Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
File: NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft (raw, json)
Hash identifier: 8BL0s3a+K2qod6nU8hNGnAEyi1aQEL8BtYuu2kOJyzI=
Subject key identifier: A1:C6:07:C9:3C:64:C4:E7:19:96:B2:20:EC:92:84:B1:96:76:94:71
Authority key identifier: 36:0C:59:35:E5:1F:E7:06:C2:44:75:19:D9:B5:F9:5A:E3:63:C1:86
Certificate issuer: /CN=360c5935e51fe706c2447519d9b5f95ae363c186
Certificate serial: 019CAC468BAA5B5C103D0942B646511BD049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
Manifest number: 13F4
Signing time: Mon 02 Mar 2026 02:00:30 +0000
Manifest this update: Mon 02 Mar 2026 02:00:30 +0000
Manifest next update: Tue 03 Mar 2026 02:00:30 +0000
Files and hashes: 1: JEZzvSEhk9Rpppc7_JlZ8YDdHPU.roa (hash: 4z0GMSU1lSLpdGVWcEmJSBzIO5NLCUQwZ5krieoKIEM=)
2: NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl (hash: EJRkkn8CWnj17HHNl6xQpxfybA+tAtgUA2moQ+c106k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:8b:aa:5b:5c:10:3d:09:42:b6:46:51:1b:d0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360c5935e51fe706c2447519d9b5f95ae363c186
Validity
Not Before: Mar 2 02:00:30 2026 GMT
Not After : Mar 3 02:00:30 2026 GMT
Subject: CN=a1c607c93c64c4e71996b220ec9284b196769471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c8:b2:b6:fd:ad:f2:13:e4:79:72:39:67:28:
b6:b0:16:5f:21:93:e8:1d:2c:06:9f:2b:70:88:22:
5f:73:b9:9c:b9:2e:93:2d:9a:4c:71:8e:b1:9c:ea:
20:f8:ab:f9:01:77:ba:2f:3e:72:9c:f0:30:d5:80:
1e:20:2d:7f:cc:2a:e3:1a:f9:c9:3d:8a:81:ae:ef:
0a:fc:59:2d:67:bd:5a:3f:b0:e4:63:7e:bb:06:59:
4f:d7:52:07:bd:b1:19:f2:b0:4c:58:bb:99:85:d8:
23:a6:81:2c:48:21:7e:3b:03:96:a2:48:b5:e9:1e:
86:b6:5c:01:6f:8c:a4:a7:4a:9b:d3:83:be:a2:48:
21:2a:47:1e:12:15:5a:c6:25:e8:2c:1c:90:76:10:
08:2a:f0:a2:59:40:12:21:bc:b4:ea:d5:3e:59:11:
2b:1c:70:c7:6f:d3:01:05:29:fa:d2:c4:39:ec:46:
db:5a:e3:a5:99:5b:11:99:60:08:50:27:40:2e:22:
6b:e3:db:ce:24:10:bd:2c:9f:94:6d:6a:94:fb:ac:
d9:c5:03:71:f8:cd:99:09:d6:82:09:27:17:46:a9:
16:02:da:b8:29:aa:37:c9:e6:3a:ce:45:32:ba:e9:
b6:2b:ea:eb:84:5f:be:f8:be:7b:bf:19:cd:f0:38:
6b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C6:07:C9:3C:64:C4:E7:19:96:B2:20:EC:92:84:B1:96:76:94:71
X509v3 Authority Key Identifier:
keyid:36:0C:59:35:E5:1F:E7:06:C2:44:75:19:D9:B5:F9:5A:E3:63:C1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:67:df:d4:9c:52:99:9f:82:72:1e:04:cf:74:83:e2:25:fc:
f3:52:5e:41:74:90:0e:87:74:26:bd:3e:73:22:24:3d:ea:0d:
66:38:e0:cd:fd:ca:87:99:c0:eb:62:d0:12:6f:d0:36:59:16:
9f:b8:f0:c7:3b:51:d6:d3:2a:2d:cd:c4:0b:45:70:77:03:fc:
15:0a:37:c5:11:b5:4b:83:d1:3b:bc:ed:37:e8:03:03:2f:3c:
f6:d3:b9:17:9f:d4:b3:3e:4f:cf:22:40:87:0b:e7:a0:0c:c4:
70:a6:0a:32:7b:dc:7d:77:25:e8:4f:2b:ed:ad:bb:9b:d8:f0:
1e:56:bd:15:98:6c:4c:57:00:64:a3:81:2c:27:87:10:73:2a:
a8:68:f1:b7:85:fd:64:0f:ac:c7:32:08:d6:dc:e4:f7:07:4c:
ae:b7:6e:f9:eb:7c:b1:63:4b:91:f8:2c:b0:30:20:30:7a:6f:
77:20:15:c8:01:72:0b:cc:0d:2a:43:7a:85:70:ba:b6:96:75:
31:0e:ea:53:f7:a4:2f:de:44:fa:aa:48:78:34:c6:34:48:6a:
b7:02:6a:5b:9b:34:f8:56:55:af:73:ae:b0:db:be:8e:41:b0:
25:1f:bc:57:eb:d3:79:0c:95:bd:06:02:c9:43:d2:1c:66:37:
99:05:65:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:24:12 2026 by rpki-client