Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
File: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft (raw, json)
Hash identifier: 5c8INK9BU4RKiy9G3ReiuxCLxXgYMe+u21QdaO/8QEw=
Subject key identifier: 37:3D:DE:8E:6E:5D:15:D5:CB:A5:74:5D:A2:ED:F1:49:03:BF:F3:A4
Authority key identifier: 34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
Certificate issuer: /CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Certificate serial: 01A0D983C12F72F2D2F9ABB50D9140F07A10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
Manifest number: 076A
Signing time: Fri 25 Sep 2026 17:01:25 +0000
Manifest this update: Fri 25 Sep 2026 17:01:25 +0000
Manifest next update: Sat 26 Sep 2026 17:01:25 +0000
Files and hashes: 1: B0_cwZ4nzA_Ywxh0ZIm8WPjoc0w.roa (hash: Z+AKsVLV4+wS5Tyt+lO7+23YuqTpw2iHXm3p9OVCEys=)
2: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl (hash: XU8VXfDYXzR1dZlAM8yIE09mrsDFWTKctcIrLGN+ZC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:c1:2f:72:f2:d2:f9:ab:b5:0d:91:40:f0:7a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Validity
Not Before: Sep 25 17:01:25 2026 GMT
Not After : Sep 26 17:01:25 2026 GMT
Subject: CN=373dde8e6e5d15d5cba5745da2edf14903bff3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a4:51:94:8b:ef:47:db:1d:8e:9f:95:f5:f9:
ae:f7:a0:b9:6c:a1:78:c3:2d:17:62:54:9d:d4:6b:
f5:38:1c:44:2a:68:dd:f5:d0:03:28:62:be:79:16:
32:df:fc:56:a7:c9:64:d2:e6:40:84:86:7c:f7:b8:
33:b6:f7:df:2d:31:76:0d:2e:3a:ef:7b:db:ae:85:
c0:48:c6:62:6e:61:86:3a:35:d7:93:76:6e:a6:53:
38:a7:27:37:4d:72:dc:6b:9c:46:d7:41:ec:3a:ba:
0b:8f:11:7b:88:27:b0:73:99:07:58:c2:35:93:01:
fd:14:7c:a8:fe:53:1f:36:96:11:00:89:f9:4e:9b:
38:d7:15:48:b5:a8:c3:1f:ca:15:d7:91:f4:6f:09:
01:a6:fb:e8:c2:41:51:32:de:5b:5c:dc:16:16:44:
a6:b0:39:d4:82:9f:7d:1d:a4:57:2b:da:7a:f0:21:
3d:95:d7:6a:22:06:99:47:a2:c3:78:cd:cf:e3:4b:
aa:a1:cc:10:a3:f3:dd:f3:a7:a7:4f:ef:77:72:96:
ed:8a:3a:f2:d1:7f:d0:1e:2b:06:2b:f8:79:ef:71:
1f:bc:23:80:f4:ce:fe:67:70:8f:71:11:59:93:d8:
9f:04:8a:aa:b6:e3:cc:47:aa:91:34:0a:33:5c:cd:
90:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3D:DE:8E:6E:5D:15:D5:CB:A5:74:5D:A2:ED:F1:49:03:BF:F3:A4
X509v3 Authority Key Identifier:
keyid:34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:11:d0:5b:7b:58:9c:40:d6:55:f9:c2:ba:96:8b:70:73:16:
a7:82:db:b8:62:41:3a:a0:72:e3:4c:f3:55:5e:57:cb:10:e5:
ce:ba:a3:2b:e4:56:43:a4:4f:3f:88:e8:5c:8c:d1:c1:0f:37:
4e:51:1a:70:d2:6e:fe:37:7e:53:e5:97:96:30:d9:8b:78:39:
d8:27:38:46:8d:c9:c3:fd:86:a8:07:96:56:f9:e6:5d:73:50:
d5:3f:00:44:b2:53:a5:80:42:53:38:49:70:8e:d0:8d:00:7c:
58:cc:87:a6:f5:5b:c5:5a:50:06:5a:c5:d4:af:2b:9c:c8:19:
ed:78:18:56:d5:ad:27:bf:29:6e:45:7c:43:58:9d:cc:f8:96:
c2:2b:c5:ff:04:ec:d8:8d:7c:62:dc:be:90:54:43:55:c5:3e:
f4:06:38:bb:74:95:e3:ed:e1:67:10:bd:e3:fa:26:48:68:b1:
4b:3f:34:48:c3:11:21:c4:6c:79:6b:9b:28:62:5f:c5:08:2f:
a7:de:12:e4:bb:54:0f:8e:0b:14:b6:08:e2:bf:68:7e:4b:ad:
ed:8d:9b:63:a9:dc:c8:fb:45:81:e3:7d:6e:88:9d:9f:cd:45:
8a:43:2a:23:84:d3:bb:76:c4:60:ab:14:bf:e1:0e:89:38:32:
ef:b8:4e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:43:48 2026 by rpki-client