Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
File: NgqWAeAvgSjvZG9VlTNuCleRfK8.mft (raw, json)
Hash identifier: BrlTpqXkReRUwMtaGxITRHe0qWZi2FldFTShDXNHoLo=
Subject key identifier: 37:FE:9C:3C:FA:4D:04:D9:AF:2B:3A:49:30:82:25:68:06:66:23:B9
Authority key identifier: 36:0A:96:01:E0:2F:81:28:EF:64:6F:55:95:33:6E:0A:57:91:7C:AF
Certificate issuer: /CN=360a9601e02f8128ef646f5595336e0a57917caf
Certificate serial: 019D38D384D2305711A700DF5F6E07A3D358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
Manifest number: 0349
Signing time: Sun 29 Mar 2026 09:01:19 +0000
Manifest this update: Sun 29 Mar 2026 09:01:19 +0000
Manifest next update: Mon 30 Mar 2026 09:01:19 +0000
Files and hashes: 1: NgqWAeAvgSjvZG9VlTNuCleRfK8.crl (hash: h2XjdsOHh1S7IP8ruYGqLbefHLwMBJgz09fbv0e2SMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:84:d2:30:57:11:a7:00:df:5f:6e:07:a3:d3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360a9601e02f8128ef646f5595336e0a57917caf
Validity
Not Before: Mar 29 09:01:19 2026 GMT
Not After : Mar 30 09:01:19 2026 GMT
Subject: CN=37fe9c3cfa4d04d9af2b3a4930822568066623b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:de:99:3b:a2:41:62:68:df:a1:9f:04:25:f6:
2b:74:6c:0f:a2:67:4f:80:62:43:3d:52:58:c6:ca:
b0:93:e3:08:fd:62:c0:c1:2f:3b:b3:50:e0:9c:84:
ab:e1:e4:65:89:b2:ae:b4:5f:09:ae:8c:c2:91:16:
d8:ff:8d:ec:30:1c:a8:96:51:f3:f2:dd:f8:c6:90:
2e:38:48:a8:a4:ff:73:85:c6:66:91:05:44:a2:ba:
b3:28:ef:24:ab:9a:ce:d0:77:2e:84:2e:40:4b:d1:
a6:a3:c1:2f:60:25:8b:92:49:36:2c:3e:d3:fd:81:
e8:d6:f0:e8:31:73:a4:80:eb:99:78:9d:d3:7b:54:
a8:f6:01:2c:35:57:fc:5d:bb:25:6b:08:69:1e:8a:
f5:48:c6:fc:e5:c0:07:a5:dc:79:49:8d:3d:cd:83:
35:c7:d9:f9:46:fc:00:f2:2f:e4:ab:67:c1:4c:06:
b6:b9:31:25:ee:1c:97:cc:08:95:44:6b:27:af:ce:
86:2b:50:3c:fd:5f:a1:0a:4a:42:44:c6:76:79:6b:
48:f1:a2:57:2b:27:09:62:2e:6a:e1:da:40:5c:06:
90:41:14:04:47:c7:8b:f7:08:0e:6c:72:a8:cb:60:
ea:69:07:0e:9e:d6:b1:c8:a2:b8:44:87:bc:5b:ec:
38:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FE:9C:3C:FA:4D:04:D9:AF:2B:3A:49:30:82:25:68:06:66:23:B9
X509v3 Authority Key Identifier:
keyid:36:0A:96:01:E0:2F:81:28:EF:64:6F:55:95:33:6E:0A:57:91:7C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:8e:7c:39:79:47:aa:ff:d9:2b:b1:38:87:4a:72:05:28:8f:
00:8e:0e:a8:15:f1:e5:e3:10:8a:08:4a:fc:ee:4c:cd:9b:d3:
17:e1:92:40:c3:db:55:80:ae:c6:43:16:33:0b:24:9d:02:45:
e5:c9:2c:a9:dd:7a:69:28:e1:4a:71:4d:a4:a0:0f:03:39:d0:
cd:fa:86:3a:94:a2:c4:49:ba:96:d9:32:c0:14:10:20:fc:66:
ae:e0:2f:ed:dc:ef:f3:dd:2e:87:34:c0:a9:4c:03:08:e8:53:
fd:15:59:d9:b4:c1:6d:d7:88:85:b3:84:8a:30:85:64:b6:2d:
ed:93:4b:ec:85:90:36:e4:7d:67:91:37:13:ea:ae:0c:0c:93:
5a:8d:1d:73:37:f1:4c:62:96:1b:ed:a9:11:24:28:2d:bd:92:
15:68:09:c4:8e:61:52:42:1c:26:d3:6a:d5:25:a6:6a:9f:07:
22:5f:fe:3e:b1:37:4d:45:7b:b8:7a:b8:bd:bb:f4:63:6a:73:
e5:62:dd:ed:c9:75:9d:4c:08:20:15:e2:68:c1:e7:60:74:28:
e3:1f:14:fa:d8:9a:1f:a0:2e:e7:00:f2:1d:44:16:e8:55:45:
d4:80:78:66:6b:8a:33:09:9d:e5:5b:19:e6:e3:90:05:15:d0:
9c:a5:07:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0404TSMFcRpwDfX24Ho9NYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MGE5NjAxZTAyZjgxMjhlZjY0NmY1NTk1MzM2ZTBhNTc5
MTdjYWYwHhcNMjYwMzI5MDkwMTE5WhcNMjYwMzMwMDkwMTE5WjAzMTEwLwYDVQQD
EygzN2ZlOWMzY2ZhNGQwNGQ5YWYyYjNhNDkzMDgyMjU2ODA2NjYyM2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6t6ZO6JBYmjfoZ8EJfYrdGwPomdP
gGJDPVJYxsqwk+MI/WLAwS87s1DgnISr4eRlibKutF8JrozCkRbY/43sMByollHz
8t34xpAuOEiopP9zhcZmkQVEorqzKO8kq5rO0HcuhC5AS9Gmo8EvYCWLkkk2LD7T
/YHo1vDoMXOkgOuZeJ3Te1So9gEsNVf8XbslawhpHor1SMb85cAHpdx5SY09zYM1
x9n5RvwA8i/kq2fBTAa2uTEl7hyXzAiVRGsnr86GK1A8/V+hCkpCRMZ2eWtI8aJX
KycJYi5q4dpAXAaQQRQER8eL9wgObHKoy2DqaQcOntaxyKK4RIe8W+w4iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDf+nDz6TQTZrys6STCCJWgGZiO5MB8GA1UdIwQY
MBaAFDYKlgHgL4Eo72RvVZUzbgpXkXyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmdxV0FlQXZnU2p2Wkc5VmxUTnVDbGVSZks4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9jM2NhODYtM2U3Ni00OGM0LTk4YWMt
YzJkMDAzNDIyMzVjLzEvTmdxV0FlQXZnU2p2Wkc5VmxUTnVDbGVSZks4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9jM2NhODYtM2U3Ni00OGM0LTk4YWMtYzJkMDAzNDIyMzVj
LzEvTmdxV0FlQXZnU2p2Wkc5VmxUTnVDbGVSZks4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoI58OXlH
qv/ZK7E4h0pyBSiPAI4OqBXx5eMQighK/O5MzZvTF+GSQMPbVYCuxkMWMwsknQJF
5cksqd16aSjhSnFNpKAPAznQzfqGOpSixEm6ltkywBQQIPxmruAv7dzv890uhzTA
qUwDCOhT/RVZ2bTBbdeIhbOEijCFZLYt7ZNL7IWQNuR9Z5E3E+quDAyTWo0dczfx
TGKWG+2pESQoLb2SFWgJxI5hUkIcJtNq1SWmap8HIl/+PrE3TUV7uHq4vbv0Y2pz
5WLd7cl1nUwIIBXiaMHnYHQo4x8U+tiaH6Au5wDyHUQW6FVF1IB4ZmuKMwmd5VsZ
5uOQBRXQnKUHmg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:22 2026 by rpki-client