Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
File: NgAOvu0kK5VkrclUhTI7lr1vXAI.mft (raw, json)
Hash identifier: hkdgAWY5x3UhoDRRJuMiHgBqJmyUPksHgKg/QLyDwgY=
Subject key identifier: 7A:30:5E:49:37:31:E8:D7:32:86:26:2D:40:C0:9F:60:51:DB:5E:78
Authority key identifier: 36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
Certificate issuer: /CN=36000ebeed242b9564adc95485323b96bd6f5c02
Certificate serial: 019D992B2C17D4FA4CDA990D6CEC14206B6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
Manifest number: 142F
Signing time: Fri 17 Apr 2026 02:00:36 +0000
Manifest this update: Fri 17 Apr 2026 02:00:36 +0000
Manifest next update: Sat 18 Apr 2026 02:00:36 +0000
Files and hashes: 1: BHf8SWUieWyp8CsFi-LkKjkwID0.roa (hash: r6mZHm7Sd1CEnMX4mNcO0XlOAIiIxrl1PQK5EqAyZj4=)
2: NgAOvu0kK5VkrclUhTI7lr1vXAI.crl (hash: IZlvUnJdjmYnJ5w5kRdGyCQR49vLvoorepgv5Lx30m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:2c:17:d4:fa:4c:da:99:0d:6c:ec:14:20:6b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36000ebeed242b9564adc95485323b96bd6f5c02
Validity
Not Before: Apr 17 02:00:36 2026 GMT
Not After : Apr 18 02:00:36 2026 GMT
Subject: CN=7a305e493731e8d73286262d40c09f6051db5e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:10:1a:d4:1a:d0:77:eb:c8:44:ce:6f:f0:d6:
86:86:47:4f:d4:7d:01:66:32:85:55:08:5b:7e:84:
27:4e:74:78:bb:e1:3a:6f:82:6c:f2:ee:e9:66:2d:
65:28:46:a8:fd:b5:bf:87:93:e0:a0:89:3a:3f:2f:
9a:0f:db:d0:0d:f2:4d:86:07:59:32:01:df:8a:6c:
6c:8f:77:ea:9b:e5:5a:bb:e9:92:f0:7c:48:12:48:
26:2f:47:8d:2a:eb:3f:60:81:6a:bc:fb:fc:7d:66:
3a:7c:08:1b:38:b4:7a:97:cf:bf:0b:7d:ba:af:ab:
2b:53:cb:ce:8a:9f:f6:44:b8:ec:fe:04:57:f6:4a:
67:0f:2a:ac:4b:7c:d1:d0:fc:6a:5d:1f:85:3a:36:
7b:b4:07:ce:b2:c9:54:32:27:39:dc:41:1f:ce:22:
64:c1:93:9b:49:e5:d5:95:d6:6d:7b:f4:61:03:da:
00:b3:46:53:c4:06:3a:73:07:ae:af:b8:e2:7f:df:
b2:3c:33:ba:f4:a6:38:37:8c:0a:21:3e:c2:5e:d3:
74:7d:00:89:9c:3d:4f:7d:3f:9d:fc:ac:16:1e:a9:
f1:36:74:30:2b:33:ca:f3:2f:1a:4b:9c:4a:f2:19:
72:4b:26:e7:25:b4:3a:94:33:0d:90:c1:8a:e2:82:
3b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:30:5E:49:37:31:E8:D7:32:86:26:2D:40:C0:9F:60:51:DB:5E:78
X509v3 Authority Key Identifier:
keyid:36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ae:7c:66:ca:c2:f6:7d:23:0a:a2:1b:16:16:3e:87:47:be:
a6:f1:c7:1a:fb:6c:83:84:7c:cf:ea:be:73:a4:b6:fc:de:1c:
0d:31:59:43:3d:f9:25:8b:65:60:ef:6b:97:1b:da:30:43:6a:
63:fc:3e:7b:e2:31:f1:82:80:d0:a1:38:59:03:af:94:ae:bb:
85:0a:8e:16:3d:c8:8d:9b:12:5a:22:d5:b4:45:22:dc:1b:b0:
a2:b2:e8:a9:af:63:d4:48:61:05:e2:0b:3e:f6:0d:b5:40:52:
20:81:c6:c5:c6:75:c8:e3:49:75:ba:c0:f0:d8:75:46:66:4f:
44:cc:a8:1a:1c:2a:f7:e1:95:1f:2b:95:a4:07:3e:b5:38:a3:
51:bb:a3:59:3e:2f:c4:b1:fc:64:86:2b:99:db:11:b9:98:6b:
01:1a:e8:0e:bd:29:f7:7a:eb:22:09:78:12:60:4b:28:fd:46:
b3:2f:ee:81:b0:10:7b:7e:69:e7:f8:02:29:dc:35:de:1f:80:
1e:25:8f:8c:9a:e4:47:6a:94:72:e4:e7:27:06:71:f6:8f:30:
67:b1:96:a3:8c:80:cc:d8:14:89:24:a5:13:4a:b8:23:ba:ea:
f3:0e:15:2e:e9:5f:29:bc:e8:62:16:fa:ee:40:2c:ae:1e:95:
64:15:cc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:44 2026 by rpki-client