Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.mft
File: Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.mft (raw, json)
Hash identifier: mPFPLGu9XV7CTizI/Tjy462el6M52jqGChluV9mTuuo=
Subject key identifier: 97:C1:07:D5:6A:70:64:31:FD:64:F5:6B:34:92:13:22:5F:CD:67:70
Authority key identifier: 36:0C:26:F9:F5:BD:51:76:FB:9A:D0:B6:5A:94:8D:0E:8D:D9:0E:E4
Certificate issuer: /CN=360c26f9f5bd5176fb9ad0b65a948d0e8dd90ee4
Certificate serial: 019DCE62888AF3FF08C4A1AA7C37F3DCB483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.mft
Manifest number: A9
Signing time: Mon 27 Apr 2026 10:00:57 +0000
Manifest this update: Mon 27 Apr 2026 10:00:57 +0000
Manifest next update: Tue 28 Apr 2026 10:00:57 +0000
Files and hashes: 1: Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.crl (hash: kxj1L6twUz1IaC5viZl0MiUbg7iAH+v5d5N0eubNVWw=)
2: X7p4GpmVF8fRosHtWstP9WAbsfk.asa (hash: ifmWI2l5FXM2+xdgsA/GHYf01f0SXAv8H1iT8gXkOOo=)
3: sQjE4Ryf3azGzRpKF8iTxt9fGjI.roa (hash: sCZDZUEpHkq2HyKQrO/C9pxfE8YHa827nuwFp5PQA2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:62:88:8a:f3:ff:08:c4:a1:aa:7c:37:f3:dc:b4:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360c26f9f5bd5176fb9ad0b65a948d0e8dd90ee4
Validity
Not Before: Apr 27 10:00:57 2026 GMT
Not After : Apr 28 10:00:57 2026 GMT
Subject: CN=97c107d56a706431fd64f56b349213225fcd6770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:df:2b:08:98:2c:05:8f:97:de:ad:fb:4c:a0:
a1:2b:0b:23:76:bf:ed:46:44:aa:0a:c0:28:57:0d:
30:74:3b:13:a4:e6:7d:ea:4b:b5:fe:e2:63:a7:73:
41:ca:44:8b:27:c8:e6:69:66:5b:32:57:2a:28:b0:
09:a0:77:61:58:a4:8b:df:d3:18:13:66:f5:5c:ee:
e9:8c:19:9f:bc:32:fd:3f:69:03:02:8e:9d:f8:1d:
ae:20:12:7a:c4:b8:bd:71:a7:9d:e7:4a:4b:15:0e:
29:6c:71:f6:70:81:03:e0:1a:53:ab:fc:1e:c1:f0:
e2:02:bb:c1:8e:d2:d4:19:f0:63:37:df:e4:7a:7b:
a8:13:6f:a8:b8:2c:b7:11:2a:f4:4c:60:f7:4a:44:
0e:fa:57:6c:20:4d:b2:27:a0:4f:93:3c:4a:9b:c2:
05:d3:33:f0:7f:9e:6a:e6:14:5e:6c:31:ae:30:20:
86:d7:55:24:a4:05:5f:3d:36:5f:92:61:28:96:f7:
cf:c2:76:aa:1d:e9:1b:6b:d8:10:d5:6d:11:46:4f:
87:6a:a8:c9:bf:ae:28:90:98:e8:47:15:c4:fd:08:
af:a3:a6:86:bb:9f:aa:cc:a5:97:01:80:74:2d:fc:
55:fd:5b:76:ec:d2:b4:f3:5b:47:e6:42:45:e7:0c:
54:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C1:07:D5:6A:70:64:31:FD:64:F5:6B:34:92:13:22:5F:CD:67:70
X509v3 Authority Key Identifier:
keyid:36:0C:26:F9:F5:BD:51:76:FB:9A:D0:B6:5A:94:8D:0E:8D:D9:0E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:b9:37:8f:bb:2f:42:57:0a:89:ac:81:73:60:63:84:22:78:
a8:31:9b:ea:1e:f3:fa:91:3a:30:6a:f0:9a:46:76:67:c1:e8:
41:a7:f5:c0:b6:83:9a:48:3f:4e:e9:51:69:75:32:0e:45:03:
6e:5b:7e:0f:35:61:e8:ec:b7:8b:6c:00:a1:49:55:e5:e8:6e:
07:a4:f8:c4:ad:fe:0a:5e:7e:f1:2d:74:87:a0:b0:ae:09:a7:
ae:1b:d4:08:9c:13:06:7d:df:b2:a7:02:83:67:cc:2d:67:9e:
92:75:e6:4a:fa:87:ec:38:09:a4:88:a7:83:f1:15:01:0e:8c:
a8:a9:46:ff:26:a5:f9:42:f0:63:66:7f:91:f4:37:4d:c6:17:
51:81:3f:35:7d:35:2a:8d:72:7f:ee:b6:03:6d:e4:a1:05:fe:
f1:3c:c8:11:7e:8c:66:66:8d:86:01:f3:9c:26:e1:63:45:23:
9d:a7:f0:5e:b7:53:8f:0c:02:54:8d:f1:50:09:fb:75:8b:05:
83:9e:d6:e3:62:7a:60:1c:db:de:7c:7e:cd:9d:58:3c:a7:4e:
9e:ff:91:7d:b5:a8:82:5a:27:ae:6d:87:89:51:9e:76:a8:c4:
7b:6f:e4:cf:73:11:b3:46:95:98:e0:36:52:9c:16:97:99:71:
32:48:27:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:33 2026 by rpki-client