Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft
File: ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft (raw, json)
Hash identifier: NPCan82/KuFSSDKzUA5MF/60r+pBSJZmec03L4kjXYc=
Subject key identifier: 4B:55:5F:B6:F1:D6:D8:57:CB:5D:18:F5:DB:23:E5:E8:EE:39:64:2E
Authority key identifier: 9E:0D:E4:F2:62:75:EA:5F:C2:F2:3C:8B:4D:7E:06:D7:2B:3B:73:C7
Certificate issuer: /CN=9e0de4f26275ea5fc2f23c8b4d7e06d72b3b73c7
Certificate serial: 019CABA1D371201770FC8C49481DBA80A949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft
Manifest number: 099F
Signing time: Sun 01 Mar 2026 23:00:35 +0000
Manifest this update: Sun 01 Mar 2026 23:00:35 +0000
Manifest next update: Mon 02 Mar 2026 23:00:35 +0000
Files and hashes: 1: 89T2d-p1rI_t7zp4IKHTzVRe72U.roa (hash: u5qDexFa1LR5cVSk1zIhT1bruMwSgtsKPW6k4/CBkvI=)
2: ng3k8mJ16l_C8jyLTX4G1ys7c8c.crl (hash: TqL9s++IXAxhtvX7GQBujDJ/411/U+1s9B1++96Wd3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:d3:71:20:17:70:fc:8c:49:48:1d:ba:80:a9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0de4f26275ea5fc2f23c8b4d7e06d72b3b73c7
Validity
Not Before: Mar 1 23:00:35 2026 GMT
Not After : Mar 2 23:00:35 2026 GMT
Subject: CN=4b555fb6f1d6d857cb5d18f5db23e5e8ee39642e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c7:71:5d:2c:94:63:83:82:b0:4f:65:21:ee:
5d:4d:f1:fa:01:03:1e:f5:21:ed:ae:c4:95:b9:f4:
de:f0:57:09:c1:a0:02:94:67:fa:53:d9:86:1b:c9:
ac:b8:5e:ab:87:40:66:35:c4:71:b1:d6:5e:e2:8b:
35:23:a2:f5:1d:10:ca:38:f4:7d:9c:7b:02:c1:59:
fa:9e:ec:35:01:6f:4b:cc:f4:56:e4:d2:3c:22:7c:
ae:52:24:70:d6:19:b8:79:a5:66:39:5f:bc:0a:a1:
65:b3:38:16:be:93:ad:ec:5b:c6:52:ef:4c:9f:cd:
83:6e:b1:a8:c1:43:2a:f5:2b:74:0e:d2:a9:c1:7b:
f4:c2:dc:4a:ae:37:7a:78:be:47:56:e6:0e:da:94:
58:f4:96:4f:ee:f1:a2:ac:09:cd:80:aa:0e:72:e8:
ca:cd:64:4a:a4:99:a6:b9:c5:79:e9:98:0c:63:b6:
58:83:59:63:43:50:86:4c:72:14:cf:85:96:f8:53:
79:b5:ed:a4:4d:eb:bb:27:20:7d:57:71:78:14:4e:
27:74:65:9b:69:72:65:d8:3e:3c:e4:18:ef:2a:91:
ec:24:28:af:22:63:d3:2a:37:df:6e:35:67:b3:64:
c3:94:ea:55:6b:91:7b:33:2b:10:5b:79:19:7d:b4:
08:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:55:5F:B6:F1:D6:D8:57:CB:5D:18:F5:DB:23:E5:E8:EE:39:64:2E
X509v3 Authority Key Identifier:
keyid:9E:0D:E4:F2:62:75:EA:5F:C2:F2:3C:8B:4D:7E:06:D7:2B:3B:73:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:d3:4f:52:7a:78:62:7f:b3:77:67:08:8d:88:c2:2a:ee:69:
fd:a2:8f:0c:7f:52:8d:e2:df:e6:eb:6e:39:00:f4:89:22:e0:
d8:59:da:4f:61:c7:2b:4d:10:db:73:77:c2:62:0f:9a:1f:28:
85:27:02:97:eb:6d:54:8d:73:6e:6a:3d:96:9b:fd:c9:0b:30:
c0:36:09:cd:6c:df:e6:23:9d:3e:9e:8d:47:13:45:ba:97:2b:
46:b7:94:53:f8:ac:85:7d:db:1d:9a:fe:18:e9:ff:d6:e0:d4:
4e:cd:62:c2:19:fd:68:33:49:d7:99:c0:29:74:d8:68:5f:88:
38:76:6b:9a:fa:b9:48:97:73:91:49:df:e6:9d:06:8d:c7:3e:
20:3b:ee:7a:d5:3e:f9:98:a0:24:93:2b:28:ed:a2:61:5a:d5:
14:70:dd:f6:4e:da:de:ed:36:9e:af:fb:8a:31:58:57:04:0f:
14:8e:76:26:cf:a7:05:19:24:34:46:f3:59:0b:37:2c:b9:5b:
e0:e0:0b:e4:67:7c:10:a9:66:9b:ec:8e:fa:e3:d7:d1:86:76:
83:d3:bb:c6:3d:52:1e:b3:24:e3:51:0c:80:e3:b8:52:3c:19:
77:9a:27:10:41:5c:f2:5e:12:5a:e6:95:75:a7:81:8f:4a:ea:
31:1f:c3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:37:29 2026 by rpki-client