Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
File: ncNmr2zgsan2AXOxS1_d1-C5YwY.mft (raw, json)
Hash identifier: OaiSbAHFMCl9tdKbPkeOTPI7biiU0m/BE8yN910R/8k=
Subject key identifier: 84:E2:09:AC:CF:51:B1:4A:81:CF:AD:BF:93:60:69:EF:2B:F3:4D:8B
Authority key identifier: 9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
Certificate issuer: /CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Certificate serial: 019D3940B002FD7FE6785434B000828356DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
Manifest number: 184D
Signing time: Sun 29 Mar 2026 11:00:33 +0000
Manifest this update: Sun 29 Mar 2026 11:00:33 +0000
Manifest next update: Mon 30 Mar 2026 11:00:33 +0000
Files and hashes: 1: Kx2A4QHC9gQsEflStPjFwVjhvSA.roa (hash: FMGSXjNyUjkWfrbaK6kOA/2OaW9XrZEgBYS29pUlyug=)
2: ncNmr2zgsan2AXOxS1_d1-C5YwY.crl (hash: SPcPmYcKXYWgDiFYd5wgiclPwavVIHOrtkM/eKVQgvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:b0:02:fd:7f:e6:78:54:34:b0:00:82:83:56:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Validity
Not Before: Mar 29 11:00:33 2026 GMT
Not After : Mar 30 11:00:33 2026 GMT
Subject: CN=84e209accf51b14a81cfadbf936069ef2bf34d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bc:79:fe:30:1d:cd:b5:33:8a:4b:80:9c:92:
73:05:e5:d6:1b:dd:b9:99:20:6a:73:06:d4:d9:a8:
76:9d:c5:94:5e:1f:68:97:42:c4:15:61:86:3f:ed:
05:9b:b5:f5:3c:13:ce:f5:2c:de:0d:06:2c:1c:97:
e2:d8:b4:62:cf:2c:54:9a:e3:8c:0b:42:df:5b:bf:
14:3f:7a:49:d5:7e:06:0c:0d:0a:26:e2:5b:c2:49:
9e:44:b8:7a:f8:e4:84:fd:5b:ec:f1:05:06:27:5f:
79:23:37:13:83:01:eb:fb:fb:cb:bc:4e:ea:24:3b:
95:61:3e:af:28:b4:60:5e:af:22:af:96:bd:f4:a1:
44:87:60:dc:3a:0c:a8:c9:14:f0:bf:db:77:cd:d2:
c8:bc:54:b2:e7:a6:aa:78:ed:c8:6e:84:a4:70:ee:
2a:60:4e:5f:f0:f0:17:19:a1:6d:23:d9:56:e5:f1:
e4:34:e4:56:7b:18:4e:62:39:59:e9:81:a2:45:5e:
a6:24:11:fc:b4:1d:1f:d5:62:41:ff:20:5c:89:05:
9c:b6:7b:9c:da:69:f9:f3:ae:66:01:c2:c4:8d:95:
21:18:77:9c:86:f3:88:40:2f:ed:2c:a8:99:8b:42:
93:26:7f:ce:bc:8f:05:69:fe:bd:ef:04:83:69:6c:
64:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E2:09:AC:CF:51:B1:4A:81:CF:AD:BF:93:60:69:EF:2B:F3:4D:8B
X509v3 Authority Key Identifier:
keyid:9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:62:ea:97:c1:1a:3f:37:c1:8a:df:c0:c0:81:3f:06:92:91:
66:6e:a8:c1:35:a1:1b:2d:a0:19:77:ca:dd:7c:5a:d7:f3:27:
63:77:76:68:9b:64:43:41:4e:43:c7:35:fb:9d:34:75:13:54:
5c:56:95:d9:70:ad:3b:05:87:13:5f:ec:5c:be:1c:3e:cf:bc:
52:98:c9:3a:a7:a4:92:4e:27:85:31:28:21:e3:b7:34:34:a1:
6f:ce:8e:d6:46:b6:29:13:bb:b5:78:ca:f1:ff:dc:6d:ad:61:
f6:ec:28:18:ee:b4:d3:71:98:f3:fc:a8:06:34:c0:6c:d7:0f:
21:8c:a0:d0:3c:56:d4:3d:27:39:c6:d8:90:d9:b4:96:29:c8:
c3:24:76:cb:62:b9:91:b4:bb:cd:6e:70:50:65:35:1b:4e:6b:
a1:ec:e6:9d:f4:7e:be:e3:04:35:8f:75:d9:01:49:86:8d:2d:
2e:ed:66:60:ec:ae:38:f3:91:33:2c:bc:61:13:e8:82:ff:e4:
ca:45:df:39:04:10:f6:0c:54:01:02:e0:6a:2a:81:f1:2a:32:
f0:67:5f:dc:7d:63:04:10:de:98:59:f9:2a:59:7b:b9:1d:3e:
37:6b:c9:7a:64:70:a2:94:df:45:44:69:5d:27:65:00:ae:71:
e5:09:12:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QLAC/X/meFQ0sACCg1beMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYzM2NmFmNmNlMGIxYTlmNjAxNzNiMTRiNWZkZGQ3ZTBi
OTYzMDYwHhcNMjYwMzI5MTEwMDMzWhcNMjYwMzMwMTEwMDMzWjAzMTEwLwYDVQQD
Eyg4NGUyMDlhY2NmNTFiMTRhODFjZmFkYmY5MzYwNjllZjJiZjM0ZDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorx5/jAdzbUzikuAnJJzBeXWG925
mSBqcwbU2ah2ncWUXh9ol0LEFWGGP+0Fm7X1PBPO9SzeDQYsHJfi2LRizyxUmuOM
C0LfW78UP3pJ1X4GDA0KJuJbwkmeRLh6+OSE/Vvs8QUGJ195IzcTgwHr+/vLvE7q
JDuVYT6vKLRgXq8ir5a99KFEh2DcOgyoyRTwv9t3zdLIvFSy56aqeO3IboSkcO4q
YE5f8PAXGaFtI9lW5fHkNORWexhOYjlZ6YGiRV6mJBH8tB0f1WJB/yBciQWctnuc
2mn5865mAcLEjZUhGHechvOIQC/tLKiZi0KTJn/OvI8Faf697wSDaWxkbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITiCazPUbFKgc+tv5Ngae8r802LMB8GA1UdIwQY
MBaAFJ3DZq9s4LGp9gFzsUtf3dfguWMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC83ODhmY2YtNjBmMy00MjZmLTk4NTgt
ODJmNDc2YjVjZmRiLzEvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC83ODhmY2YtNjBmMy00MjZmLTk4NTgtODJmNDc2YjVjZmRi
LzEvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2Lql8Ea
PzfBit/AwIE/BpKRZm6owTWhGy2gGXfK3Xxa1/MnY3d2aJtkQ0FOQ8c1+500dRNU
XFaV2XCtOwWHE1/sXL4cPs+8UpjJOqekkk4nhTEoIeO3NDShb86O1ka2KRO7tXjK
8f/cba1h9uwoGO6003GY8/yoBjTAbNcPIYyg0DxW1D0nOcbYkNm0linIwyR2y2K5
kbS7zW5wUGU1G05roezmnfR+vuMENY912QFJho0tLu1mYOyuOPORMyy8YRPogv/k
ykXfOQQQ9gxUAQLgaiqB8Soy8Gdf3H1jBBDemFn5Kll7uR0+N2vJemRwopTfRURp
XSdlAK5x5QkSjw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:49:24 2026 by rpki-client