Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
File: NgAOvu0kK5VkrclUhTI7lr1vXAI.mft (raw, json)
Hash identifier: +tPeesXkESXlYyZUZqfnBTiux0YuvSFW/9C3yOtKpyU=
Subject key identifier: 6A:D9:24:BC:54:E6:F0:DD:4C:E6:9B:71:54:90:1A:A8:E8:6F:C2:9A
Authority key identifier: 36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
Certificate issuer: /CN=36000ebeed242b9564adc95485323b96bd6f5c02
Certificate serial: 019FAC3EED4AE78AE21FDAEAE14ECCC90FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
Manifest number: 1542
Signing time: Wed 29 Jul 2026 05:00:32 +0000
Manifest this update: Wed 29 Jul 2026 05:00:32 +0000
Manifest next update: Thu 30 Jul 2026 05:00:32 +0000
Files and hashes: 1: BHf8SWUieWyp8CsFi-LkKjkwID0.roa (hash: r6mZHm7Sd1CEnMX4mNcO0XlOAIiIxrl1PQK5EqAyZj4=)
2: NgAOvu0kK5VkrclUhTI7lr1vXAI.crl (hash: y6yCZlbGLOWPzQt+k+ZAjI4BXU1fHoF+HL4g4Xk/wHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:ed:4a:e7:8a:e2:1f:da:ea:e1:4e:cc:c9:0f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36000ebeed242b9564adc95485323b96bd6f5c02
Validity
Not Before: Jul 29 05:00:32 2026 GMT
Not After : Jul 30 05:00:32 2026 GMT
Subject: CN=6ad924bc54e6f0dd4ce69b7154901aa8e86fc29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a4:e2:b8:9a:df:95:33:44:56:6d:ba:5b:b9:
0f:e6:15:2e:bf:93:2c:cf:91:6c:fc:06:87:de:d0:
5e:d4:58:57:a8:a0:94:07:1c:75:e0:28:23:b2:d3:
77:39:51:8e:3e:a7:17:c8:e9:ad:ba:df:bc:b7:cc:
c0:9d:95:e5:b3:ff:be:b7:57:b1:d8:7f:4b:50:6c:
48:69:3f:8b:09:98:fb:a4:10:bf:66:e1:61:38:e7:
3b:4e:6a:8c:ea:6a:c4:f9:d7:8d:2e:e6:35:5b:98:
f3:0f:2e:8e:36:0a:cd:0e:ab:b7:43:31:76:49:85:
08:f5:2d:1a:8b:b8:51:ff:09:8e:d9:8b:59:af:11:
84:33:48:b1:1d:75:33:30:f1:d8:15:2b:fc:9e:79:
1c:19:1d:c0:9a:c3:25:f7:63:ef:b3:5d:67:d2:cf:
fb:0f:58:76:f0:ac:9b:67:b4:7d:fa:ee:d7:7a:fc:
ee:37:61:8b:23:57:b1:f6:f7:0a:24:ce:b3:2c:fc:
4b:c2:6d:23:a2:43:77:c8:10:75:d4:f8:8b:2f:76:
af:8a:79:16:a5:e6:5a:57:6b:37:f1:8f:49:99:c3:
b7:eb:73:22:30:2d:b4:e2:44:3c:cd:f5:19:83:16:
73:7d:6b:40:b0:34:ab:cd:a3:67:2f:b6:d9:bc:d8:
02:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D9:24:BC:54:E6:F0:DD:4C:E6:9B:71:54:90:1A:A8:E8:6F:C2:9A
X509v3 Authority Key Identifier:
keyid:36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c6:f7:43:4c:11:69:36:92:08:30:08:1f:aa:ee:7f:0e:9b:
0c:b3:30:65:c7:d4:e7:3a:5d:4e:a5:82:8d:34:6c:da:a8:f0:
1b:31:cc:8d:33:e1:7e:89:40:eb:83:6f:f5:b5:bc:f6:32:7d:
47:e9:6c:65:cf:02:f8:60:59:fd:e4:e2:b7:dd:09:4c:28:91:
b6:54:45:75:7d:67:a9:95:76:97:f2:8b:dc:5e:c7:db:d8:c5:
a3:d6:36:9a:0c:87:aa:a5:49:04:5a:b4:d0:65:0f:9a:fb:61:
d8:a3:2b:e0:a2:98:04:d6:4c:f5:31:84:b8:e2:09:9c:08:5a:
73:a8:e7:91:6c:c2:cd:ed:47:13:29:55:04:8b:25:1a:50:3a:
1d:fa:23:f2:3a:00:5a:69:05:7c:fe:d0:b9:e0:e4:b4:0c:3f:
78:b4:31:01:1e:8c:fb:5c:ff:1e:c7:58:8c:c7:8b:74:1f:85:
c4:6f:3c:5c:89:21:1a:9c:1e:e4:31:16:c5:8b:9c:4b:69:32:
24:06:a7:52:61:c3:25:a2:7d:0b:a8:32:8d:db:bd:6d:0b:b6:
58:89:b5:f6:1e:f6:f3:7c:bb:1b:b7:2a:c3:ac:e5:95:b5:90:
12:63:11:37:5e:c5:70:74:af:35:ab:33:d8:35:67:34:a4:fc:
06:aa:e2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:29:00 2026 by rpki-client