Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
File: NGR0ozwFHRcVKyEyLM9P84CLQnA.mft (raw, json)
Hash identifier: x0FXNrXNu7946TxR6d+CQ+b9+LYRgvMf/ploJdzvpAc=
Subject key identifier: CF:4C:7D:46:55:C4:41:19:0E:EF:C2:33:71:9B:D6:E1:D6:2D:92:C3
Authority key identifier: 34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70
Certificate issuer: /CN=346474a33c051d17152b21322ccf4ff3808b4270
Certificate serial: 019D38D2CF4DD8633405B2987AAFCF6A8C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
Manifest number: 0776
Signing time: Sun 29 Mar 2026 09:00:32 +0000
Manifest this update: Sun 29 Mar 2026 09:00:32 +0000
Manifest next update: Mon 30 Mar 2026 09:00:32 +0000
Files and hashes: 1: IfIVLKxigngabgfVf7hbWkVZKJk.roa (hash: SYIgElzT9Fvi+lNF8/DUi7SqIkbvfGnmGxjms2zRJkk=)
2: NGR0ozwFHRcVKyEyLM9P84CLQnA.crl (hash: 0g3wlrMVkRkzDa7Fa7AEixHoUq6qY4gKd2Z2ByBkQAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:cf:4d:d8:63:34:05:b2:98:7a:af:cf:6a:8c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=346474a33c051d17152b21322ccf4ff3808b4270
Validity
Not Before: Mar 29 09:00:32 2026 GMT
Not After : Mar 30 09:00:32 2026 GMT
Subject: CN=cf4c7d4655c441190eefc233719bd6e1d62d92c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5d:0b:99:0a:15:e4:9c:5d:10:eb:ee:d7:9d:
37:3d:14:da:15:10:d4:58:62:ea:5d:aa:43:36:f0:
be:3d:a8:6f:03:1f:61:40:e0:3a:c0:82:c1:58:a7:
76:a3:44:3b:3d:8f:1c:1d:c3:fb:ab:8e:27:96:69:
74:1f:3e:08:8e:59:5b:d7:8e:05:9c:14:dc:ac:c2:
fd:37:e6:08:04:0d:fc:2b:e3:7f:52:35:5d:89:9b:
a2:c6:3b:70:e8:a1:79:5e:12:79:23:b5:47:c3:89:
bb:56:3b:c6:74:24:32:18:70:d3:0f:a8:b4:db:80:
cd:a8:fd:b9:a7:c4:ad:f4:fe:57:6a:4a:2a:bd:01:
2c:f2:cf:cc:2a:16:7a:4c:8b:bd:a8:e4:f2:61:f3:
51:3f:4f:f1:31:01:6f:bc:d9:9f:02:e7:e7:8c:b7:
2e:43:ad:f9:52:ff:65:ff:0e:77:f2:49:3a:27:0f:
5d:da:67:88:99:47:dc:12:96:a1:4a:6e:ad:52:73:
35:47:b1:26:15:22:f0:29:aa:23:23:26:64:5e:20:
15:8d:72:c9:02:0c:0c:0e:da:1b:91:7d:77:5f:61:
31:e8:07:48:7b:c9:06:d8:fc:4f:37:b6:4d:1e:53:
68:35:01:08:62:64:d5:e7:36:8a:ac:ca:d9:74:1e:
26:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4C:7D:46:55:C4:41:19:0E:EF:C2:33:71:9B:D6:E1:D6:2D:92:C3
X509v3 Authority Key Identifier:
keyid:34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:8b:15:0a:fe:75:52:b6:21:9b:0b:09:03:44:52:b8:6b:1d:
f4:07:85:70:11:f5:03:96:e6:e9:dc:25:f8:de:1a:76:f6:5f:
be:20:80:6e:06:33:63:a7:0a:59:45:53:ab:70:ff:71:17:a2:
19:32:c9:58:9d:15:44:ea:43:d0:dd:65:61:3b:3b:e3:aa:a7:
96:a5:8d:93:17:dc:02:ed:ec:d6:59:33:22:0b:78:6b:6d:fe:
ec:46:96:84:96:56:1b:06:96:78:06:22:b5:a9:ab:f5:f4:ab:
dd:fa:8e:f3:79:62:b4:03:a8:be:9b:71:63:c8:bd:3b:ae:d5:
e6:40:ef:ae:a7:c6:e7:3a:bd:8f:ef:10:b8:eb:f2:7d:d6:22:
f6:15:2f:5c:74:31:ca:84:3a:10:0c:7c:5a:40:ed:21:ee:dd:
c1:80:53:0a:ac:86:96:de:01:b7:37:46:70:2d:ec:61:73:07:
2f:a2:a2:52:1f:59:2e:5b:11:d0:ca:43:58:22:1f:a2:21:a8:
63:e5:61:bc:bb:2a:27:c1:54:8a:a9:7c:1c:0d:3f:d1:f2:61:
a3:cc:ad:c5:e6:41:46:18:09:9f:11:22:be:b8:41:64:04:e0:
6e:85:3b:c4:1e:95:a8:13:e6:bf:f7:8c:46:89:0c:55:a6:45:
c8:ab:aa:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:15 2026 by rpki-client