Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
File: ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft (raw, json)
Hash identifier: OQavW6U2ISM5Pc1dCAd7A/ddssU6+SqoJZMbYwU4E5o=
Subject key identifier: 87:32:31:7E:87:D6:0F:23:A1:EE:1A:24:6F:14:01:75:85:C0:D6:45
Authority key identifier: 9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
Certificate issuer: /CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Certificate serial: 019D39AF175A8272FA1638DBE7A381C85B82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
Manifest number: 1530
Signing time: Sun 29 Mar 2026 13:01:09 +0000
Manifest this update: Sun 29 Mar 2026 13:01:09 +0000
Manifest next update: Mon 30 Mar 2026 13:01:09 +0000
Files and hashes: 1: ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl (hash: sAfQYNguME34thP/qx8xfvr7Edxbn86SSbIYwnxeDMc=)
2: tEmNq7LovUuc8Au30SanbkNv0So.roa (hash: s2pSdz/lU/3uCLBb+gthkVpfgt/RCLo0Ow4VSLUvvBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:17:5a:82:72:fa:16:38:db:e7:a3:81:c8:5b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Validity
Not Before: Mar 29 13:01:09 2026 GMT
Not After : Mar 30 13:01:09 2026 GMT
Subject: CN=8732317e87d60f23a1ee1a246f14017585c0d645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ea:63:27:09:68:30:cb:7f:1f:13:61:54:86:
98:00:1b:44:0e:d0:71:a8:a5:02:7f:e2:92:d7:3e:
fb:df:27:a4:99:b3:7b:c8:10:4e:f9:f0:68:12:57:
af:f9:01:7d:68:3e:9c:33:f5:2e:c0:c8:b6:25:fe:
6c:e9:fe:af:7a:9b:38:fe:4d:9b:16:fb:d6:d0:a2:
c4:d9:1f:f2:0a:bd:8a:98:fa:4f:33:28:6d:3f:c8:
71:58:25:81:70:3d:79:c2:79:38:74:53:c1:41:66:
c6:31:09:03:7d:72:23:a0:b8:eb:12:62:a9:d5:80:
42:43:d1:e8:89:34:dd:a3:46:ff:90:07:53:de:6a:
4c:93:6c:50:02:64:c5:42:7f:4c:9b:4e:a2:89:db:
37:3e:29:09:ed:6f:7e:28:4e:f1:ec:21:b8:91:7d:
b4:fe:a6:17:5f:5d:5b:c9:8f:e3:8a:39:58:cd:0e:
84:75:b1:b0:c1:ed:5d:55:56:3b:d3:ef:ab:70:2b:
bf:0b:07:9b:4a:b8:79:59:7e:17:4f:82:53:70:da:
43:a5:57:1e:e6:26:fc:97:73:f3:32:f3:95:93:b1:
a5:53:b8:e0:67:ba:5e:f6:c1:e9:e4:01:1c:15:9a:
40:f6:b9:75:a0:88:f1:1e:38:d5:bb:f6:6f:fd:8b:
2a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:32:31:7E:87:D6:0F:23:A1:EE:1A:24:6F:14:01:75:85:C0:D6:45
X509v3 Authority Key Identifier:
keyid:9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:1b:87:37:9f:18:1d:70:0a:d5:c5:e0:fe:80:b9:15:e8:bf:
55:85:8e:76:ae:16:6a:7b:ce:a8:58:69:49:bd:9b:3c:f7:c3:
de:94:88:06:5a:55:1a:dd:81:a8:37:59:d3:dd:09:5d:be:e4:
96:4a:80:ee:95:1b:e2:83:ee:17:78:aa:35:00:59:06:ef:b1:
5f:8b:09:59:cd:60:4f:65:2e:b2:46:fd:4d:e4:97:f1:05:f9:
bc:46:44:54:1f:7c:6e:3f:06:8f:78:9a:25:83:18:e7:64:fc:
45:48:a5:d3:da:35:e6:c7:ef:e4:54:d9:cd:21:39:e7:d7:1d:
fb:1a:1e:21:75:48:b7:07:e7:96:0c:ef:cd:5b:06:e7:b4:f0:
88:ea:25:18:60:21:85:02:e9:d7:35:4a:1f:b9:ef:0e:22:0d:
ee:f4:5c:aa:91:56:08:8d:f9:63:ed:fb:5a:6b:ba:f1:3c:0b:
45:cb:e5:3f:63:bb:49:eb:90:a0:a0:9b:06:67:fe:1e:c4:ff:
db:28:0c:a7:ec:a2:5b:fc:51:cb:fe:17:e9:d6:48:49:6c:fd:
4e:6f:49:63:f6:af:7c:0e:0f:1f:31:fd:0a:83:03:c6:71:53:
c9:98:77:d7:d3:9b:c1:4a:4d:30:4f:b5:8f:4f:0b:24:fd:56:
1a:44:cd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:17:28 2026 by rpki-client