Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
File: NGyrWUu9qbRA_afTl0y9RByY5ck.mft (raw, json)
Hash identifier: pKmJGUR+iOIVRtMmo2RfmbWFIqkmU4vWDNZmYqW/Kpw=
Subject key identifier: 21:21:93:45:1D:FA:F7:19:B0:C1:69:17:31:05:AF:7F:8B:06:E2:3A
Authority key identifier: 34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9
Certificate issuer: /CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
Certificate serial: 019D382E2BC8BFCD6F14C629BFAEDDCA555B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 06:00:42 +0000
Manifest this update: Sun 29 Mar 2026 06:00:42 +0000
Manifest next update: Mon 30 Mar 2026 06:00:42 +0000
Files and hashes: 1: 2Ii2CAhksIObnY9cdUDA1cuJZdo.roa (hash: ZugaVf2Cp4EBmlxQ0H1edkLbTqWn+CzcKcFRvVcmckM=)
2: NGyrWUu9qbRA_afTl0y9RByY5ck.crl (hash: Pc3K0TcOnHYZUq28req/lKb3vAuvJ23naxsbLX7es/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:2b:c8:bf:cd:6f:14:c6:29:bf:ae:dd:ca:55:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
Validity
Not Before: Mar 29 06:00:42 2026 GMT
Not After : Mar 30 06:00:42 2026 GMT
Subject: CN=212193451dfaf719b0c169173105af7f8b06e23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:89:4c:6f:e2:19:00:5f:44:37:d2:b3:21:2e:
60:97:ee:a3:92:65:27:da:28:35:8c:65:03:75:62:
30:5f:6f:5a:e0:4d:08:be:d9:6b:9a:5d:e6:2e:02:
87:ad:d4:d2:db:45:cc:dd:ce:c0:9f:fb:09:c6:db:
60:bd:36:93:bc:9e:dd:76:a5:41:c4:c1:fa:e8:d5:
9a:57:77:1d:00:af:5e:6d:a5:fe:d7:9a:40:0a:03:
04:7b:40:7c:08:cd:76:bc:a6:e7:36:a1:2f:7d:5e:
5a:84:37:09:1b:1e:63:13:61:40:c1:5f:32:97:92:
3a:9e:b3:fa:be:4a:cf:05:98:56:fb:18:30:d2:ba:
57:af:50:a9:ba:c8:4f:30:f0:e7:e9:b0:53:b8:6f:
d2:5b:ff:8c:c7:c6:ba:46:1f:30:ee:29:ce:32:08:
37:3b:d7:9d:7e:54:11:ec:b0:16:74:cd:6a:e3:62:
fa:09:95:77:10:a3:90:43:41:ba:9b:3d:12:a3:8b:
e4:88:b8:f9:e5:f6:d8:56:50:2e:68:3e:dd:ea:35:
58:78:21:e1:8d:37:f3:91:46:b7:e2:7d:e3:f9:a5:
7f:22:84:fc:94:61:bf:6b:4d:ef:41:2e:36:9b:05:
25:02:92:4a:68:a9:9f:01:39:12:d9:49:8d:56:15:
af:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:21:93:45:1D:FA:F7:19:B0:C1:69:17:31:05:AF:7F:8B:06:E2:3A
X509v3 Authority Key Identifier:
keyid:34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d9:fe:35:d3:09:2e:f7:93:68:00:34:c0:27:d1:cb:70:e6:
c6:3e:79:d1:a4:95:a2:e2:d3:48:8a:5c:57:20:22:31:d9:27:
da:8c:9c:eb:11:68:dc:21:93:f7:e5:33:4e:a4:7a:f1:fe:d2:
ab:79:40:6e:5c:27:d3:3e:98:a9:03:14:6d:3f:86:f6:ae:e2:
1a:bb:12:08:d3:f3:09:c8:4b:2f:65:65:db:8d:3a:3e:01:f7:
99:05:d8:69:55:3d:8a:73:54:6b:a6:74:7f:75:f4:6c:1e:c3:
25:de:b0:7d:fd:30:98:c7:dd:f5:ba:f9:17:4b:37:4e:2d:83:
82:7d:9b:cd:c9:61:7e:75:17:72:77:a6:99:c4:a3:2b:a4:8f:
c7:c6:be:49:1a:d0:6d:37:25:73:86:53:dd:65:37:e2:88:82:
6a:83:b8:be:8b:81:9b:0e:06:8e:16:09:8d:6e:47:e4:c0:19:
48:90:0e:57:2d:2e:9f:8a:6b:17:96:62:a7:a5:4e:1c:dc:69:
85:9b:aa:80:1c:00:75:0f:98:0c:d1:b6:37:36:b6:72:a9:64:
e0:aa:1b:d0:fc:d5:ca:5e:15:28:e6:5e:39:c5:7f:39:0c:77:
41:cb:a2:ab:93:51:b4:89:65:14:bb:b6:7d:ab:f9:ec:a3:e8:
3c:80:7b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:09 2026 by rpki-client