Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/ngYAPFcVh0_asOMVcigO-OTkeYw.mft
File: ngYAPFcVh0_asOMVcigO-OTkeYw.mft (raw, json)
Hash identifier: X8eNj1OJlnZYcVBpLrx6DI+Ow4v8ukPKbEhSm/QmePI=
Subject key identifier: C3:02:67:AC:4E:24:A9:68:77:91:26:B6:90:1C:2F:4C:46:44:F1:1C
Authority key identifier: 9E:06:00:3C:57:15:87:4F:DA:B0:E3:15:72:28:0E:F8:E4:E4:79:8C
Certificate issuer: /CN=9e06003c5715874fdab0e31572280ef8e4e4798c
Certificate serial: 01A1AABA85A7809051A2633CF5E65C38A13C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngYAPFcVh0_asOMVcigO-OTkeYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/ngYAPFcVh0_asOMVcigO-OTkeYw.mft
Manifest number: AE
Signing time: Thu 05 Nov 2026 08:01:52 +0000
Manifest this update: Thu 05 Nov 2026 08:01:52 +0000
Manifest next update: Fri 06 Nov 2026 08:01:52 +0000
Files and hashes: 1: H4A0XaCoNz3xdxbu_BQvhonTrLg.asa (hash: SUZN+kpPo9X4uP4hRZXEB9Klwbg5G07yYkGjoku+ID4=)
2: U40woe4t5L3G0u-LTfcj5cxfaU8.roa (hash: gDcGs3cvNtDcrQmnu+d2LGcZqFkPSX7n6H8BVd1x9QM=)
3: ccEx9SOUx4m-tHjhTok2nkxXIt8.roa (hash: hHnnV4OUqt3+HNEP/62ZeDafUCLIXf+qqG6fUJLUQ/o=)
4: ngYAPFcVh0_asOMVcigO-OTkeYw.crl (hash: 4q8Bwzs1lQ8WuednsWGWudL3FHxaUJ2i0HQNSpHKiZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/ngYAPFcVh0_asOMVcigO-OTkeYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/ngYAPFcVh0_asOMVcigO-OTkeYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngYAPFcVh0_asOMVcigO-OTkeYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:ba:85:a7:80:90:51:a2:63:3c:f5:e6:5c:38:a1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e06003c5715874fdab0e31572280ef8e4e4798c
Validity
Not Before: Nov 5 08:01:52 2026 GMT
Not After : Nov 6 08:01:52 2026 GMT
Subject: CN=c30267ac4e24a968779126b6901c2f4c4644f11c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2e:df:3d:be:0b:88:e5:ec:7c:e3:d7:59:18:
54:02:07:d2:40:28:9a:4a:86:62:33:ee:c0:69:22:
e2:15:19:cb:e6:d9:e2:b4:c5:3a:c2:16:d8:68:3d:
8f:b4:7b:3d:c9:bc:5a:6f:ea:ce:d8:45:2a:18:ea:
f9:09:8c:61:d1:c3:ba:1d:08:76:ab:04:94:ad:53:
1c:3f:35:77:42:21:14:8a:b1:c5:26:7a:97:55:4d:
08:67:35:40:ef:ce:c4:b9:3f:d9:d9:c9:59:69:1b:
fc:4b:87:93:2f:d4:a8:71:e8:b5:5a:8c:d4:ae:5a:
f8:f1:23:aa:00:59:6f:ac:af:66:b2:a1:c5:18:a7:
08:ab:91:34:b0:9a:14:81:de:5d:1f:b7:4b:27:7f:
7f:e2:e3:70:22:ea:e9:a6:ff:db:7c:0e:b9:73:51:
0a:45:21:41:aa:87:0b:6a:85:7a:8d:81:3e:7c:6d:
db:ac:86:a1:4b:fe:88:64:db:eb:e8:f6:57:bb:6e:
87:4b:8c:cd:22:9a:c1:28:1a:24:37:51:39:bc:87:
fe:b0:eb:3e:3a:9d:33:c8:fd:33:75:ef:d3:e7:a7:
f2:b6:ee:38:d7:a2:76:8f:7e:4c:b4:a8:95:9d:91:
59:18:81:56:57:4b:68:32:6f:89:a5:32:c3:9f:0d:
09:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:02:67:AC:4E:24:A9:68:77:91:26:B6:90:1C:2F:4C:46:44:F1:1C
X509v3 Authority Key Identifier:
keyid:9E:06:00:3C:57:15:87:4F:DA:B0:E3:15:72:28:0E:F8:E4:E4:79:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngYAPFcVh0_asOMVcigO-OTkeYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/ngYAPFcVh0_asOMVcigO-OTkeYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/ngYAPFcVh0_asOMVcigO-OTkeYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:08:07:50:26:44:71:6c:02:f0:d9:44:18:b6:94:c0:b0:81:
47:ef:bc:06:9f:60:5b:75:ca:6a:b1:45:35:77:ef:e4:0a:35:
21:43:1b:47:ed:fd:75:99:ed:ea:ce:8f:f4:fb:bb:02:ef:79:
39:3d:d2:50:fd:6a:d9:d4:06:04:bb:f7:db:18:54:a8:fb:05:
4d:30:c2:b1:70:b5:d4:67:58:9d:2d:bd:d7:9f:55:25:4a:a6:
06:87:6e:40:d2:d1:a6:c6:68:75:7e:20:ce:2b:c7:61:5e:6b:
08:95:34:76:1c:01:97:8b:5b:08:52:e6:b9:b2:a9:59:7d:6c:
52:f1:45:16:4e:11:5b:19:15:85:37:4d:55:47:37:da:68:c0:
a2:e4:f4:54:8e:01:a2:06:eb:3b:f7:5e:e1:96:66:ea:2d:a7:
e3:e7:25:f0:65:67:70:e5:ce:dc:b4:14:70:d1:87:3b:33:2d:
3f:5a:35:40:59:a1:2a:df:68:8d:f5:37:ef:e9:66:6d:38:ab:
c4:9a:9b:b9:56:84:0b:49:19:f0:23:cf:5f:9d:59:5e:31:b6:
d7:1b:f6:0c:67:4d:8d:81:c0:21:a2:2b:6e:53:32:9b:fc:10:
9f:43:a7:63:b7:a3:e7:e2:a1:64:40:d1:92:b7:d6:a9:6a:12:
c0:8a:5d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:05:56 2026 by rpki-client