Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
File: ncNmr2zgsan2AXOxS1_d1-C5YwY.mft (raw, json)
Hash identifier: chv+3+VovXsQ6PYysuO9WT9PDOGS/rH5qUNRbJQO3s0=
Subject key identifier: 2E:89:86:D3:3C:64:9A:21:D8:58:BD:A6:18:C5:49:48:35:00:83:30
Authority key identifier: 9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
Certificate issuer: /CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Certificate serial: 019D97E20CE573D4CFB6C622C56F651F317F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
Manifest number: 187E
Signing time: Thu 16 Apr 2026 20:01:07 +0000
Manifest this update: Thu 16 Apr 2026 20:01:07 +0000
Manifest next update: Fri 17 Apr 2026 20:01:07 +0000
Files and hashes: 1: Kx2A4QHC9gQsEflStPjFwVjhvSA.roa (hash: FMGSXjNyUjkWfrbaK6kOA/2OaW9XrZEgBYS29pUlyug=)
2: ncNmr2zgsan2AXOxS1_d1-C5YwY.crl (hash: rm/tSN6HX856JVwazmwxtGluSzg047mxPvMyDZBS55I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:0c:e5:73:d4:cf:b6:c6:22:c5:6f:65:1f:31:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Validity
Not Before: Apr 16 20:01:07 2026 GMT
Not After : Apr 17 20:01:07 2026 GMT
Subject: CN=2e8986d33c649a21d858bda618c5494835008330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:de:4d:a1:03:d1:66:e5:e6:c5:55:c8:3c:4b:
90:16:ed:61:c2:1a:44:82:1c:65:2d:bc:15:3d:33:
9c:e1:ef:58:da:6f:c8:cf:97:dc:7c:a3:93:3a:70:
84:64:bc:53:68:b2:6e:e8:54:f9:49:f5:93:f4:43:
97:ec:ce:43:97:a9:2c:25:0f:8e:91:b5:ee:5a:e2:
df:b8:27:6c:b6:c8:c9:95:df:7a:47:2c:3b:7f:27:
05:89:d6:eb:c6:e3:f0:70:07:6d:6c:ba:ee:f0:49:
16:ad:21:b4:dd:5e:17:35:76:40:24:bd:10:dd:4c:
8a:f3:d2:d1:12:fc:51:1e:dc:d6:6d:1c:27:73:61:
9b:48:05:a7:57:4e:31:78:fd:3f:ee:99:76:4b:04:
d9:f3:5b:7c:48:4f:c2:39:50:4a:de:d6:49:04:c3:
bb:f8:64:b7:f7:b4:a7:fa:1e:fd:31:10:6d:d2:9a:
3d:68:d7:bb:e6:d2:62:5a:a2:ce:7f:f7:03:3a:ae:
85:5f:5f:ba:0f:85:73:17:3e:64:13:27:3b:94:68:
1a:62:d9:bc:c7:6f:1c:3f:d4:d8:f6:49:df:f3:8e:
04:d5:05:de:51:b0:82:e8:30:bf:6a:0f:c8:7c:a7:
90:68:76:80:61:e2:68:15:4d:b1:61:22:b2:27:03:
5b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:89:86:D3:3C:64:9A:21:D8:58:BD:A6:18:C5:49:48:35:00:83:30
X509v3 Authority Key Identifier:
keyid:9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:14:eb:07:09:b4:9a:6a:55:3d:e1:8f:df:f9:f4:45:6d:11:
d0:ae:f3:1e:11:bd:f5:db:e4:76:a8:26:49:59:59:ef:df:d9:
01:7e:e5:de:bb:39:74:1e:3b:a9:b1:b6:56:5c:60:01:78:06:
4b:ea:38:68:e5:d3:a0:1a:c9:6f:33:0b:c0:b0:c0:2d:0c:20:
29:49:ce:26:63:0c:cb:16:03:aa:1a:13:28:5e:69:b5:26:44:
7a:60:53:2c:07:1f:e3:2e:79:9b:3f:e8:9d:e5:fe:aa:3f:97:
f6:ff:6f:c4:94:59:ed:1a:d3:de:15:78:11:61:da:d0:48:7d:
60:95:f2:ca:80:1f:61:18:e5:14:4a:3d:36:d4:37:63:db:c4:
b2:14:b1:39:f7:e2:a3:55:72:19:aa:05:89:eb:a0:d1:42:ec:
aa:2f:d9:7e:09:83:ed:aa:18:34:a6:37:1d:6e:e8:6e:fc:d8:
f8:eb:03:39:93:c1:50:d5:07:50:31:ba:ce:3c:34:63:36:91:
4f:b5:e7:14:f7:07:17:3c:31:c8:09:e4:6f:aa:d5:17:64:f7:
71:d6:6a:7f:74:33:d0:35:c2:c3:82:4a:a8:44:8a:89:c4:7e:
af:cf:50:85:ef:1d:78:ef:77:12:fa:bb:55:9e:d1:42:87:33:
9c:ff:97:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:36:49 2026 by rpki-client