Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
File: NGR0ozwFHRcVKyEyLM9P84CLQnA.mft (raw, json)
Hash identifier: 7N8F5gOR3ywBZyARZI+2Dq+Kq3ok+KWNrJbVG/3vim8=
Subject key identifier: 99:F5:F3:A8:E1:A0:6A:50:36:1C:1D:3F:02:E5:01:69:C2:DA:61:C2
Authority key identifier: 34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70
Certificate issuer: /CN=346474a33c051d17152b21322ccf4ff3808b4270
Certificate serial: 019CABD97D9DB79E1A8500937F93AB63093B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
Manifest number: 072D
Signing time: Mon 02 Mar 2026 00:01:23 +0000
Manifest this update: Mon 02 Mar 2026 00:01:23 +0000
Manifest next update: Tue 03 Mar 2026 00:01:23 +0000
Files and hashes: 1: IfIVLKxigngabgfVf7hbWkVZKJk.roa (hash: SYIgElzT9Fvi+lNF8/DUi7SqIkbvfGnmGxjms2zRJkk=)
2: NGR0ozwFHRcVKyEyLM9P84CLQnA.crl (hash: 3Qx240wC9bb76HpOYVWr2gHZYitRA9JtU7DixuhxYHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:7d:9d:b7:9e:1a:85:00:93:7f:93:ab:63:09:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=346474a33c051d17152b21322ccf4ff3808b4270
Validity
Not Before: Mar 2 00:01:23 2026 GMT
Not After : Mar 3 00:01:23 2026 GMT
Subject: CN=99f5f3a8e1a06a50361c1d3f02e50169c2da61c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fa:e9:38:ef:0c:ec:d9:94:5e:68:e2:66:53:
6d:e7:af:fa:46:06:be:8c:f3:fe:c8:5a:da:8a:b2:
cc:de:59:48:01:22:32:a1:0a:16:53:96:9a:cd:1a:
2d:14:e6:f9:e5:ff:e4:61:fb:c5:d8:2b:21:c1:51:
9a:c6:82:1b:97:17:6b:57:0d:e4:83:b8:50:28:b2:
cf:63:91:31:a5:45:6a:f5:c7:cd:dc:3e:48:06:7b:
db:aa:f5:38:3e:2d:53:81:32:7c:34:b3:f1:9c:da:
8c:ca:c7:ed:67:ce:59:82:06:fa:98:cd:50:0f:1b:
1b:0c:93:32:90:15:f3:5c:c4:20:15:c1:43:d2:e5:
34:c6:9c:5d:46:d0:70:be:fb:7b:ce:6f:bd:84:f0:
74:55:e0:05:00:6a:78:6b:b8:42:74:fc:34:13:ab:
fb:2b:1c:3f:e6:c0:47:ec:6b:46:f2:af:da:1a:c3:
2b:f4:30:b4:cb:60:9c:ef:8e:85:75:4c:8f:aa:27:
64:ec:b6:f7:45:e0:82:04:a2:a2:04:52:22:76:b4:
0d:8d:d2:5f:72:2e:99:0f:8e:5d:d2:8b:bc:12:97:
16:74:59:8e:98:1b:a9:f0:21:62:a9:3c:49:60:e0:
d7:5a:a2:33:6f:7d:96:b0:62:05:83:64:e5:fd:23:
f5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F5:F3:A8:E1:A0:6A:50:36:1C:1D:3F:02:E5:01:69:C2:DA:61:C2
X509v3 Authority Key Identifier:
keyid:34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f9:a3:aa:0d:cc:45:e3:c0:c9:31:d8:8b:f7:91:51:ef:25:
f4:02:4c:8c:e7:47:1a:21:42:64:9d:de:f0:44:b4:7c:2d:ed:
90:07:c3:57:53:ac:9e:00:e3:72:5e:97:bf:13:b0:e8:7f:b3:
e0:c1:af:01:ad:44:8a:cc:66:29:fb:73:57:bb:13:a2:f7:f4:
2a:f4:85:83:5a:78:92:54:24:cb:46:cb:c8:1c:66:c8:a0:f7:
d4:d0:b5:f5:f8:9e:d1:dd:47:bf:e8:f7:08:86:93:4a:37:3b:
e2:b9:f0:ab:ce:3c:d9:0d:b7:bc:b6:1c:29:a7:6a:e4:63:8f:
c1:1c:bb:94:30:2f:f9:aa:c6:46:90:40:6c:70:fb:c6:54:78:
99:a3:ae:d9:be:23:7c:ff:c9:04:bf:cb:ca:ee:01:f6:53:a0:
27:a1:fd:da:e3:9d:93:5f:10:0a:a7:ae:70:a3:0e:9d:c8:4a:
c6:20:49:6d:a1:58:22:7b:b6:83:1b:fa:74:70:41:6c:6e:0c:
17:a5:ac:df:3c:38:f4:18:0f:f9:b3:5e:52:6e:0f:d9:8d:57:
11:cd:43:5d:dc:2f:37:06:43:93:64:c9:3e:fa:1b:da:da:e5:
55:82:1b:d8:7e:dc:5a:77:41:fd:43:74:48:cc:f3:c6:93:af:
86:e8:ac:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:35 2026 by rpki-client