Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
File: NgAOvu0kK5VkrclUhTI7lr1vXAI.mft (raw, json)
Hash identifier: ctZneTfolTRiDG38p1IS/qThKpEHhx0idAkEEYzsn/g=
Subject key identifier: 8A:45:1E:9D:C8:7C:0D:58:82:05:E3:09:B6:52:04:88:E6:70:81:DC
Authority key identifier: 36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
Certificate issuer: /CN=36000ebeed242b9564adc95485323b96bd6f5c02
Certificate serial: 019CAD909495F8203ED4E3E83817DCE3B064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
Manifest number: 13B5
Signing time: Mon 02 Mar 2026 08:00:59 +0000
Manifest this update: Mon 02 Mar 2026 08:00:59 +0000
Manifest next update: Tue 03 Mar 2026 08:00:59 +0000
Files and hashes: 1: BHf8SWUieWyp8CsFi-LkKjkwID0.roa (hash: r6mZHm7Sd1CEnMX4mNcO0XlOAIiIxrl1PQK5EqAyZj4=)
2: NgAOvu0kK5VkrclUhTI7lr1vXAI.crl (hash: lzfO9WHbmA0AhUGsZFbchH4uCo5TQCOGCMAHVlioZ78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:94:95:f8:20:3e:d4:e3:e8:38:17:dc:e3:b0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36000ebeed242b9564adc95485323b96bd6f5c02
Validity
Not Before: Mar 2 08:00:59 2026 GMT
Not After : Mar 3 08:00:59 2026 GMT
Subject: CN=8a451e9dc87c0d588205e309b6520488e67081dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:26:82:43:6d:73:da:92:51:4c:27:6c:f3:a5:
77:82:a4:97:ba:0b:7c:a6:5e:3c:d6:5e:30:4c:1a:
c5:a9:b7:4a:41:49:7c:c4:76:b4:19:0a:b9:7c:cd:
44:7c:f8:cb:4c:34:e7:7e:d5:aa:ce:33:d8:f3:f0:
db:de:89:01:a4:0f:07:c0:ef:f3:71:55:9c:07:d6:
3d:0f:b5:71:15:17:3e:19:49:4d:c7:d5:b0:c1:19:
fc:b7:97:dc:a3:c4:47:b5:6b:ff:89:b1:29:fe:09:
82:a6:01:7d:6a:3a:93:7f:02:d3:22:2c:14:b4:7f:
80:14:0e:ec:53:81:ef:de:7f:7e:bf:39:a6:f5:ad:
ad:7b:50:c5:ad:88:92:42:8c:48:4f:7a:5f:cf:eb:
f7:63:a5:14:b5:5b:d6:cb:b5:84:12:84:09:13:91:
af:4a:68:fb:f7:2b:ee:30:52:d2:56:62:e9:69:f1:
43:c1:d3:a0:31:9b:13:a6:ad:25:9a:bc:fe:e8:ce:
af:7b:fd:ef:4d:4a:23:c4:be:1a:15:33:28:77:ca:
2f:d6:44:a2:8f:8d:aa:6f:19:47:54:d3:77:93:01:
0f:d1:9d:c3:82:bb:4b:43:00:7f:aa:21:ed:93:1d:
a0:c8:bd:3b:bf:98:0d:a6:c0:ed:30:bf:8e:15:fa:
85:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:45:1E:9D:C8:7C:0D:58:82:05:E3:09:B6:52:04:88:E6:70:81:DC
X509v3 Authority Key Identifier:
keyid:36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:06:fb:3a:01:7b:13:55:54:fa:5e:3d:07:35:f0:69:f9:45:
91:88:8e:ab:9d:d1:b8:76:c9:39:5f:11:30:04:ba:d2:5d:40:
51:a0:82:d3:bc:54:5d:f9:56:31:6f:a8:39:1c:98:79:a4:05:
f3:64:0e:80:dc:7e:28:a7:28:09:e5:8e:59:ef:40:17:13:69:
2c:fa:cc:23:a6:c9:4e:16:cc:b0:d8:7a:c6:0a:fa:04:cf:13:
7b:33:e2:f8:55:09:76:47:ab:c6:c3:14:6a:3a:b1:d3:32:6a:
d4:c1:ff:5d:98:c4:0f:a1:ea:18:0a:a5:98:d2:16:20:24:7d:
ae:0d:d6:2f:dd:be:4b:39:39:a5:52:89:0a:51:f4:10:b3:de:
31:3c:00:d2:8b:b8:e9:5f:f6:e6:06:50:10:b3:fe:b2:e5:80:
e7:9b:52:0b:75:72:dc:38:93:04:dd:c7:a3:77:b3:0e:43:8a:
5c:fa:17:f5:1f:fc:34:67:28:ad:a8:e4:cb:f1:b4:c0:18:10:
ca:23:0b:3d:f7:81:1e:d8:bb:a8:68:20:98:a5:d1:93:f2:b3:
11:68:35:fa:95:c7:b9:49:a3:4e:b3:f2:7d:0d:31:6a:ca:75:
1c:6d:31:d5:be:62:aa:10:24:85:e6:f6:85:d5:cc:f6:46:9e:
7f:9d:7e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:06 2026 by rpki-client