Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
File: ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft (raw, json)
Hash identifier: aLbR+7VFZ6/+YbDvwiXP+BNIemyHtzLGy2RMik+ZwEY=
Subject key identifier: E4:23:70:EA:EC:0E:28:3B:29:25:B5:C5:64:D7:52:F8:7C:62:9D:DB
Authority key identifier: 9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
Certificate issuer: /CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Certificate serial: 019CAAC615D5615B7D34A44B03E0D4033202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
Manifest number: 14E6
Signing time: Sun 01 Mar 2026 19:00:34 +0000
Manifest this update: Sun 01 Mar 2026 19:00:34 +0000
Manifest next update: Mon 02 Mar 2026 19:00:34 +0000
Files and hashes: 1: ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl (hash: HdqfTicCGsJCN7nXJyEHznJtz3c3sDRRgiMDmSIJR6E=)
2: tEmNq7LovUuc8Au30SanbkNv0So.roa (hash: s2pSdz/lU/3uCLBb+gthkVpfgt/RCLo0Ow4VSLUvvBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:15:d5:61:5b:7d:34:a4:4b:03:e0:d4:03:32:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Validity
Not Before: Mar 1 19:00:34 2026 GMT
Not After : Mar 2 19:00:34 2026 GMT
Subject: CN=e42370eaec0e283b2925b5c564d752f87c629ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ac:73:ae:69:45:91:26:7c:c0:0e:03:38:b4:
85:4e:2c:68:f3:f2:1b:4a:9b:9e:74:43:c2:1f:ea:
c4:67:e0:e3:14:8a:e8:97:d8:81:26:8f:86:6c:5b:
8b:c1:68:d0:4f:42:d9:d4:d5:a9:45:25:70:a9:c3:
c7:64:1d:8d:1a:48:92:d9:eb:4d:b1:d0:1f:da:f4:
0a:c4:5d:bd:33:77:42:e8:dd:32:50:31:84:e5:c1:
2b:9d:58:81:15:b5:b3:ab:7b:0a:bb:ec:f9:78:a5:
a3:54:ff:c3:dc:b8:ec:5b:e4:b9:41:5d:7e:f7:bc:
3d:e8:e1:99:f0:59:c3:19:4d:46:71:8a:ae:cb:60:
cc:a6:fa:91:4b:16:0e:a3:e9:28:0c:a8:ea:5d:8c:
9f:4d:5d:26:14:57:3b:b1:18:32:1c:9e:bb:c7:be:
64:03:3b:96:84:59:a2:55:4d:ed:d5:a6:4a:a7:01:
f3:87:b6:55:8c:78:8e:c3:fc:d4:4f:7d:3c:eb:30:
d5:db:24:48:1d:a7:ae:1f:c6:b6:db:62:50:1a:24:
0a:24:3c:28:00:a7:a1:dd:8c:e1:b0:6e:f8:ef:ee:
b3:58:9b:86:7a:b2:dd:e8:f5:93:55:8d:6a:1a:5f:
8c:6b:84:24:dc:64:43:21:71:8f:cc:03:87:be:34:
99:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:23:70:EA:EC:0E:28:3B:29:25:B5:C5:64:D7:52:F8:7C:62:9D:DB
X509v3 Authority Key Identifier:
keyid:9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:55:72:12:c6:00:fd:be:a3:de:d8:f9:8e:87:87:c3:f3:d1:
a6:5f:7e:0e:cc:0a:9d:a7:a2:ef:63:c1:db:4f:10:c9:c0:9e:
8b:3d:a2:af:8e:eb:fe:2e:1c:09:26:37:6c:b6:c7:35:98:87:
50:1c:4d:42:b3:23:db:b1:0f:df:74:5c:1a:f5:7d:fc:53:d7:
9f:56:94:28:5a:dc:02:ad:a2:c5:fa:c1:60:67:52:8a:50:8f:
dd:c5:40:00:ac:14:a1:28:61:09:60:ed:82:77:2a:ed:a2:80:
dd:9c:b6:4d:8f:09:2c:47:51:72:35:47:7f:59:34:cb:00:d5:
c3:0d:14:4d:1b:66:e9:93:14:38:2e:a7:2d:4d:09:9b:bb:36:
17:0c:43:2c:5b:55:85:75:22:9f:81:62:bb:49:6a:88:ae:97:
15:17:54:38:d2:13:ae:aa:a0:a7:7a:a7:43:a9:ae:53:71:fe:
d8:cf:7b:64:5d:f5:d6:21:17:44:16:a4:8d:31:7a:40:bc:9d:
d5:34:de:72:ad:1b:8a:f6:64:5c:b6:63:bb:5d:e6:f6:d0:59:
51:1b:d1:aa:2d:f3:e5:29:d1:76:09:76:a0:25:6a:f1:63:a3:
9d:b5:ea:7e:07:ea:c9:06:13:de:92:aa:23:56:cf:d4:f3:f1:
d1:8c:51:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:39 2026 by rpki-client