCirUrBfUGvfsU76GwKq79tvtbL
cvBJbm35tNs2c8VOCnPN1JuM/R/k6+j+wLagPZFejRny84Ny7QvKZDAA3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAT2WlokURkcqn4Cpbflso7ty4wXMB8GA1UdIwQY
MBaAFJ4N5PJidepfwvI8i01+BtcrO3PHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmczazhtSjE2bF9DOGp5TFRYNEcxeXM3YzhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lYWM5OTctY2UxZS00NTliLTk0MzYt
ZWQ3MDY3Zjk4N2Q5LzEvbmczazhtSjE2bF9DOGp5TFRYNEcxeXM3YzhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9lYWM5OTctY2UxZS00NTliLTk0MzYtZWQ3MDY3Zjk4N2Q5
LzEvbmczazhtSjE2bF9DOGp5TFRYNEcxeXM3YzhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOTaO/NK+
1AsvbVCKSqWvSndVztstVBpdk8FCAVuXKZ3bjjF6v3ZP7EFCYT959gQuZ9zx5cH4
JZDIsPc5WbzKfRQgWvx0AkqKRnf7wbR5vGiZ1Yl+VTuoazdXU7D+B2F6GYkRxHR2
Xow0M5TZiOR0vYggTEVLPhpf5qSykvdT/gNHS+xURyrhH/P4QRBVi9+YbB5UMXvP
+lPCaijCbQJBlG8NTRWnfvoPJdQryS2EjX8gY0pO8D6OQHEH5X0qR3vjBYx7RO5W
IRhWvVehCG4iDMhw5itRae0QZac85P3FCZsM041OqNTHm20MCdG3lvYh0GXMyqCE
mhdjaZS5R8FlBA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:40 2026 by rpki-client