Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
File: NGR0ozwFHRcVKyEyLM9P84CLQnA.mft (raw, json)
Hash identifier: 8qCM6CNu6spMM47pRyYWrn0fmXVYGQdYIqil0WzgDC8=
Subject key identifier: F9:45:01:86:99:12:B9:BF:33:A9:47:5C:80:5E:B9:EA:54:B4:F4:95
Authority key identifier: 34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70
Certificate issuer: /CN=346474a33c051d17152b21322ccf4ff3808b4270
Certificate serial: 019DA30A0533601D07BF3E92E4157E52C040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
Manifest number: 07AD
Signing time: Sun 19 Apr 2026 00:00:36 +0000
Manifest this update: Sun 19 Apr 2026 00:00:36 +0000
Manifest next update: Mon 20 Apr 2026 00:00:36 +0000
Files and hashes: 1: IfIVLKxigngabgfVf7hbWkVZKJk.roa (hash: SYIgElzT9Fvi+lNF8/DUi7SqIkbvfGnmGxjms2zRJkk=)
2: NGR0ozwFHRcVKyEyLM9P84CLQnA.crl (hash: c7HIKc6juR7MWfYi3pVfoQYHtdOcoZtyvYCaTcdd5Zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:05:33:60:1d:07:bf:3e:92:e4:15:7e:52:c0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=346474a33c051d17152b21322ccf4ff3808b4270
Validity
Not Before: Apr 19 00:00:36 2026 GMT
Not After : Apr 20 00:00:36 2026 GMT
Subject: CN=f94501869912b9bf33a9475c805eb9ea54b4f495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:13:f0:fc:05:d0:f8:ae:2e:22:20:9c:91:c3:
fe:a1:7f:15:59:51:f2:a8:ef:6e:9a:cc:99:e2:1e:
4b:23:3f:50:19:ad:9c:7a:8a:52:74:b3:0c:9a:e3:
69:34:d0:f7:75:10:51:12:47:64:37:d5:ff:cc:9a:
a7:66:4d:3e:56:86:d3:13:5b:9a:da:93:b4:6f:0c:
ee:47:38:c7:35:2e:b3:11:4a:bd:5d:95:ad:e8:1c:
0d:8f:9d:14:b7:57:7f:96:e8:28:3a:ab:6a:cf:a6:
7a:15:98:f1:1e:f5:79:1d:8d:ad:80:c0:1d:16:fd:
15:bd:e4:c6:95:d6:f1:e9:19:63:47:ca:08:c5:15:
51:4a:22:de:46:f8:78:32:33:bb:eb:ca:f2:4d:6b:
c0:29:d7:ac:10:07:61:ef:80:e9:55:8b:a3:28:6d:
37:c4:82:b8:d7:72:70:ad:86:b5:d9:07:91:25:18:
82:4a:55:e2:d7:46:84:e1:ce:88:e0:48:76:d7:c0:
d0:f4:2c:dd:67:3d:71:e6:61:94:17:33:33:52:b2:
9f:0e:07:34:67:51:82:cc:de:e0:e5:6f:a2:cf:43:
ce:92:22:bf:84:d1:07:06:b0:b3:aa:68:94:86:fb:
95:50:ef:8a:d0:4f:f9:7a:c2:ee:c3:b6:bb:2a:50:
b7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:45:01:86:99:12:B9:BF:33:A9:47:5C:80:5E:B9:EA:54:B4:F4:95
X509v3 Authority Key Identifier:
keyid:34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f1:70:b3:21:d5:c1:7c:d5:be:ce:5b:81:a9:90:27:3e:36:
72:14:f6:64:93:ff:ac:70:21:03:7e:51:8e:93:c0:58:b1:5c:
cc:78:3c:ae:cb:ca:c5:6b:bc:0e:d7:0b:9c:b5:ba:f2:19:51:
74:f1:48:4c:ef:6d:a8:99:98:e1:cd:68:50:b5:69:4d:b0:1e:
d4:62:36:df:03:66:bd:19:db:af:32:f3:76:43:6c:5d:5c:f8:
6b:6d:32:cb:a2:99:f4:6a:d7:24:82:4e:35:2d:6a:6b:02:01:
59:4b:f6:60:29:41:3a:11:b6:ab:17:d8:bd:3b:4b:90:8b:ce:
96:5c:f5:04:fe:bd:16:cf:de:09:a3:4a:be:78:91:b8:69:ca:
28:97:9f:9d:11:b6:6b:c5:db:72:e2:d6:09:d7:15:37:7e:e9:
bd:e3:5e:4f:d2:42:ca:03:cc:3d:75:bb:bf:68:3a:f0:9e:36:
34:8e:53:0e:52:6c:4f:af:f3:93:e7:63:ef:0c:ce:7d:04:e8:
79:19:02:fb:6e:3f:32:61:83:9a:5a:b2:b0:9f:17:fd:65:a7:
81:8e:a8:a6:ab:b8:97:ef:f2:c8:85:57:6a:22:61:34:24:72:
c4:d3:3c:1d:b8:b2:e3:28:e7:ea:92:c8:d4:64:b8:2c:5f:9b:
11:44:31:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:49:03 2026 by rpki-client