Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft
File: ngN01xvFfbltw5PpH-u56dWf75o.mft (raw, json)
Hash identifier: qxhh4dL8IEeXIIQYlsfBrsdmXqKp/e1Pjxsy1zkHFZA=
Subject key identifier: 29:8E:0C:BA:9C:FE:CE:0A:73:9A:16:91:6A:15:40:6F:4D:78:DD:F6
Authority key identifier: 9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A
Certificate issuer: /CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
Certificate serial: 01A0C669EA22BCE8E72C80557747AA6636A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 00:00:24 +0000
Manifest this update: Tue 22 Sep 2026 00:00:24 +0000
Manifest next update: Wed 23 Sep 2026 00:00:24 +0000
Files and hashes: 1: BeJNk9n8DYGbjTquSZbOtIDrziM.roa (hash: Zutqy3F5GANTK963UN96Wios5HRE6QVmB+2x04QKDnI=)
2: RymG3dgu32q1w2cKh-aQrObAOFY.roa (hash: vKDtrprX/YjsvTEOZs6TJziAhjR0Xm4oYJTGdbuLsSY=)
3: S1jpIYU2pdyOm86Ekw65pir3-bY.roa (hash: n376vHxrsIXOyQdU+e+2c3li+uvHApOskctbMarm8Dg=)
4: TYub0TncnmCJgK5YqhcQq6uxFY8.roa (hash: PVSgFXhha0Tttkf2YheReFWR8vkcxo99w+Rpb5iRQR8=)
5: ngN01xvFfbltw5PpH-u56dWf75o.crl (hash: vc0XoVK2uYUhteTSStQOkRcZrAZ1UmldZCgHcmwf78c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:69:ea:22:bc:e8:e7:2c:80:55:77:47:aa:66:36:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
Validity
Not Before: Sep 22 00:00:24 2026 GMT
Not After : Sep 23 00:00:24 2026 GMT
Subject: CN=298e0cba9cfece0a739a16916a15406f4d78ddf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:77:b1:a3:03:0d:ce:db:8d:cd:95:0d:9e:1a:
c1:b8:a9:2b:c2:8b:e0:a9:95:4f:7f:09:dc:fb:1b:
56:18:77:11:52:5f:ba:c3:de:ab:e9:2f:26:89:5d:
6f:db:c7:b7:35:ab:27:38:1e:34:88:cc:e6:3c:8d:
ef:29:9e:a1:20:de:2a:53:7e:37:0e:9e:b0:dc:19:
48:7a:6b:79:fa:f3:1c:dc:af:b4:98:53:9c:5b:1b:
b0:e5:d7:2e:c0:c8:b2:97:65:82:4a:c5:ff:03:af:
aa:be:c0:e0:56:97:b7:bf:db:14:c1:c9:da:57:01:
3e:50:64:f9:0e:17:a0:77:47:17:da:6c:0d:09:99:
86:e5:84:64:75:2e:09:07:14:f5:cf:65:7d:94:a8:
a9:f8:21:58:f0:80:5a:35:2c:9d:30:5c:34:a0:16:
39:ed:9e:aa:cc:52:cb:da:dd:9d:a7:ac:fd:55:d7:
b5:ee:bd:12:e3:07:88:c7:11:93:0c:d8:11:31:23:
87:63:87:72:1b:32:e5:45:78:8f:fa:c2:0f:0b:18:
8e:1d:c7:91:3d:f0:7c:71:20:df:2a:f4:06:f4:a0:
a7:bf:43:4c:2f:c5:5e:ae:3f:f1:78:b4:a0:72:9b:
b1:3c:30:3c:7e:c6:82:b0:83:b1:31:98:5d:b7:af:
34:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8E:0C:BA:9C:FE:CE:0A:73:9A:16:91:6A:15:40:6F:4D:78:DD:F6
X509v3 Authority Key Identifier:
keyid:9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a7:ae:24:c7:a9:5a:51:36:a5:6c:82:2a:3f:9f:49:01:96:
49:eb:83:99:09:38:a4:93:52:17:90:4a:5b:d4:c1:4e:ee:03:
41:60:52:2f:30:d4:85:be:7a:fc:65:e3:e3:29:d4:4f:6d:ce:
61:ec:f0:b7:6b:f5:27:87:f3:14:00:39:bc:3b:df:da:ff:34:
e7:8d:f7:00:b8:e2:fd:6d:c3:63:58:52:10:5c:c7:2f:55:af:
b0:0b:ad:b6:d4:d4:f0:19:4b:75:3a:ae:0a:7e:ef:e5:4b:77:
74:4a:fa:ba:0c:a3:8f:aa:0f:3f:3d:43:d4:24:07:7c:bd:3f:
6a:b6:d3:61:61:bc:97:8e:d6:87:71:8b:40:b2:a8:e2:a9:80:
45:d4:34:42:11:15:f0:50:34:c0:85:ac:90:a9:b3:6c:5d:e0:
5a:fc:37:08:54:94:0f:51:f9:4e:4b:96:90:2e:c6:ca:40:40:
1d:91:10:e1:d0:5f:46:09:af:1e:0c:63:cb:bc:50:84:20:6c:
40:72:b7:66:cf:c4:e8:54:19:df:62:05:b6:f2:58:93:db:de:
a9:e2:1a:66:0d:a3:f6:62:2c:5d:79:b1:ab:0a:a2:75:da:5a:
b4:2b:5c:80:cb:bd:4b:27:eb:a7:3b:16:b2:9d:7f:18:3b:01:
0b:4a:b2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:23:57 2026 by rpki-client