Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
File: ngoRprHRiWV8f7luwUWLr8oYZPQ.mft (raw, json)
Hash identifier: Gl8inBIEganR59l2+oh868ociEFI6stzR6URsJuSj4U=
Subject key identifier: C0:14:3B:36:5B:BF:AF:0E:7E:E2:BB:02:47:15:4D:BC:D1:34:CF:D9
Authority key identifier: 9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
Certificate issuer: /CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
Certificate serial: 019CA9EA8CDF2EE6C8C5546A71792DD99D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
Manifest number: 0CFF
Signing time: Sun 01 Mar 2026 15:00:46 +0000
Manifest this update: Sun 01 Mar 2026 15:00:46 +0000
Manifest next update: Mon 02 Mar 2026 15:00:46 +0000
Files and hashes: 1: 1-1Ic5gcyRLNc4y6lZMhKlnsHlIk.roa (hash: U8NuaZXQIXbJYqStLcZdEAJOjjGzKdcKPJX3ZKFHQ8A=)
2: ngoRprHRiWV8f7luwUWLr8oYZPQ.crl (hash: UGHMcBmWJRKMrB6I+e1aCS6LX9HlTJKP+pyXpzeCPB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:8c:df:2e:e6:c8:c5:54:6a:71:79:2d:d9:9d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
Validity
Not Before: Mar 1 15:00:46 2026 GMT
Not After : Mar 2 15:00:46 2026 GMT
Subject: CN=c0143b365bbfaf0e7ee2bb0247154dbcd134cfd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9f:a6:c1:ce:84:4d:90:a1:38:c9:35:47:b1:
09:1d:2e:02:1e:9e:9d:0d:25:1c:a8:54:e4:3c:d7:
74:02:c9:e3:64:02:b0:14:44:f6:22:f3:1f:2a:0b:
de:e6:e8:f4:77:c9:66:51:e9:97:ea:08:9c:ba:23:
61:2e:17:02:d2:ff:cb:c7:2c:6d:07:7b:33:f7:1a:
a3:c6:6a:46:0a:3a:f4:c2:98:0d:28:ae:5e:2f:b9:
9b:03:02:72:60:be:77:b9:07:6d:e4:bf:e0:45:f4:
a0:bd:19:90:3b:31:72:ac:8d:6f:f7:4f:8c:02:1e:
e7:01:99:00:cf:68:73:52:9a:8d:bd:55:f0:70:96:
76:21:64:5a:b8:05:d7:8c:fb:4f:14:80:3b:02:47:
79:b9:cf:c0:ed:39:85:c9:75:d1:fa:b3:b1:5d:a5:
4d:43:19:e7:fb:76:f3:09:c2:0b:b3:cc:bb:f4:34:
36:f7:50:ac:05:f2:40:5e:21:f7:d3:79:96:8d:0b:
f3:5e:33:4d:95:61:73:2c:ce:b2:d5:14:05:9c:5c:
fe:fe:8c:96:f4:6a:8c:f1:a5:87:3c:ba:6a:81:d3:
37:c9:b7:d1:90:d7:95:1d:7f:d6:71:62:d5:b3:8e:
50:2f:64:d6:80:16:49:f8:d6:eb:72:d9:13:7c:bb:
21:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:14:3B:36:5B:BF:AF:0E:7E:E2:BB:02:47:15:4D:BC:D1:34:CF:D9
X509v3 Authority Key Identifier:
keyid:9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:7d:6e:50:24:a6:01:89:dc:08:a6:97:16:af:61:c1:a9:b5:
fe:fc:60:e3:e3:6d:aa:b5:1f:3a:13:35:51:6b:42:fa:05:21:
2f:55:5b:a7:5c:09:21:a6:89:5d:ff:35:de:a8:25:98:8c:74:
97:6d:5e:1d:e6:16:c5:47:ec:a9:07:fd:93:87:65:71:a6:e0:
f3:cc:21:f2:dc:9e:9e:3e:18:2d:a3:d2:42:95:3d:72:1d:4a:
33:56:3a:67:23:db:ad:ae:da:30:90:d1:a9:c7:23:bd:bf:8a:
1d:28:fb:4a:b2:34:d6:ec:69:dc:01:29:65:a4:18:2b:74:53:
e1:63:9a:52:fe:b4:ed:f1:df:4f:29:c4:85:6f:04:19:1a:6c:
57:fb:af:ba:a4:34:50:ab:6a:7c:25:ce:1f:ca:12:24:7f:ab:
80:3d:56:f6:78:9a:dc:c5:e2:5c:f5:a8:04:22:63:d2:79:6d:
a8:64:71:3f:43:9c:eb:ed:76:2e:ca:cc:e4:fa:2d:35:18:ab:
c8:ef:8a:33:3c:77:9c:4c:8c:67:70:de:7b:b6:7c:ab:c3:50:
2a:18:60:2b:eb:23:ac:57:2d:1c:3b:fc:64:bd:f2:37:68:7b:
f0:25:31:3e:2b:95:7b:41:18:42:53:7c:ea:e1:eb:da:40:d0:
58:0a:6e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:37 2026 by rpki-client