Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
File: NgqdJtuz6l36roO2GQit2Pxt028.mft (raw, json)
Hash identifier: ZQGyaP2BrgK2vmV5QKhQB+Fzt4fpS9O119QaEPM4/H0=
Subject key identifier: E0:33:60:71:50:9F:8E:8B:C6:BB:5D:07:2E:31:47:8D:9F:7C:1D:2C
Authority key identifier: 36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F
Certificate issuer: /CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
Certificate serial: 019CAB340BE1734758EF84B46806AE21A93C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 21:00:40 +0000
Manifest this update: Sun 01 Mar 2026 21:00:40 +0000
Manifest next update: Mon 02 Mar 2026 21:00:40 +0000
Files and hashes: 1: NgqdJtuz6l36roO2GQit2Pxt028.crl (hash: 286PNR8aJmUU839NRQppsUWejKj6Acd+6Y/UEXSX/NE=)
2: pl6PNo8hUrBCcmdPr6uyLCgo9LE.roa (hash: JUhZmiTLChpqRA0MSl5whEAJwGew2IlHkB2zV8iZ9V4=)
3: sg3Ew_-j8eSBsSEqujV82pVTpmY.roa (hash: u5sONjGdKQ7+lq8JPUBVxgSwpY1PR0uLjyPXqaXUKG4=)
4: teABFGsGVj_scwJjrE3mhP8dVpQ.roa (hash: 2hJ5yRJDHs67/jo71c3Tu7rhezA7dGIjE7rutPTVstE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:0b:e1:73:47:58:ef:84:b4:68:06:ae:21:a9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
Validity
Not Before: Mar 1 21:00:40 2026 GMT
Not After : Mar 2 21:00:40 2026 GMT
Subject: CN=e0336071509f8e8bc6bb5d072e31478d9f7c1d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:af:37:b9:93:2a:5c:54:8d:46:80:d5:23:44:
74:38:84:10:d7:9c:78:6b:81:e1:f8:b0:7e:de:60:
73:82:c0:13:05:68:d8:95:b4:c6:17:06:9e:d5:d1:
1f:06:83:2a:53:23:b7:8a:22:c3:46:8c:1d:2e:68:
81:f7:23:6a:58:5c:8d:df:0e:0f:9c:8a:42:a3:f9:
da:37:8b:22:13:43:b7:09:b2:54:d0:60:ae:1f:04:
4f:d2:ae:58:1e:cf:20:52:1a:13:a8:7c:b2:d9:f2:
dd:3f:e1:a7:52:ac:53:68:a5:71:13:44:cd:13:cb:
3b:45:d5:1c:3b:dc:18:8a:01:7d:67:ad:bb:b9:a5:
e3:cb:0e:7d:d2:fc:77:32:62:c4:8c:f2:48:09:83:
a0:33:91:51:0e:1e:97:62:b6:b4:bd:af:48:e8:67:
9e:0d:f9:dd:5b:f5:39:44:28:68:e8:bb:3e:f2:1d:
84:6c:dd:eb:2a:ff:1d:6c:58:e1:0e:68:09:61:53:
44:d1:6f:39:0b:89:e3:10:9d:0a:55:4e:17:13:e1:
58:be:45:35:0b:90:b4:31:e9:ad:6c:5b:12:6f:35:
aa:40:57:72:99:de:80:42:e7:92:8b:3d:17:24:a9:
23:b7:7c:61:23:5b:d2:c3:3b:df:74:b1:e0:c7:4b:
1f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:33:60:71:50:9F:8E:8B:C6:BB:5D:07:2E:31:47:8D:9F:7C:1D:2C
X509v3 Authority Key Identifier:
keyid:36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:df:51:81:0c:37:e0:a5:40:76:4b:19:6b:a8:af:cf:61:a5:
96:a1:94:2b:7b:33:f9:79:a1:5b:5c:6a:7d:35:4e:55:6e:fb:
f3:35:83:42:c6:3b:ac:57:db:17:84:11:73:f9:45:4c:0e:94:
ca:36:a3:34:71:3a:54:de:b6:75:08:02:64:f4:dc:0b:9d:e4:
ec:f8:48:3f:dd:47:e7:fa:83:73:69:7f:bf:d6:8a:13:a1:e4:
78:40:89:ea:ad:f5:40:17:53:4e:9d:a7:1d:39:49:d2:93:ff:
0e:12:32:d4:c8:fb:a8:c5:eb:c0:08:14:6f:62:09:4d:e9:e2:
01:f0:75:84:f5:1f:74:fd:27:a7:dc:42:12:5f:b7:e7:fd:1e:
fa:68:71:77:23:c6:f0:b0:9e:6b:63:de:24:e7:d2:1b:34:05:
a8:42:70:bb:0c:31:e4:b8:f2:2c:d2:4a:f1:30:f9:5a:47:d2:
ba:43:e4:43:f1:93:bc:76:55:ae:74:62:ce:15:00:78:6c:ea:
84:d8:9d:b9:a6:25:a3:c9:af:d8:83:58:35:ff:de:d4:f0:d9:
f5:06:3a:fa:68:47:3f:27:66:ed:66:30:d5:a3:cc:65:35:f0:
99:e7:ee:5e:04:09:a4:9c:62:bc:38:0a:62:44:d0:54:a6:40:
d5:41:ff:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:48:12 2026 by rpki-client