Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
File: nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft (raw, json)
Hash identifier: d1N0n3yDPBhEtNS43TNrUF6mGypDZ3ddum29h3qRJpM=
Subject key identifier: C8:2E:23:8A:14:C3:A8:C8:D1:DF:39:F3:55:53:C1:3C:1F:17:7F:29
Authority key identifier: 9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
Certificate issuer: /CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Certificate serial: 019D992B9DF8C69346630763D08BF5082CAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
Manifest number: 0988
Signing time: Fri 17 Apr 2026 02:01:05 +0000
Manifest this update: Fri 17 Apr 2026 02:01:05 +0000
Manifest next update: Sat 18 Apr 2026 02:01:05 +0000
Files and hashes: 1: nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl (hash: PgORPeC2nuT9uar0xQ9GwbMwiYVw788FlWLOMYBTp7g=)
2: zaw-l3nyUygb03TlyeeZ5uNtuxc.roa (hash: vbvudETvvHbmCpQdctUZ1OuuVkp6d4krvgnH2TdlDSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:9d:f8:c6:93:46:63:07:63:d0:8b:f5:08:2c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Validity
Not Before: Apr 17 02:01:05 2026 GMT
Not After : Apr 18 02:01:05 2026 GMT
Subject: CN=c82e238a14c3a8c8d1df39f35553c13c1f177f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:33:a2:15:64:21:ea:01:f7:f3:43:e8:2a:d6:
60:03:73:19:62:e2:04:54:07:ef:7f:84:aa:2f:48:
7b:b6:37:0b:c5:bf:3d:02:42:90:df:1a:bd:db:bd:
03:e4:91:5a:8a:23:6b:dc:13:ed:4e:fc:3f:74:46:
59:5e:0b:32:e0:dc:f5:b7:42:d7:34:20:db:0a:b5:
22:61:3d:1f:1c:1f:40:82:e0:1e:78:cf:8b:48:d5:
a4:cc:eb:ef:ac:77:0e:d7:df:3b:a4:0f:94:86:bb:
39:c7:31:13:79:37:fc:63:8b:a4:b1:fc:fd:34:1c:
39:5b:74:15:ce:ec:10:30:20:ca:50:e4:1b:cf:b9:
93:ff:8d:26:91:04:c7:bf:9c:71:6c:d4:71:1f:58:
6f:a7:dd:4f:57:58:f8:a6:2d:e9:3b:b7:a1:14:15:
93:94:f2:fc:95:9b:4f:fd:58:df:26:df:ff:e9:a0:
04:16:87:14:ae:e2:e2:fd:de:ba:15:ad:76:55:01:
69:0b:ce:c8:5e:20:82:0d:fd:54:ba:1f:bc:fb:8a:
68:c5:0d:72:1f:0f:f9:c6:e1:fd:80:b2:14:71:78:
7c:2b:e1:ed:bd:78:d2:f1:b1:3b:8b:e8:30:e1:e9:
8f:46:70:c5:d5:c0:e9:f5:79:8e:e0:23:5f:2e:6e:
ec:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2E:23:8A:14:C3:A8:C8:D1:DF:39:F3:55:53:C1:3C:1F:17:7F:29
X509v3 Authority Key Identifier:
keyid:9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:81:64:cc:28:b0:24:cb:e9:53:72:5e:03:35:2a:7c:21:3d:
cf:6e:25:79:a2:37:ac:80:db:b3:78:23:27:d9:d4:7b:df:04:
91:e6:1d:31:f5:0e:1e:51:9f:f7:21:57:17:cf:c6:74:65:6d:
76:ac:32:9f:ed:d8:64:c4:c9:a2:0f:08:02:77:7a:da:f9:08:
24:5b:69:d2:4e:8f:fd:9d:41:69:31:61:6a:0d:57:b1:c7:5a:
a6:01:a0:dc:bc:ba:6d:72:5a:92:43:da:ee:8d:9a:81:5e:64:
f9:55:26:65:5b:ed:a0:9b:f4:0e:13:8c:35:83:d7:ad:0c:1c:
ca:a1:8e:d7:59:d7:bf:9d:59:a9:1a:35:77:70:f8:22:d8:bd:
a2:c4:e1:e6:c3:1e:16:c6:77:6c:da:0e:6c:3d:3c:9e:62:f1:
b8:21:bb:25:9a:ab:55:fc:6c:82:d9:ed:9d:a8:f8:6e:66:84:
c2:22:25:2a:b5:64:14:cd:3c:fb:f2:fd:63:dc:37:1e:60:a1:
2d:51:36:39:ea:19:77:da:3b:28:66:78:0d:c7:43:fe:32:d5:
e7:7e:ff:5c:d1:eb:ec:e5:a3:ac:5a:7f:36:52:9b:9f:c3:75:
66:b2:27:03:95:52:13:11:ab:74:c3:b4:ec:39:49:64:b8:7a:
fd:64:a8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:20 2026 by rpki-client