Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
File: ngoRprHRiWV8f7luwUWLr8oYZPQ.mft (raw, json)
Hash identifier: wzVCjjRGHcGEUteyjy3eCdwA2uwfc/lgpu6UklbyXGM=
Subject key identifier: C3:EC:E0:E5:1F:01:10:03:96:83:52:7C:1F:70:10:FC:F9:C8:6C:A7
Authority key identifier: 9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
Certificate issuer: /CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
Certificate serial: 019D9B51385041AB1937EAD5B6991A57AB6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
Manifest number: 0D7C
Signing time: Fri 17 Apr 2026 12:01:24 +0000
Manifest this update: Fri 17 Apr 2026 12:01:24 +0000
Manifest next update: Sat 18 Apr 2026 12:01:24 +0000
Files and hashes: 1: 1-1Ic5gcyRLNc4y6lZMhKlnsHlIk.roa (hash: U8NuaZXQIXbJYqStLcZdEAJOjjGzKdcKPJX3ZKFHQ8A=)
2: ngoRprHRiWV8f7luwUWLr8oYZPQ.crl (hash: hWjoGCmPTA7G4gC8GoEufFnb2JcTG4YLQs9s5I/QBLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:38:50:41:ab:19:37:ea:d5:b6:99:1a:57:ab:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
Validity
Not Before: Apr 17 12:01:24 2026 GMT
Not After : Apr 18 12:01:24 2026 GMT
Subject: CN=c3ece0e51f0110039683527c1f7010fcf9c86ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:81:35:94:01:65:2e:b5:ef:f3:3d:19:f1:43:
bd:37:e3:98:87:2b:d0:dd:b3:50:ba:5c:0c:5f:42:
60:31:2e:90:6c:cc:2a:cb:96:9a:39:0a:b5:b6:9c:
2d:58:f1:d6:74:fc:da:c9:21:84:54:48:b8:64:2a:
a1:61:c1:02:dc:8d:b5:10:87:6e:5d:9b:3c:8d:55:
f8:62:eb:27:dc:63:4b:eb:dd:1e:93:27:fd:92:80:
2f:9e:f1:82:e9:69:b8:c6:41:bd:f0:01:a0:b0:97:
ad:ba:a7:6c:fa:c4:76:6b:b6:08:33:26:d8:b2:21:
4a:0a:e1:53:4d:98:2b:04:01:be:6d:8e:d3:4b:e3:
0c:bf:03:6e:76:ad:56:a2:d9:a9:f0:c7:ab:ba:a4:
57:c8:a2:14:a1:bc:75:46:4f:db:90:cc:ed:0c:d3:
98:08:0f:7e:51:01:93:0b:39:d1:f4:b1:40:4d:21:
7e:d0:5b:18:e9:b4:18:37:85:8a:6e:c5:e2:11:62:
75:ae:53:9b:31:a1:33:fb:95:2c:a7:27:f0:3a:6e:
dd:29:33:b5:19:1c:fd:47:4f:9e:fe:1c:0c:5b:59:
e6:d8:a0:84:4a:3b:5d:e4:1e:f9:4e:13:e3:da:3e:
a6:9b:b1:7d:85:10:ec:72:b9:04:8f:ae:39:6b:ee:
9e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EC:E0:E5:1F:01:10:03:96:83:52:7C:1F:70:10:FC:F9:C8:6C:A7
X509v3 Authority Key Identifier:
keyid:9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:19:9c:c6:0e:91:2f:db:cb:3f:7b:d7:bf:cc:7d:d3:3e:15:
a5:a6:ca:23:43:c0:9f:62:9d:fd:d9:5c:ad:63:8c:15:28:cc:
b1:ab:25:9e:6e:9c:5a:d1:58:fe:9e:23:55:85:6b:93:00:3f:
af:7a:ca:d5:3f:63:e1:fb:65:30:1b:65:a1:32:c0:31:0d:ef:
1b:e4:7e:81:28:a3:8f:e5:1d:2e:ff:9b:26:42:c2:7a:97:52:
00:0f:df:9a:6f:fd:d1:6a:88:a0:ad:4f:de:ff:d6:40:93:1d:
26:fc:54:d8:a1:c8:79:30:f1:3b:fe:05:ce:96:71:05:37:80:
97:3a:ea:a7:88:e4:0e:05:73:4b:f8:89:0a:7e:cd:06:81:7e:
01:6b:9d:1e:e0:a7:17:72:51:d5:9b:eb:af:10:6b:43:2b:84:
4f:ea:7b:1f:e0:13:d5:7f:e1:4f:fa:84:f7:38:c7:fa:fe:ba:
a6:29:3c:1a:e9:25:35:ac:b0:07:c6:3d:fd:c8:cf:4e:80:8e:
8b:ae:1c:dc:a8:ee:15:c9:3e:f2:5b:0f:98:ae:d7:ee:15:3c:
f5:83:c7:da:fb:04:f2:c3:23:c6:25:6e:84:45:21:07:80:3a:
89:95:d8:3d:67:4b:8c:ee:82:9d:48:ca:d4:9c:13:c1:02:28:
18:98:be:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:33:21 2026 by rpki-client