Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
File: NgqdJtuz6l36roO2GQit2Pxt028.mft (raw, json)
Hash identifier: vGH/0j7C69/eExXrL0q85ABqckywBPkBwOZ5WVuEDI4=
Subject key identifier: 32:B5:3E:C4:02:89:B5:D0:8B:A6:1C:1F:E2:33:3B:02:D4:8D:AC:3A
Authority key identifier: 36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F
Certificate issuer: /CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
Certificate serial: 019D382E7B254A909494680F21F8E01CC754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 06:01:03 +0000
Manifest this update: Sun 29 Mar 2026 06:01:03 +0000
Manifest next update: Mon 30 Mar 2026 06:01:03 +0000
Files and hashes: 1: NgqdJtuz6l36roO2GQit2Pxt028.crl (hash: YtKCZbt6VfPFSI7XgrARNRADiDadbICVfEsfPfFQWMY=)
2: pl6PNo8hUrBCcmdPr6uyLCgo9LE.roa (hash: JUhZmiTLChpqRA0MSl5whEAJwGew2IlHkB2zV8iZ9V4=)
3: sg3Ew_-j8eSBsSEqujV82pVTpmY.roa (hash: u5sONjGdKQ7+lq8JPUBVxgSwpY1PR0uLjyPXqaXUKG4=)
4: teABFGsGVj_scwJjrE3mhP8dVpQ.roa (hash: 2hJ5yRJDHs67/jo71c3Tu7rhezA7dGIjE7rutPTVstE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:7b:25:4a:90:94:94:68:0f:21:f8:e0:1c:c7:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
Validity
Not Before: Mar 29 06:01:03 2026 GMT
Not After : Mar 30 06:01:03 2026 GMT
Subject: CN=32b53ec40289b5d08ba61c1fe2333b02d48dac3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:81:4a:9b:bf:00:02:73:72:8d:f1:62:6c:aa:
41:a1:c6:a1:fd:08:da:f6:39:9d:50:96:ad:4d:06:
bb:90:f9:85:b5:67:a4:e5:b8:5a:f0:ea:dd:48:49:
b8:e2:b1:2b:55:5a:54:a7:ba:ed:eb:6d:88:c5:a0:
f6:69:5f:a7:f9:96:08:75:af:99:a7:1c:90:9b:c0:
6a:ec:05:75:39:ab:6b:97:38:04:82:67:c4:08:8a:
93:eb:3c:da:42:40:b1:7c:c5:35:8e:ef:0c:14:55:
2f:eb:7d:49:0c:64:35:40:ae:c1:e8:2d:c3:fa:d1:
16:57:0c:66:99:1c:47:30:33:da:04:a0:af:38:9f:
94:af:15:ce:16:c0:86:83:ee:b2:1a:62:bb:0c:30:
55:37:d3:7c:86:46:34:ed:13:04:46:ab:98:31:93:
f3:e6:7a:9f:2e:e9:ee:eb:01:8e:18:55:e1:ac:e5:
8b:22:46:b9:ad:9b:a1:29:14:55:91:4a:c8:34:7e:
c0:4d:14:f2:ae:83:91:68:10:c3:9e:e0:b9:e7:fd:
53:f1:d4:dd:95:65:6c:be:80:64:bf:0e:72:84:33:
37:6d:97:89:7b:f1:29:82:00:b2:d7:37:dd:6f:27:
3d:bc:6e:63:6d:1d:45:54:6e:4e:e2:39:c4:4e:e6:
4f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B5:3E:C4:02:89:B5:D0:8B:A6:1C:1F:E2:33:3B:02:D4:8D:AC:3A
X509v3 Authority Key Identifier:
keyid:36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:51:f2:8e:2c:cc:0e:e0:4c:27:1b:df:ff:80:fc:34:71:06:
ea:a2:a2:fb:d7:68:65:b8:32:2a:8d:2a:b7:a9:14:67:f4:f8:
36:aa:57:b8:98:96:e9:64:ee:01:29:b9:8e:7c:8f:c2:bc:51:
d0:cb:64:25:7e:6c:32:7c:d3:1b:b6:e8:a1:e0:e8:b1:ab:4e:
fa:35:ad:1f:97:21:37:a5:c9:5e:39:64:bf:a9:64:e1:ed:08:
d8:05:f4:e9:5b:e0:5f:f1:04:56:fb:7c:ee:e4:39:e7:ff:fc:
f7:70:e9:be:6d:43:d6:2b:72:bc:f4:09:ee:8d:c2:0b:29:ca:
6d:f1:04:10:b6:9d:32:7b:7f:db:fa:ea:7c:84:99:34:2b:4c:
2d:1c:fa:71:e5:8a:f6:a2:c5:d7:ae:e4:2d:37:57:cb:2c:8d:
0b:8e:33:db:fd:29:67:9c:f6:44:42:7f:c0:de:84:db:16:8a:
b1:2f:75:c0:f2:10:56:bd:bd:0a:32:eb:c4:83:86:c1:62:7b:
bc:04:b7:4a:ba:39:bd:c4:d2:aa:de:cb:d7:1e:57:e2:7c:90:
5f:d9:03:84:14:60:20:92:5a:3f:18:54:84:7e:92:5c:bc:e0:
8a:4e:3a:e1:2c:4f:8a:c9:07:d3:70:c5:d5:14:95:7a:8a:61:
65:50:14:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:24:47 2026 by rpki-client