Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
File: NgAOvu0kK5VkrclUhTI7lr1vXAI.mft (raw, json)
Hash identifier: J699awq8KydzCaxKCXEZQ8ccE5FCyHva/ZmT/LHEqck=
Subject key identifier: 5E:9E:01:8D:31:E4:55:AD:96:79:E0:8C:72:AA:2E:CF:B6:98:D1:F8
Authority key identifier: 36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
Certificate issuer: /CN=36000ebeed242b9564adc95485323b96bd6f5c02
Certificate serial: 01A12A9F5463FD72258E010BC8C2782E4347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
Manifest number: 1608
Signing time: Sun 11 Oct 2026 11:00:47 +0000
Manifest this update: Sun 11 Oct 2026 11:00:47 +0000
Manifest next update: Mon 12 Oct 2026 11:00:47 +0000
Files and hashes: 1: BHf8SWUieWyp8CsFi-LkKjkwID0.roa (hash: r6mZHm7Sd1CEnMX4mNcO0XlOAIiIxrl1PQK5EqAyZj4=)
2: NgAOvu0kK5VkrclUhTI7lr1vXAI.crl (hash: cRF89HZHG3bZZktcUKWa0LLh09LgkPtpVVh9Owp4hyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:9f:54:63:fd:72:25:8e:01:0b:c8:c2:78:2e:43:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36000ebeed242b9564adc95485323b96bd6f5c02
Validity
Not Before: Oct 11 11:00:47 2026 GMT
Not After : Oct 12 11:00:47 2026 GMT
Subject: CN=5e9e018d31e455ad9679e08c72aa2ecfb698d1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7f:9a:d4:b0:f1:03:d9:c5:76:21:03:41:d0:
e1:29:fd:b8:69:ed:f8:8b:ca:7b:87:35:d9:05:2f:
f7:ac:e3:52:e4:7c:64:b3:27:0a:51:86:9b:8d:c3:
25:f5:2b:ed:5b:08:14:6e:1a:88:37:91:be:df:40:
92:0e:50:30:eb:d1:1e:91:c8:e6:66:7b:65:db:d3:
d2:9e:d3:09:42:aa:72:55:ff:e6:a0:c3:1b:0c:67:
0e:54:8e:72:35:89:6a:4c:ab:f0:18:10:1f:20:dd:
b6:12:72:de:95:b7:13:23:b3:58:d2:90:a0:ee:32:
ff:cf:67:09:66:41:3f:ca:42:e6:ee:33:6c:9f:2b:
3d:07:5e:b4:c7:98:5a:92:b2:c2:0e:0c:bb:c3:03:
62:b7:66:ae:0c:fc:c4:bf:91:18:b8:a8:bd:9c:46:
d2:f7:54:a2:dc:7f:d8:5c:4f:8b:25:72:00:7f:58:
43:da:75:01:6f:0c:ae:de:6f:b3:c6:b1:e6:93:b4:
4b:65:25:33:cb:dc:76:9d:bf:1d:01:23:b0:4b:38:
4d:51:da:0e:55:94:4d:75:e0:92:78:5b:9e:59:77:
71:b4:fc:cb:bc:c0:ff:59:f4:f6:05:ae:7f:7d:4c:
f5:62:80:8c:7e:2f:01:4f:de:57:ea:e6:45:70:20:
d4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9E:01:8D:31:E4:55:AD:96:79:E0:8C:72:AA:2E:CF:B6:98:D1:F8
X509v3 Authority Key Identifier:
keyid:36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c9:c2:32:80:a8:a7:63:cc:9e:19:d7:ea:8b:0d:ff:23:de:
5b:29:23:f4:30:e2:72:f2:0d:7e:bc:1d:70:0d:b6:c5:c1:84:
d1:4f:a3:b2:99:b3:b4:f0:3e:b3:08:8c:38:38:d4:0e:e6:ed:
01:5f:2b:6a:fe:d9:c4:85:32:d3:94:3a:f4:63:a7:60:eb:9b:
91:9c:78:be:25:20:ca:8b:4f:ab:52:5a:9b:98:36:8e:ff:71:
1a:33:c3:22:16:7d:98:01:47:68:b9:b0:e8:8e:d9:65:d9:47:
3c:6f:62:f1:8c:8f:e5:07:d7:0c:3c:13:33:04:2a:c1:21:44:
f3:88:d9:a7:61:09:5d:d7:f6:34:9c:1b:82:04:e2:dc:da:80:
52:79:fe:88:d8:67:40:3c:64:1b:6b:3c:10:e3:34:17:63:a1:
87:c8:72:4f:17:c1:11:5d:91:1e:b8:3c:38:3c:24:d1:26:61:
56:df:69:e7:f9:6b:36:e0:e6:2e:57:97:e4:a6:f7:6c:40:9e:
ce:0b:27:93:68:71:9b:85:88:75:cd:02:b2:04:43:a9:07:ca:
da:f5:fd:45:69:0b:ce:9c:0c:75:3f:37:87:cf:f6:c6:a5:42:
42:4e:ca:fe:8d:51:f8:cf:5c:58:e3:99:00:2c:a2:aa:c7:1d:
a3:5c:ec:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:09:55 2026 by rpki-client