Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
File: ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft (raw, json)
Hash identifier: Vgbd3aSUIfWBaqao6wRxksTYZpyzqzBVJApoaBfH1Dg=
Subject key identifier: 06:F1:97:F1:CF:D8:AC:57:D7:2D:1E:19:30:9F:5C:DC:05:C1:74:D4
Authority key identifier: 9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
Certificate issuer: /CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Certificate serial: 019EB80F1E73FA209436D0D0117E3DC493E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
Manifest number: 15F6
Signing time: Thu 11 Jun 2026 19:00:59 +0000
Manifest this update: Thu 11 Jun 2026 19:00:59 +0000
Manifest next update: Fri 12 Jun 2026 19:00:59 +0000
Files and hashes: 1: ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl (hash: eqflW3NzRchfypP08LPBqxyalAJGFIxVKShE6GBykr8=)
2: tEmNq7LovUuc8Au30SanbkNv0So.roa (hash: s2pSdz/lU/3uCLBb+gthkVpfgt/RCLo0Ow4VSLUvvBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0f:1e:73:fa:20:94:36:d0:d0:11:7e:3d:c4:93:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Validity
Not Before: Jun 11 19:00:59 2026 GMT
Not After : Jun 12 19:00:59 2026 GMT
Subject: CN=06f197f1cfd8ac57d72d1e19309f5cdc05c174d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d1:83:21:67:b6:32:ec:e5:4d:1a:a3:c0:1f:
df:79:57:b1:ca:28:9c:a1:2f:63:32:3e:60:cf:8e:
ba:dd:7b:b7:e9:6d:29:d6:0e:24:f4:8d:f2:72:97:
9c:89:63:17:17:44:89:ac:70:58:d8:c0:15:97:87:
49:69:4c:5a:33:c4:ab:76:e8:a7:97:6b:15:93:6c:
df:f9:0f:bb:f5:f1:0d:4f:d4:79:54:ff:d4:2d:c2:
e6:dc:f5:ae:e7:68:71:c4:c7:4c:34:81:c9:7a:c9:
a1:85:d7:76:ea:5d:0d:93:89:09:94:6b:97:f7:89:
f7:a0:39:ed:78:a5:f6:9d:ae:ed:ee:1c:9f:ca:7f:
fc:51:f7:32:eb:24:74:a8:31:37:94:47:3b:29:5c:
95:4a:e7:4e:c9:9c:1b:2a:05:74:aa:82:00:89:86:
be:d3:89:6f:96:bc:44:3a:27:4d:db:b0:9a:9d:2b:
f8:47:72:de:62:c1:39:7c:1e:d6:ba:81:54:20:9f:
53:f6:f6:c2:8d:3b:4d:61:4c:d4:99:1c:2e:8e:55:
2b:a9:13:2c:73:5a:e7:59:02:0f:4a:e6:62:eb:ca:
3a:18:a7:ed:aa:1a:3c:1e:fc:4e:9a:64:5c:ab:a2:
b9:70:6a:84:96:83:c4:da:86:58:8d:ea:4f:11:82:
cf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F1:97:F1:CF:D8:AC:57:D7:2D:1E:19:30:9F:5C:DC:05:C1:74:D4
X509v3 Authority Key Identifier:
keyid:9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:03:10:d0:28:1e:ea:42:6b:9e:a5:0b:5e:b2:65:63:fa:d0:
47:f9:ca:10:8d:51:7d:f5:7e:09:f4:42:de:e0:d6:a4:be:c1:
1c:9e:3c:99:af:b6:b7:c6:37:90:0a:64:9e:05:a8:99:17:44:
72:3f:0c:b1:78:75:9c:aa:88:cc:dd:ce:eb:29:76:c3:be:ef:
73:31:b7:08:13:9a:fe:fc:ef:33:52:7b:41:e8:5d:ab:ed:5a:
74:23:52:39:2c:36:20:33:7b:ac:ea:14:76:00:cf:69:78:39:
87:eb:52:a2:2a:b3:7d:c7:e0:ed:ec:f7:cf:d0:3b:5b:79:83:
10:a0:b0:95:53:9e:24:85:9e:7f:78:70:f6:90:8e:41:b2:b2:
e9:99:b0:e8:0c:11:94:21:6a:12:04:2d:81:0b:07:dd:9c:da:
7f:1a:0c:88:76:83:50:80:ad:52:31:47:b7:c1:cc:8a:50:ee:
29:a8:e1:5b:27:c0:b8:bc:ba:e5:b6:33:1c:65:cc:d8:3d:5d:
3f:82:b9:47:6c:22:14:35:f9:77:54:0b:7f:80:e7:a5:25:24:
f3:a4:08:b5:0e:01:91:3e:1e:cc:a6:9c:57:a9:58:da:c4:c4:
21:28:fd:34:45:4c:83:85:6a:97:66:ba:34:c0:76:87:be:ff:
28:1e:f8:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64Dx5z+iCUNtDQEX49xJPmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMDJlMDY0Yzk4YjMyMzFjM2YyMTQ4YTFjM2Q5YzM4N2Q0
ODllZTkwHhcNMjYwNjExMTkwMDU5WhcNMjYwNjEyMTkwMDU5WjAzMTEwLwYDVQQD
EygwNmYxOTdmMWNmZDhhYzU3ZDcyZDFlMTkzMDlmNWNkYzA1YzE3NGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9NGDIWe2MuzlTRqjwB/feVexyiic
oS9jMj5gz4663Xu36W0p1g4k9I3ycpeciWMXF0SJrHBY2MAVl4dJaUxaM8Srduin
l2sVk2zf+Q+79fENT9R5VP/ULcLm3PWu52hxxMdMNIHJesmhhdd26l0Nk4kJlGuX
94n3oDnteKX2na7t7hyfyn/8Ufcy6yR0qDE3lEc7KVyVSudOyZwbKgV0qoIAiYa+
04lvlrxEOidN27CanSv4R3LeYsE5fB7WuoFUIJ9T9vbCjTtNYUzUmRwujlUrqRMs
c1rnWQIPSuZi68o6GKftqho8HvxOmmRcq6K5cGqEloPE2oZYjepPEYLPOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbxl/HP2KxX1y0eGTCfXNwFwXTUMB8GA1UdIwQY
MBaAFJ4C4GTJizIxw/IUihw9nDh9SJ7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmdMZ1pNbUxNakhEOGhTS0hEMmNPSDFJbnVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81ZDdiYzQtZTBjNS00YTQ4LTkwZTYt
NzUyNTE2ODkwZDNkLzEvbmdMZ1pNbUxNakhEOGhTS0hEMmNPSDFJbnVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi81ZDdiYzQtZTBjNS00YTQ4LTkwZTYtNzUyNTE2ODkwZDNk
LzEvbmdMZ1pNbUxNakhEOGhTS0hEMmNPSDFJbnVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQMQ0Cge
6kJrnqULXrJlY/rQR/nKEI1RffV+CfRC3uDWpL7BHJ48ma+2t8Y3kApkngWomRdE
cj8MsXh1nKqIzN3O6yl2w77vczG3CBOa/vzvM1J7Qehdq+1adCNSOSw2IDN7rOoU
dgDPaXg5h+tSoiqzfcfg7ez3z9A7W3mDEKCwlVOeJIWef3hw9pCOQbKy6Zmw6AwR
lCFqEgQtgQsH3ZzafxoMiHaDUICtUjFHt8HMilDuKajhWyfAuLy65bYzHGXM2D1d
P4K5R2wiFDX5d1QLf4DnpSUk86QItQ4BkT4ezKacV6lY2sTEISj9NEVMg4Vql2a6
NMB2h77/KB74WQ==
-----END CERTIFICATE-----
Generated at Thu Jun 11 22:22:25 2026 by rpki-client