Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
File: ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft (raw, json)
Hash identifier: lDArkRhvFoPhgRSEKl7X+OXtncZjFnVrphAGUikapEY=
Subject key identifier: 17:A0:44:C2:C6:67:72:F4:29:F4:67:65:F0:EB:94:E0:88:75:66:A8
Authority key identifier: 9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
Certificate issuer: /CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Certificate serial: 019A4F6236C62CD6D93855B412E5D2F57988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
Manifest number: 13AD
Signing time: Tue 04 Nov 2025 15:00:27 +0000
Manifest this update: Tue 04 Nov 2025 15:00:27 +0000
Manifest next update: Wed 05 Nov 2025 15:00:27 +0000
Files and hashes: 1: b9QaepP0oxMTo3a9H8MxgSOF6ZM.roa (hash: 1vtB6IOZEJek+700nGKVkQQxvbkoR7RDVA9c6BbAbEM=)
2: ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl (hash: 8eR1hHt8uN6t6lR0D++bnqnaPICfFkRCUpQ/NNhqoiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:36:c6:2c:d6:d9:38:55:b4:12:e5:d2:f5:79:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Validity
Not Before: Nov 4 15:00:27 2025 GMT
Not After : Nov 5 15:00:27 2025 GMT
Subject: CN=17a044c2c66772f429f46765f0eb94e0887566a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f2:8e:9a:4d:0c:fb:fd:f1:08:38:45:e7:02:
f5:0f:ac:33:03:3d:89:e0:b5:c9:cc:24:68:c9:44:
d9:bb:61:7e:31:d3:3a:3d:20:3b:56:7a:9f:ef:de:
0a:6b:89:07:83:13:b4:89:08:9b:04:57:f6:6a:85:
7f:a0:cd:33:c5:b5:6d:73:05:b6:64:31:92:ff:f9:
d4:29:d7:ae:33:d7:84:9d:ad:ad:6b:7f:b4:ca:7c:
d3:be:59:2f:3c:f9:24:30:2b:3b:bf:ad:0c:ce:b5:
0a:54:5a:62:9a:86:b6:e4:f7:97:0b:37:9d:ce:ab:
df:4a:36:3d:f4:46:f9:34:a5:08:35:f1:53:21:74:
0a:f5:86:3f:7b:0f:88:2b:2a:b9:6f:bb:0b:38:8d:
6b:a0:ff:bd:e1:35:28:c0:9a:12:f4:d5:b3:d9:c4:
a4:69:fe:88:07:17:87:61:c1:15:77:96:f4:c9:53:
7a:d1:76:83:14:99:5d:d8:07:95:b7:ed:da:ca:10:
db:5d:2f:fa:c1:2c:f6:99:76:f4:f6:9f:6e:72:cb:
fe:f3:37:c5:26:cc:85:bf:48:cc:75:24:bf:1f:84:
1d:1f:f6:e7:e0:44:65:0b:c2:cf:91:c2:81:4d:8f:
4b:41:1c:3c:94:f6:ca:04:45:96:f0:68:23:bf:30:
88:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A0:44:C2:C6:67:72:F4:29:F4:67:65:F0:EB:94:E0:88:75:66:A8
X509v3 Authority Key Identifier:
keyid:9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:2e:52:e1:ad:25:29:ec:44:14:2e:05:9e:76:8a:f9:83:6a:
cd:7f:41:73:db:d7:da:34:af:c8:08:7c:79:c6:d6:fe:36:28:
a7:c3:8a:fb:a3:ff:5c:5b:37:16:bd:1b:8e:92:05:12:d0:0d:
18:f3:7e:37:0b:21:c0:d0:15:ad:6e:88:7a:a2:21:8a:fd:34:
f7:9f:60:8f:f8:99:cc:46:4f:c4:c4:98:52:b3:ad:02:f0:d3:
ea:d6:a4:e0:39:5f:50:0a:dd:90:cb:3e:fe:81:fe:cc:13:60:
7d:47:ed:eb:de:fe:fc:99:65:51:71:51:03:dc:a5:d2:00:0b:
d7:f3:f2:e6:fc:ef:cb:ca:1b:83:71:68:6a:dc:de:ce:62:69:
05:6d:12:7d:ed:9a:e0:22:50:16:f4:ad:c2:63:7c:b6:bb:7f:
92:3b:34:d5:f4:06:77:b7:a2:d6:61:fe:b6:97:0b:8b:f7:e9:
4f:df:62:83:60:a4:fb:e3:e2:83:c8:c7:50:5b:de:9e:a4:18:
7a:3f:5a:35:ea:cd:72:91:7b:61:cb:73:dc:8d:71:80:36:0b:
3d:23:ff:29:ea:87:4b:ae:1b:f4:a1:e1:46:83:39:07:63:cc:
5f:26:3f:e3:5d:e8:a5:e4:7c:05:48:27:3f:44:69:45:90:06:
cc:1c:91:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYjbGLNbZOFW0EuXS9XmIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMDJlMDY0Yzk4YjMyMzFjM2YyMTQ4YTFjM2Q5YzM4N2Q0
ODllZTkwHhcNMjUxMTA0MTUwMDI3WhcNMjUxMTA1MTUwMDI3WjAzMTEwLwYDVQQD
EygxN2EwNDRjMmM2Njc3MmY0MjlmNDY3NjVmMGViOTRlMDg4NzU2NmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPKOmk0M+/3xCDhF5wL1D6wzAz2J
4LXJzCRoyUTZu2F+MdM6PSA7Vnqf794Ka4kHgxO0iQibBFf2aoV/oM0zxbVtcwW2
ZDGS//nUKdeuM9eEna2ta3+0ynzTvlkvPPkkMCs7v60MzrUKVFpimoa25PeXCzed
zqvfSjY99Eb5NKUINfFTIXQK9YY/ew+IKyq5b7sLOI1roP+94TUowJoS9NWz2cSk
af6IBxeHYcEVd5b0yVN60XaDFJld2AeVt+3ayhDbXS/6wSz2mXb09p9ucsv+8zfF
JsyFv0jMdSS/H4QdH/bn4ERlC8LPkcKBTY9LQRw8lPbKBEWW8GgjvzCImwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBegRMLGZ3L0KfRnZfDrlOCIdWaoMB8GA1UdIwQY
MBaAFJ4C4GTJizIxw/IUihw9nDh9SJ7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmdMZ1pNbUxNakhEOGhTS0hEMmNPSDFJbnVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81ZDdiYzQtZTBjNS00YTQ4LTkwZTYt
NzUyNTE2ODkwZDNkLzEvbmdMZ1pNbUxNakhEOGhTS0hEMmNPSDFJbnVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi81ZDdiYzQtZTBjNS00YTQ4LTkwZTYtNzUyNTE2ODkwZDNk
LzEvbmdMZ1pNbUxNakhEOGhTS0hEMmNPSDFJbnVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKC5S4a0l
KexEFC4FnnaK+YNqzX9Bc9vX2jSvyAh8ecbW/jYop8OK+6P/XFs3Fr0bjpIFEtAN
GPN+NwshwNAVrW6IeqIhiv00959gj/iZzEZPxMSYUrOtAvDT6tak4DlfUArdkMs+
/oH+zBNgfUft697+/JllUXFRA9yl0gAL1/Py5vzvy8obg3FoatzezmJpBW0Sfe2a
4CJQFvStwmN8trt/kjs01fQGd7ei1mH+tpcLi/fpT99ig2Ck++Pig8jHUFvenqQY
ej9aNerNcpF7Yctz3I1xgDYLPSP/KeqHS64b9KHhRoM5B2PMXyY/413opeR8BUgn
P0RpRZAGzByRHA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:08 2025 by rpki-client