Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
File: NgAOvu0kK5VkrclUhTI7lr1vXAI.mft (raw, json)
Hash identifier: w5TCZebk6Dn4QNfaxrpMRG060snbjdJS4/zb6Y/v0F0=
Subject key identifier: 1D:4E:40:3C:BD:EA:A2:0E:13:38:1E:81:C1:78:67:53:C3:CB:0A:24
Authority key identifier: 36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
Certificate issuer: /CN=36000ebeed242b9564adc95485323b96bd6f5c02
Certificate serial: 01A0032683ED22469901B7AF75E3819AC820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
Manifest number: 156F
Signing time: Sat 15 Aug 2026 02:00:50 +0000
Manifest this update: Sat 15 Aug 2026 02:00:50 +0000
Manifest next update: Sun 16 Aug 2026 02:00:50 +0000
Files and hashes: 1: BHf8SWUieWyp8CsFi-LkKjkwID0.roa (hash: r6mZHm7Sd1CEnMX4mNcO0XlOAIiIxrl1PQK5EqAyZj4=)
2: NgAOvu0kK5VkrclUhTI7lr1vXAI.crl (hash: MmxGqQD17N4oRcyALl7eMZTK7pybwTP7ugmxyzyEE/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:26:83:ed:22:46:99:01:b7:af:75:e3:81:9a:c8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36000ebeed242b9564adc95485323b96bd6f5c02
Validity
Not Before: Aug 15 02:00:50 2026 GMT
Not After : Aug 16 02:00:50 2026 GMT
Subject: CN=1d4e403cbdeaa20e13381e81c1786753c3cb0a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:01:93:f2:ef:1c:32:9e:8f:8b:fd:b2:29:f7:
db:7b:06:09:fb:e6:f5:aa:8e:46:35:4f:07:7f:8f:
48:a4:81:86:be:a5:66:cc:49:61:44:c8:3b:c9:6c:
aa:de:0e:36:fc:ef:6c:29:e7:53:db:3c:b9:bf:d5:
82:d9:c1:cd:2e:12:25:23:07:fb:85:4c:db:9f:fb:
90:4a:96:d0:84:33:6f:c7:75:44:ff:b4:85:cd:6a:
1f:3f:9a:61:b7:1d:03:27:dd:3a:eb:57:91:ca:cd:
0a:79:17:59:e0:f5:16:f2:b4:b5:95:b7:21:03:75:
0e:31:13:75:c8:de:42:b4:34:d0:2b:11:93:61:0a:
12:c6:af:00:f8:c4:ec:2c:3c:44:76:7f:19:43:f6:
c4:c2:e1:e7:c6:d4:51:a5:1b:cd:5d:21:50:3c:0e:
e5:c7:4c:7a:b2:f4:19:08:cd:1e:31:76:b8:41:56:
44:fb:2b:59:c8:a7:b7:f8:d2:73:67:87:80:85:5b:
d4:11:98:73:7d:2c:f5:26:c5:9d:8e:24:81:2d:f4:
ea:dd:62:2c:cb:af:1e:7b:50:3e:27:a2:ae:fd:f3:
62:4f:1c:76:3c:c0:71:61:db:93:ff:f0:d5:73:78:
88:ab:3d:28:78:a2:05:48:25:b2:f8:b7:92:7a:b2:
39:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4E:40:3C:BD:EA:A2:0E:13:38:1E:81:C1:78:67:53:C3:CB:0A:24
X509v3 Authority Key Identifier:
keyid:36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:90:e1:7f:f0:ce:8d:72:a3:b4:93:11:38:10:bc:25:05:b6:
19:8d:95:e4:83:0a:67:e6:a9:44:3a:bb:58:d9:19:c1:44:bc:
37:16:49:45:6f:01:93:fc:9b:df:02:f9:d9:08:7d:66:b6:3f:
0b:c6:33:ea:18:6b:c9:0e:8b:82:04:3c:be:76:07:6d:4b:0b:
9d:b3:b1:a3:30:ba:c7:e1:73:02:55:4f:15:da:59:5d:d9:25:
68:ee:f9:08:a5:31:48:fd:e6:43:b8:85:4c:b0:54:d9:7f:1a:
bf:a5:61:47:1c:9e:c8:ca:c1:55:bf:e7:b7:f5:c0:15:dc:07:
07:d9:66:31:23:1e:9a:4c:2d:9a:91:83:06:10:67:cd:07:77:
d5:dd:87:a8:49:4e:24:fa:a5:ab:aa:23:ee:3a:df:d2:13:06:
ac:2e:93:76:a5:b2:9d:8a:72:45:06:3b:2d:1c:db:7a:0b:8a:
1b:4e:d2:26:05:79:9d:5e:48:4e:7a:3e:9b:f5:cd:8f:02:91:
ea:b4:75:9a:bc:99:a4:6a:86:49:99:d0:c6:dc:72:13:f9:b6:
9c:4c:42:e2:d8:bb:d0:a0:64:c7:3e:8f:50:55:66:79:95:74:
69:fa:be:d3:e9:77:20:c6:2f:be:d1:69:56:ff:1b:c4:99:b9:
88:71:d0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:07:41 2026 by rpki-client