Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
File: NgAOvu0kK5VkrclUhTI7lr1vXAI.mft (raw, json)
Hash identifier: JmM2jqC0Kzf5JrMYpEGXbHzti9Joa9mD4+uTP2pf4cU=
Subject key identifier: AC:97:81:66:5A:D7:47:E6:FC:99:B8:E8:5C:BE:6F:8F:C4:86:67:78
Authority key identifier: 36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
Certificate issuer: /CN=36000ebeed242b9564adc95485323b96bd6f5c02
Certificate serial: 01A0CBFE8CC7B7135E4C6B3D9090712E5C6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
Manifest number: 15D7
Signing time: Wed 23 Sep 2026 02:00:52 +0000
Manifest this update: Wed 23 Sep 2026 02:00:52 +0000
Manifest next update: Thu 24 Sep 2026 02:00:52 +0000
Files and hashes: 1: BHf8SWUieWyp8CsFi-LkKjkwID0.roa (hash: r6mZHm7Sd1CEnMX4mNcO0XlOAIiIxrl1PQK5EqAyZj4=)
2: NgAOvu0kK5VkrclUhTI7lr1vXAI.crl (hash: kssUHlajX3a6K18LiHAd8Yu1FDcsDPhAYfHOvonSNow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:8c:c7:b7:13:5e:4c:6b:3d:90:90:71:2e:5c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36000ebeed242b9564adc95485323b96bd6f5c02
Validity
Not Before: Sep 23 02:00:52 2026 GMT
Not After : Sep 24 02:00:52 2026 GMT
Subject: CN=ac9781665ad747e6fc99b8e85cbe6f8fc4866778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6f:9f:9f:9f:92:f6:4c:f5:f9:5f:1f:38:28:
98:e3:d2:77:a0:65:00:f7:07:5a:81:b7:37:a0:ad:
3f:77:8b:32:21:1a:5e:a7:e5:9d:38:8e:5e:76:93:
ea:77:61:da:58:0d:fd:ac:e8:a9:0d:3e:9c:fa:b6:
78:44:3d:8e:5c:d6:30:46:31:af:e7:6a:96:f0:ca:
1f:43:bb:bc:65:a7:fe:12:4d:bf:e7:cd:81:0f:10:
36:40:af:35:05:75:3f:5b:82:05:60:05:62:c6:53:
74:5d:f7:7b:2a:f7:94:bb:52:6e:7f:39:e8:ee:5d:
06:a4:48:e4:21:d5:97:aa:64:88:ff:46:fe:05:98:
39:be:cb:b9:c7:bf:ee:82:cf:b6:0c:3e:b6:49:85:
5f:d5:8d:ca:10:69:a9:89:29:70:66:a3:fd:d3:86:
8f:ae:6d:84:3d:0a:18:3a:96:23:a9:df:88:3d:5c:
15:42:ca:3f:a6:d6:f0:eb:54:61:cd:1b:3f:72:46:
6c:1e:ee:8f:21:1f:b6:e7:37:02:c9:08:b3:a1:f6:
01:3d:a8:41:74:a0:00:ca:e2:7e:b7:8c:69:de:c1:
e9:6c:20:aa:d1:97:ca:69:e7:ec:54:aa:95:1b:73:
2f:d3:d2:2e:3f:65:95:55:ea:2b:89:f6:33:3a:c7:
15:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:97:81:66:5A:D7:47:E6:FC:99:B8:E8:5C:BE:6F:8F:C4:86:67:78
X509v3 Authority Key Identifier:
keyid:36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:bb:fd:de:f4:14:21:da:f0:fd:70:ae:e1:37:8e:2f:44:41:
dd:15:01:8f:72:09:dd:7e:71:a2:38:25:81:9b:a3:6b:0c:6f:
09:2e:22:0a:d5:a8:75:6c:ff:d9:50:ab:c5:a4:46:f0:cb:55:
69:fb:79:ce:a4:15:20:8e:40:ce:72:9d:1f:1e:89:2d:40:c1:
f5:cc:6c:8b:f8:8c:8b:af:a9:43:4a:08:cf:67:b7:83:46:d1:
4a:9f:28:14:2d:0f:f3:15:5c:b7:52:87:7e:ba:18:2e:be:1a:
4f:4b:1a:55:a7:d1:4c:c4:19:0c:51:67:2c:f5:1d:05:ac:94:
35:22:22:d0:c6:87:fe:be:c8:6f:00:aa:e5:25:e5:d2:56:c9:
7e:38:97:2e:8b:75:cc:0a:7f:1a:67:c0:d0:0e:c3:d6:1a:3c:
e7:76:f8:a4:fa:f7:6d:a0:1f:a7:e4:c4:b6:9d:17:c1:7c:46:
1f:51:1a:12:66:4e:c7:59:da:b0:4a:78:db:de:69:12:c7:1a:
7d:11:a3:5d:07:45:8c:48:6f:49:4f:87:97:dd:a8:2b:99:9e:
b2:d4:a6:b5:96:14:a7:1c:25:c8:a5:0a:49:5b:ff:e9:20:0c:
fc:d9:06:a1:a5:b0:a5:65:c0:71:ee:8c:1f:a7:22:25:bb:af:
63:33:5c:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDL/ozHtxNeTGs9kJBxLlxtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MDAwZWJlZWQyNDJiOTU2NGFkYzk1NDg1MzIzYjk2YmQ2
ZjVjMDIwHhcNMjYwOTIzMDIwMDUyWhcNMjYwOTI0MDIwMDUyWjAzMTEwLwYDVQQD
EyhhYzk3ODE2NjVhZDc0N2U2ZmM5OWI4ZTg1Y2JlNmY4ZmM0ODY2Nzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1W+fn5+S9kz1+V8fOCiY49J3oGUA
9wdagbc3oK0/d4syIRpep+WdOI5edpPqd2HaWA39rOipDT6c+rZ4RD2OXNYwRjGv
52qW8MofQ7u8Zaf+Ek2/582BDxA2QK81BXU/W4IFYAVixlN0Xfd7KveUu1Jufzno
7l0GpEjkIdWXqmSI/0b+BZg5vsu5x7/ugs+2DD62SYVf1Y3KEGmpiSlwZqP904aP
rm2EPQoYOpYjqd+IPVwVQso/ptbw61RhzRs/ckZsHu6PIR+25zcCyQizofYBPahB
dKAAyuJ+t4xp3sHpbCCq0ZfKaefsVKqVG3Mv09IuP2WVVeorifYzOscVSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyXgWZa10fm/Jm46Fy+b4/Ehmd4MB8GA1UdIwQY
MBaAFDYADr7tJCuVZK3JVIUyO5a9b1wCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmdBT3Z1MGtLNVZrcmNsVWhUSTdscjF2WEFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iNzdlMWEtNjYzYS00NDViLThlNjEt
MzcwMTUwYjY2OWU0LzEvTmdBT3Z1MGtLNVZrcmNsVWhUSTdscjF2WEFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iNzdlMWEtNjYzYS00NDViLThlNjEtMzcwMTUwYjY2OWU0
LzEvTmdBT3Z1MGtLNVZrcmNsVWhUSTdscjF2WEFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXbv93vQU
Idrw/XCu4TeOL0RB3RUBj3IJ3X5xojglgZujawxvCS4iCtWodWz/2VCrxaRG8MtV
aft5zqQVII5AznKdHx6JLUDB9cxsi/iMi6+pQ0oIz2e3g0bRSp8oFC0P8xVct1KH
froYLr4aT0saVafRTMQZDFFnLPUdBayUNSIi0MaH/r7IbwCq5SXl0lbJfjiXLot1
zAp/GmfA0A7D1ho853b4pPr3baAfp+TEtp0XwXxGH1EaEmZOx1nasEp4295pEsca
fRGjXQdFjEhvSU+Hl92oK5mestSmtZYUpxwlyKUKSVv/6SAM/NkGoaWwpWXAce6M
H6ciJbuvYzNcTQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 07:44:53 2026 by rpki-client