Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
File: NGyrWUu9qbRA_afTl0y9RByY5ck.mft (raw, json)
Hash identifier: CjjJroYYzb4g2NVYe4SdYSCYCVTuaUBM106ZsIOnTXo=
Subject key identifier: 0D:68:A5:3D:28:72:86:56:4D:DB:E0:78:D3:A5:60:B9:6D:D3:8F:60
Authority key identifier: 34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9
Certificate issuer: /CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
Certificate serial: 019CAD22607A94DD660CD6D61D01A661BB62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 06:00:37 +0000
Manifest this update: Mon 02 Mar 2026 06:00:37 +0000
Manifest next update: Tue 03 Mar 2026 06:00:37 +0000
Files and hashes: 1: 2Ii2CAhksIObnY9cdUDA1cuJZdo.roa (hash: ZugaVf2Cp4EBmlxQ0H1edkLbTqWn+CzcKcFRvVcmckM=)
2: NGyrWUu9qbRA_afTl0y9RByY5ck.crl (hash: ogyZdYx+FDrYIMPXW6Dw1bvL2H10GDXgUv2Q5MY8ig0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:60:7a:94:dd:66:0c:d6:d6:1d:01:a6:61:bb:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
Validity
Not Before: Mar 2 06:00:37 2026 GMT
Not After : Mar 3 06:00:37 2026 GMT
Subject: CN=0d68a53d287286564ddbe078d3a560b96dd38f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:51:29:91:97:c5:2d:cf:e1:c7:a4:33:bd:4a:
84:2e:82:1e:28:8f:46:0e:d5:65:c5:91:58:44:0e:
e6:28:23:87:86:a6:66:1a:9b:44:16:84:98:d2:b0:
04:c2:a0:0c:7f:71:3b:58:1d:77:f4:66:4f:9f:ce:
88:5d:ae:03:ba:ac:9c:93:b8:a3:c9:e8:ac:bf:e3:
cc:1e:24:b0:0e:41:f1:c8:e2:05:3b:89:a1:c1:58:
00:a6:9a:d6:3d:c9:63:f6:9d:0c:9f:7d:e7:99:d1:
53:1b:ce:bf:c9:cb:7d:8f:0a:84:4b:ef:dd:99:04:
41:7e:8c:7f:bb:cc:a5:09:c6:35:65:f8:34:05:59:
00:0d:80:9f:cc:63:49:05:b6:59:bb:60:1b:d4:23:
95:2a:17:7d:a2:42:40:b0:e7:84:5a:1a:23:04:ab:
c5:02:46:15:4c:ba:9d:24:01:97:4d:ae:d0:55:db:
9e:56:69:f6:91:89:75:83:89:1f:34:dc:1f:7f:a7:
c5:a6:cc:83:df:17:6a:97:d2:ec:3a:31:47:54:f3:
47:53:16:74:29:a0:c6:b3:f5:56:5d:ad:42:25:ed:
f8:0d:ee:1b:70:dd:31:dc:16:fd:73:ff:d2:78:14:
7f:93:d3:a4:94:bf:54:8a:de:46:03:bc:08:80:d1:
e7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:68:A5:3D:28:72:86:56:4D:DB:E0:78:D3:A5:60:B9:6D:D3:8F:60
X509v3 Authority Key Identifier:
keyid:34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a4:28:8a:90:2b:cf:9a:14:ac:33:13:b8:35:03:f4:23:30:
cd:f9:7f:c2:6f:56:30:f3:73:2e:59:a1:bc:95:47:c3:9a:23:
1d:3b:bc:f6:88:f7:6a:d5:1a:8e:1d:80:79:c1:e1:38:98:1a:
fa:a6:5f:11:51:80:99:b2:01:20:1b:08:47:da:c1:72:b1:30:
cd:ff:00:ff:9e:ab:51:68:74:91:5f:31:02:88:1c:c9:48:2a:
1a:2a:e3:3a:25:ba:dd:f6:38:a3:37:81:a2:3e:be:16:f3:ab:
27:14:61:9e:45:38:22:24:6a:15:fb:a9:59:4e:9f:5c:70:b9:
a5:9a:8d:a4:fd:d9:70:3c:65:30:d8:47:5c:d9:c8:e2:d4:60:
f3:c8:b5:0f:fe:f9:67:5b:b4:b4:21:80:67:8f:ed:b2:38:fa:
c9:10:14:ee:c3:a3:27:88:eb:1f:d5:c6:70:40:9d:8e:f2:29:
a4:2f:f1:b5:01:a4:a6:7a:33:9e:91:dd:ff:5b:73:6f:92:5e:
cf:76:5a:78:9f:8b:f5:c6:95:fc:ae:6f:e2:38:0a:c1:99:47:
11:03:b1:9b:2e:75:11:f8:91:02:ee:fb:6c:c3:3a:ed:9f:9a:
44:1e:e1:52:60:99:1b:a6:fe:e9:c5:00:1b:0b:04:62:75:4f:
e9:21:ae:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytImB6lN1mDNbWHQGmYbtiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NmNhYjU5NGJiZGE5YjQ0MGZkYTdkMzk3NGNiZDQ0MWM5
OGU1YzkwHhcNMjYwMzAyMDYwMDM3WhcNMjYwMzAzMDYwMDM3WjAzMTEwLwYDVQQD
EygwZDY4YTUzZDI4NzI4NjU2NGRkYmUwNzhkM2E1NjBiOTZkZDM4ZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFEpkZfFLc/hx6QzvUqELoIeKI9G
DtVlxZFYRA7mKCOHhqZmGptEFoSY0rAEwqAMf3E7WB139GZPn86IXa4Duqyck7ij
yeisv+PMHiSwDkHxyOIFO4mhwVgApprWPclj9p0Mn33nmdFTG86/yct9jwqES+/d
mQRBfox/u8ylCcY1Zfg0BVkADYCfzGNJBbZZu2Ab1COVKhd9okJAsOeEWhojBKvF
AkYVTLqdJAGXTa7QVdueVmn2kYl1g4kfNNwff6fFpsyD3xdql9LsOjFHVPNHUxZ0
KaDGs/VWXa1CJe34De4bcN0x3Bb9c//SeBR/k9OklL9Uit5GA7wIgNHnEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1opT0ocoZWTdvgeNOlYLlt049gMB8GA1UdIwQY
MBaAFDRsq1lLvam0QP2n05dMvUQcmOXJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkd5cldVdTlxYlJBX2FmVGwweTlSQnlZNWNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy85ZWY2NmQtMmQ1Zi00OWQ4LTkwNGMt
N2ExM2E1ZWZhZjVlLzEvTkd5cldVdTlxYlJBX2FmVGwweTlSQnlZNWNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy85ZWY2NmQtMmQ1Zi00OWQ4LTkwNGMtN2ExM2E1ZWZhZjVl
LzEvTkd5cldVdTlxYlJBX2FmVGwweTlSQnlZNWNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARKQoipAr
z5oUrDMTuDUD9CMwzfl/wm9WMPNzLlmhvJVHw5ojHTu89oj3atUajh2AecHhOJga
+qZfEVGAmbIBIBsIR9rBcrEwzf8A/56rUWh0kV8xAogcyUgqGirjOiW63fY4ozeB
oj6+FvOrJxRhnkU4IiRqFfupWU6fXHC5pZqNpP3ZcDxlMNhHXNnI4tRg88i1D/75
Z1u0tCGAZ4/tsjj6yRAU7sOjJ4jrH9XGcECdjvIppC/xtQGkpnoznpHd/1tzb5Je
z3ZaeJ+L9caV/K5v4jgKwZlHEQOxmy51EfiRAu77bMM67Z+aRB7hUmCZG6b+6cUA
GwsEYnVP6SGu1w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:32 2026 by rpki-client