Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
File: ngoRprHRiWV8f7luwUWLr8oYZPQ.mft (raw, json)
Hash identifier: 0/7Jcw8EM+Aztm/9CIyO50SDSWMILdZY7dqBMCef5ts=
Subject key identifier: 14:95:F5:82:95:3A:30:C1:66:E9:D8:C4:96:9D:EF:0B:07:0B:98:95
Authority key identifier: 9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
Certificate issuer: /CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
Certificate serial: 019D3AC206A985CC827C129E2385DD8EF465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
Manifest number: 0D4A
Signing time: Sun 29 Mar 2026 18:01:27 +0000
Manifest this update: Sun 29 Mar 2026 18:01:27 +0000
Manifest next update: Mon 30 Mar 2026 18:01:27 +0000
Files and hashes: 1: 1-1Ic5gcyRLNc4y6lZMhKlnsHlIk.roa (hash: U8NuaZXQIXbJYqStLcZdEAJOjjGzKdcKPJX3ZKFHQ8A=)
2: ngoRprHRiWV8f7luwUWLr8oYZPQ.crl (hash: tMaqYqviFDmv9kFhzk7W+RqiHIKQ3DktmYe7ma86ajw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c2:06:a9:85:cc:82:7c:12:9e:23:85:dd:8e:f4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
Validity
Not Before: Mar 29 18:01:27 2026 GMT
Not After : Mar 30 18:01:27 2026 GMT
Subject: CN=1495f582953a30c166e9d8c4969def0b070b9895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:05:a7:e6:2a:2e:02:c0:ec:20:ec:83:8e:51:
3f:ff:c5:2e:38:1d:fd:d4:47:36:3c:f0:d5:14:f6:
97:c4:f5:9e:81:85:3f:0f:00:0a:93:25:48:f4:68:
55:e1:b2:1e:8e:5f:df:98:91:e7:7c:23:a3:68:17:
42:d9:4e:04:da:99:f5:fe:18:03:4d:4e:4c:02:f9:
44:95:45:1d:19:2c:a7:a2:3f:88:39:da:1f:21:0c:
d7:03:c3:49:a1:ec:27:87:79:6f:bf:50:47:fd:a7:
62:ba:5f:ea:92:e5:7d:c5:ca:ac:e6:4b:4b:e4:36:
ca:d3:8f:a0:ff:ca:e9:f5:10:58:73:7e:7e:ed:d6:
e5:e1:0e:7a:2a:e6:a7:11:32:b4:cb:81:26:d0:e5:
1e:7c:fc:59:67:ee:c2:4e:28:1a:87:c0:9d:ef:4e:
ac:2a:ce:fc:9b:89:8f:5b:36:69:a6:b9:d9:09:ce:
77:05:6f:f2:08:55:18:f3:c5:71:63:3f:84:f3:b0:
73:19:6a:b0:31:1c:e6:0e:fd:7f:63:48:b9:af:8e:
a4:22:47:a8:2c:50:cd:5b:27:88:f1:bb:dc:40:74:
dd:5b:5d:06:63:e1:f6:8a:fb:22:bc:1f:03:42:b4:
71:ec:b7:59:35:57:6f:9b:a5:73:54:2f:d1:f4:89:
7d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:95:F5:82:95:3A:30:C1:66:E9:D8:C4:96:9D:EF:0B:07:0B:98:95
X509v3 Authority Key Identifier:
keyid:9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a2:d9:55:da:f2:e8:4d:2c:f0:f1:76:5d:c0:86:7d:92:e1:
20:14:a3:be:32:dd:a3:1f:44:29:26:ba:92:3e:01:67:2d:76:
ec:48:20:ba:68:82:8e:0f:be:1f:f7:6f:d6:f0:32:0f:2d:b7:
b9:26:9e:3b:1b:10:ba:08:88:67:7c:0b:ca:d7:77:f1:80:ae:
55:14:b2:ac:5e:2a:f1:de:6c:58:b3:5e:f8:02:d9:68:bc:c0:
a4:39:1b:52:ee:0a:61:ab:84:12:50:73:30:ba:30:3c:5b:7f:
75:ef:db:7f:66:ad:b4:a9:5f:9a:91:c4:87:19:7f:4f:6a:fb:
f2:cc:05:29:29:00:28:13:7a:e4:9e:cb:14:ba:83:e3:d6:b9:
d6:2f:f9:0a:da:24:d8:6d:6e:8c:4f:54:4c:5e:0b:d6:cb:c8:
00:11:67:7b:d5:01:1d:2e:cc:09:7b:d7:91:49:a5:74:60:9f:
6a:0e:6b:81:ab:76:30:9b:69:79:c6:b6:93:d3:88:2e:09:4e:
7f:24:73:1b:67:d7:12:6b:3e:af:65:46:8f:2c:53:43:d7:58:
bc:e9:63:6b:3e:d5:de:c4:ee:6c:cf:15:93:d7:31:39:09:59:
0a:24:75:7f:ce:05:30:dd:66:4c:fe:6b:e9:71:2f:4c:1a:df:
fe:0a:77:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:48:32 2026 by rpki-client