Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
File: ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft (raw, json)
Hash identifier: 3HY65D7WBGlYBJI8ixyTud6GdL5O+5ijTK0jSsWXq5A=
Subject key identifier: CD:03:F3:76:2A:D9:83:0D:BB:97:EC:05:43:CF:AC:1F:2F:09:CE:FA
Authority key identifier: 9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
Certificate issuer: /CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Certificate serial: 01A180ABD5DE543006875C14FFDAD5C1A23F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
Manifest number: 1767
Signing time: Wed 28 Oct 2026 04:01:47 +0000
Manifest this update: Wed 28 Oct 2026 04:01:47 +0000
Manifest next update: Thu 29 Oct 2026 04:01:47 +0000
Files and hashes: 1: ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl (hash: VbxZyZQUDb937D5gZ7OY3BmEBE71DYHvFh7REhY6G6M=)
2: tEmNq7LovUuc8Au30SanbkNv0So.roa (hash: s2pSdz/lU/3uCLBb+gthkVpfgt/RCLo0Ow4VSLUvvBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 04:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:ab:d5:de:54:30:06:87:5c:14:ff:da:d5:c1:a2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Validity
Not Before: Oct 28 04:01:47 2026 GMT
Not After : Oct 29 04:01:47 2026 GMT
Subject: CN=cd03f3762ad9830dbb97ec0543cfac1f2f09cefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ec:55:27:b6:27:fd:49:8f:8b:de:86:70:83:
6e:c4:11:69:ab:52:ba:34:8c:cc:2b:1e:a1:87:45:
92:fb:d3:83:38:35:de:e3:21:2d:fc:b9:27:5f:c7:
b7:52:09:fe:69:d2:a0:73:7f:ba:ae:52:d5:e6:fc:
c4:e6:fe:30:c6:64:e2:95:0c:28:13:17:69:e4:29:
fd:34:75:fb:43:60:b1:d8:24:f0:ed:e5:42:70:e7:
08:85:44:4b:b6:07:8e:5b:ca:ae:f9:8d:77:e0:5c:
8e:fb:07:dc:aa:09:0f:4d:34:4a:2c:23:a7:95:51:
72:5e:c8:b1:1a:08:eb:43:dc:5f:0c:23:6a:0e:b3:
cf:18:78:50:ca:cf:81:db:e4:0d:77:81:02:da:a8:
23:ed:70:0d:8b:80:fa:d7:8e:4d:87:ba:a5:ed:e1:
28:69:53:9a:93:42:68:e4:b9:e5:a9:f4:87:52:97:
d6:bb:a5:2d:35:2e:73:47:9c:58:5e:18:06:f0:62:
aa:30:93:6c:7e:cd:fd:36:4f:91:a3:69:c1:e7:ee:
10:4e:7a:30:cb:ac:08:53:9f:b8:22:8e:91:e6:9f:
39:d3:5e:3a:f5:b3:0e:37:d0:0f:70:d9:e0:df:5c:
1e:cf:f3:14:bc:4f:da:fc:20:63:7a:45:93:bd:46:
17:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:03:F3:76:2A:D9:83:0D:BB:97:EC:05:43:CF:AC:1F:2F:09:CE:FA
X509v3 Authority Key Identifier:
keyid:9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ae:38:e0:6d:34:ad:19:5d:3f:36:50:05:af:ca:b1:f5:54:
19:55:37:cc:a6:0b:d9:4b:00:43:c9:8c:03:82:90:c3:6b:4e:
44:2d:34:ac:71:ec:7a:e3:ec:79:b6:24:c0:6c:7e:0d:c0:0b:
31:e4:06:4a:5b:40:33:9b:1a:18:db:ee:73:65:18:65:fd:70:
57:a0:f3:3b:f6:cf:27:41:0b:ae:3b:ca:81:62:a2:50:8f:d0:
cf:09:c5:c0:12:58:96:ac:e0:03:f0:c3:d4:17:05:c5:e2:91:
e1:70:d1:51:9d:71:0a:03:59:a5:2d:b8:9c:e6:7b:f3:b7:ca:
0a:5b:5a:8e:3c:45:92:ee:9f:ca:4f:08:0c:eb:6f:b8:06:ea:
c6:f2:b6:9b:55:f8:d2:85:64:66:54:0a:02:ef:73:66:84:a4:
c2:54:13:5f:90:bd:67:82:91:a5:16:3e:dc:f4:00:06:b8:c3:
4f:88:63:3a:50:e1:53:e1:20:05:ee:1a:43:ed:91:d6:ae:65:
2f:47:8f:2b:5a:97:f8:89:1d:7e:a2:fa:0f:a5:69:ec:71:59:
0f:cf:89:90:48:08:ad:50:67:7e:68:27:01:27:e4:35:3c:0d:
d9:e5:f6:15:5b:49:f1:df:9a:50:07:29:9c:c2:5b:58:1e:00:
0d:57:48:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:08:22 2026 by rpki-client