Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
File: ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft (raw, json)
Hash identifier: zceEXXwKcKFhcj813xPe7THe0xPandafZOJ5+qHYxyA=
Subject key identifier: 53:1C:91:A1:07:6C:35:FB:5E:44:05:DA:64:4D:1A:07:89:E0:B7:31
Authority key identifier: 9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE
Certificate issuer: /CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
Certificate serial: 019CAAC700F35D0D46EC248780EF8C6D57A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
Manifest number: 148C
Signing time: Sun 01 Mar 2026 19:01:34 +0000
Manifest this update: Sun 01 Mar 2026 19:01:34 +0000
Manifest next update: Mon 02 Mar 2026 19:01:34 +0000
Files and hashes: 1: 0SFsSDHYS4Gp8mYI62oKwdXXyJo.roa (hash: WkJ2KNUQsuLO69HUCr/UO91pQlE2mJKqwGtnWIGMWy4=)
2: ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl (hash: dQhRhSe1LBNbm6VRaXZPDFm4fgH7PVbKuIwxdWp/QTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:00:f3:5d:0d:46:ec:24:87:80:ef:8c:6d:57:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
Validity
Not Before: Mar 1 19:01:34 2026 GMT
Not After : Mar 2 19:01:34 2026 GMT
Subject: CN=531c91a1076c35fb5e4405da644d1a0789e0b731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:24:c7:09:2a:5f:85:c2:99:8a:8b:bb:7c:c9:
7e:22:27:7a:19:fa:db:58:0f:4e:57:3e:0a:9a:26:
c4:50:1a:85:e9:bb:01:63:27:a4:9f:3d:05:1d:2c:
d3:ef:e2:9c:cd:35:40:2d:fd:ed:64:1b:45:a1:82:
2a:6d:21:e3:d5:65:80:ef:f9:88:e6:a9:51:6e:e9:
5f:63:9a:6f:01:98:d4:b6:5d:8c:5c:a4:c6:3a:4e:
f8:c3:3f:4f:49:e9:92:37:f8:26:65:65:33:53:05:
ef:22:3e:ff:4b:f7:48:b3:31:88:cb:4d:01:3a:96:
3d:d2:63:fe:5a:56:8b:ab:df:8f:b4:c1:fc:0a:ac:
45:48:5f:d4:8c:0c:dc:7f:10:45:15:e6:17:0c:95:
15:2a:0d:89:93:1a:e5:6a:38:e4:c9:b4:aa:3a:12:
91:0b:f0:c7:7e:bd:b0:8c:59:e7:4a:63:62:fa:2d:
e4:f6:06:d0:4a:8d:50:85:91:a1:8e:ce:df:e9:4f:
b9:cc:d2:10:08:0d:35:da:67:f7:5e:e2:86:fb:ad:
20:f5:13:fa:2b:f2:95:a3:f5:12:8e:2c:8e:b1:d6:
ee:d6:a2:83:e6:55:fa:01:8c:e9:1e:95:e5:ce:57:
24:0f:83:28:25:b2:bb:72:52:ac:e4:56:a1:bd:60:
a5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1C:91:A1:07:6C:35:FB:5E:44:05:DA:64:4D:1A:07:89:E0:B7:31
X509v3 Authority Key Identifier:
keyid:9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b6:92:6f:b0:14:f3:e0:40:b0:a4:39:be:30:6c:5c:fe:75:
33:ff:f6:30:2a:10:b8:ad:49:ae:0f:a1:5c:d1:70:d0:1e:41:
d3:92:3b:66:72:d0:f7:a6:17:3c:ad:a9:88:cd:f5:96:c4:59:
30:d4:61:8c:b7:32:17:d7:93:bd:68:bd:79:c8:6e:a2:50:5e:
12:82:77:0d:b8:6d:6d:94:2e:b1:e6:c9:9d:c1:b6:1b:70:a5:
2d:e6:f1:0b:49:76:14:0d:e7:a0:c7:0b:80:4c:54:44:03:5f:
58:58:ee:55:a6:1c:ea:47:da:7f:07:bf:95:2e:aa:4b:f4:67:
64:aa:2a:65:3d:21:84:26:7f:8d:cd:41:4e:74:2c:01:8b:b6:
5b:3a:b4:1c:b9:be:0f:6d:e8:1e:b1:b3:97:31:cf:11:20:10:
31:3e:3d:c4:9d:9b:cb:e3:1d:e1:93:2f:c0:df:ef:98:7d:45:
d8:f5:92:3e:71:1f:2d:46:1d:a6:20:7d:55:2f:72:01:2c:c1:
67:d0:5a:91:09:bf:1c:64:bf:0c:ce:b0:d7:32:29:a9:1e:12:
c3:64:06:c8:8f:2f:4a:d1:28:db:6b:42:f9:cb:98:3a:67:1e:
05:19:0d:bf:48:1b:a3:5c:d8:4e:fa:68:c4:fa:07:b0:33:1a:
37:eb:72:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxwDzXQ1G7CSHgO+MbVekMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMGE1MmZlZTIyODBkNmYyMzFiYjZhMjYyMjZlNjUzNTE3
MGYxZmUwHhcNMjYwMzAxMTkwMTM0WhcNMjYwMzAyMTkwMTM0WjAzMTEwLwYDVQQD
Eyg1MzFjOTFhMTA3NmMzNWZiNWU0NDA1ZGE2NDRkMWEwNzg5ZTBiNzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CTHCSpfhcKZiou7fMl+Iid6Gfrb
WA9OVz4KmibEUBqF6bsBYyeknz0FHSzT7+KczTVALf3tZBtFoYIqbSHj1WWA7/mI
5qlRbulfY5pvAZjUtl2MXKTGOk74wz9PSemSN/gmZWUzUwXvIj7/S/dIszGIy00B
OpY90mP+WlaLq9+PtMH8CqxFSF/UjAzcfxBFFeYXDJUVKg2JkxrlajjkybSqOhKR
C/DHfr2wjFnnSmNi+i3k9gbQSo1QhZGhjs7f6U+5zNIQCA012mf3XuKG+60g9RP6
K/KVo/USjiyOsdbu1qKD5lX6AYzpHpXlzlckD4MoJbK7clKs5FahvWClWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMckaEHbDX7XkQF2mRNGgeJ4LcxMB8GA1UdIwQY
MBaAFJ4KUv7iKA1vIxu2omIm5lNRcPH+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmdwU191SW9EVzhqRzdhaVlpYm1VMUZ3OGY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80N2QyMWMtNjA0Yi00N2Q4LWEzMzMt
NzA4YjY4Yzg1NmNmLzEvbmdwU191SW9EVzhqRzdhaVlpYm1VMUZ3OGY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80N2QyMWMtNjA0Yi00N2Q4LWEzMzMtNzA4YjY4Yzg1NmNm
LzEvbmdwU191SW9EVzhqRzdhaVlpYm1VMUZ3OGY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU7aSb7AU
8+BAsKQ5vjBsXP51M//2MCoQuK1Jrg+hXNFw0B5B05I7ZnLQ96YXPK2piM31lsRZ
MNRhjLcyF9eTvWi9echuolBeEoJ3DbhtbZQusebJncG2G3ClLebxC0l2FA3noMcL
gExURANfWFjuVaYc6kfafwe/lS6qS/RnZKoqZT0hhCZ/jc1BTnQsAYu2Wzq0HLm+
D23oHrGzlzHPESAQMT49xJ2by+Md4ZMvwN/vmH1F2PWSPnEfLUYdpiB9VS9yASzB
Z9BakQm/HGS/DM6w1zIpqR4Sw2QGyI8vStEo22tC+cuYOmceBRkNv0gbo1zYTvpo
xPoHsDMaN+tyMQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:13:55 2026 by rpki-client