Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
File: ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft (raw, json)
Hash identifier: BTBnBKXlGebAsSuG4vlCtGThQ7NV7bxcLHvE8ELcDsM=
Subject key identifier: 60:F4:83:13:AC:BB:8E:21:77:23:F9:B5:2E:D8:87:71:5B:DC:E1:BA
Authority key identifier: 9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
Certificate issuer: /CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Certificate serial: 01A0C934A87D8F745A72CD319B2F9B1BE1C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
Manifest number: 1708
Signing time: Tue 22 Sep 2026 13:01:06 +0000
Manifest this update: Tue 22 Sep 2026 13:01:06 +0000
Manifest next update: Wed 23 Sep 2026 13:01:06 +0000
Files and hashes: 1: ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl (hash: kPeiiRtRkUXoeDeMMf4qE1o1RyXMVBd3PlxVng3n6Wk=)
2: tEmNq7LovUuc8Au30SanbkNv0So.roa (hash: s2pSdz/lU/3uCLBb+gthkVpfgt/RCLo0Ow4VSLUvvBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:34:a8:7d:8f:74:5a:72:cd:31:9b:2f:9b:1b:e1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Validity
Not Before: Sep 22 13:01:06 2026 GMT
Not After : Sep 23 13:01:06 2026 GMT
Subject: CN=60f48313acbb8e217723f9b52ed887715bdce1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:01:78:d7:42:e3:e7:e9:9e:7b:e4:e4:40:f6:
41:0e:07:59:35:aa:3d:1d:a1:f7:fb:9c:96:28:74:
9b:ba:8b:a8:31:81:98:29:57:0e:d5:74:78:9b:ec:
14:fe:d8:26:4e:94:17:00:70:9a:ac:a3:ad:1c:bc:
be:ae:e9:b4:a1:9d:35:b6:90:e9:bd:a8:d1:02:50:
5d:b4:b4:c4:3a:74:c1:8b:16:4d:46:de:54:1d:58:
64:f1:83:14:19:22:ed:29:99:a0:2b:3b:27:8b:ff:
0e:bd:bf:cd:b1:fa:4a:73:91:e3:d1:37:36:54:3f:
55:43:01:95:7c:9b:3a:b0:b6:25:ee:17:91:38:3b:
60:5a:20:9f:20:e6:14:a5:e8:ad:9e:38:41:ed:39:
2d:f7:d9:c7:33:55:83:56:2d:74:b4:26:32:11:d9:
2e:48:b0:24:94:61:76:72:29:cb:5f:dd:11:18:eb:
9d:80:06:fe:45:e0:95:80:b7:08:68:73:6f:9a:c9:
35:2e:1e:2c:8c:03:ee:e3:e6:48:a6:c3:84:60:fb:
61:6c:7b:73:fa:3a:99:9f:e9:d8:04:f0:86:5c:0a:
7a:69:49:1d:8d:71:29:af:9d:4b:81:96:fe:f0:3f:
0f:83:a2:37:f5:da:00:a4:8a:a6:b1:88:60:9d:c8:
85:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F4:83:13:AC:BB:8E:21:77:23:F9:B5:2E:D8:87:71:5B:DC:E1:BA
X509v3 Authority Key Identifier:
keyid:9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:9c:7d:f1:a7:71:84:25:14:81:c7:77:5d:d1:4a:fc:ad:41:
9b:61:00:a3:15:f2:88:a2:20:5c:6d:96:75:f9:6f:13:8a:84:
03:af:16:15:2a:dc:48:c2:ab:2a:ce:87:6b:13:e4:e9:52:f0:
02:f1:dd:a4:60:03:be:4e:1d:75:a0:c5:15:6c:f6:ec:26:bc:
37:71:bc:b8:3b:de:61:1b:8b:5f:9b:71:a7:5e:34:8e:b5:b2:
91:23:bb:93:76:fc:47:55:25:1d:8f:30:80:4e:0c:42:3d:bd:
03:9e:80:43:96:fc:8d:10:09:4f:d8:74:21:83:cf:2f:a8:8c:
93:1b:38:c7:4f:1e:cc:d2:26:3d:c4:4d:34:69:9b:9d:79:0c:
50:7f:ca:c7:43:84:4a:f2:58:70:15:d0:c0:48:82:1a:56:08:
43:7f:8c:35:e8:ab:68:20:62:3d:4f:a0:fd:e2:aa:89:68:35:
19:74:a8:2e:34:fe:ed:64:c6:57:f7:ef:40:57:f0:67:c3:75:
e3:38:95:d3:bd:ac:fc:6e:d5:f5:39:a5:aa:3a:98:57:97:ea:
c0:11:aa:66:4b:cc:ae:cb:61:0e:2d:bd:f8:dd:e9:b5:ce:26:
f6:e6:1e:e5:44:5f:2b:c2:33:62:23:09:78:2c:79:c0:fa:9b:
57:17:45:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:28:25 2026 by rpki-client