Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
File: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft (raw, json)
Hash identifier: lx9DyQPCbU5aTCttZC8VtlomOXH3wEh2P46fK8fyGs0=
Subject key identifier: 74:FB:60:76:88:D2:1F:01:A4:85:8F:F8:D9:82:65:E9:5A:5E:4C:25
Authority key identifier: 34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
Certificate issuer: /CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Certificate serial: 019D292950DCC4942AEF7143F8D431F3D12E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
Manifest number: 0581
Signing time: Thu 26 Mar 2026 08:01:06 +0000
Manifest this update: Thu 26 Mar 2026 08:01:06 +0000
Manifest next update: Fri 27 Mar 2026 08:01:06 +0000
Files and hashes: 1: B0_cwZ4nzA_Ywxh0ZIm8WPjoc0w.roa (hash: Z+AKsVLV4+wS5Tyt+lO7+23YuqTpw2iHXm3p9OVCEys=)
2: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl (hash: 3Vdu0WgGimhDs9wSJMhQGOHnTHEGj51A5zw/wgXUJ88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:50:dc:c4:94:2a:ef:71:43:f8:d4:31:f3:d1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Validity
Not Before: Mar 26 08:01:06 2026 GMT
Not After : Mar 27 08:01:06 2026 GMT
Subject: CN=74fb607688d21f01a4858ff8d98265e95a5e4c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c6:6d:b2:c3:9b:1d:35:48:e5:a4:e4:57:0f:
17:60:63:19:ff:7d:ab:2e:59:ea:75:72:78:7f:d4:
ad:35:52:77:67:bb:98:63:9c:85:1e:bb:1a:88:1a:
48:fd:da:fc:12:bb:ff:42:1a:5a:5f:df:6e:eb:1a:
99:59:e8:57:b5:b2:b4:80:20:a2:3e:7a:5f:60:4c:
02:40:c8:6f:16:6d:ae:b1:dc:23:ab:a2:87:6a:a9:
b8:d5:4f:82:de:aa:05:09:4e:16:60:41:71:17:08:
39:f9:1c:d4:a4:80:1c:d1:f1:48:07:71:43:16:34:
76:5c:b9:6a:97:0c:2f:8b:ca:df:5f:76:f8:2d:1d:
ea:f1:67:cb:e8:13:9a:a7:28:d8:85:23:20:99:a3:
61:13:03:5f:18:29:08:05:f1:a9:d6:d0:c1:1f:42:
ad:d6:ac:9b:13:a1:7c:83:f3:5b:18:2e:2c:1a:c7:
f4:08:e7:c5:b7:38:33:6b:de:b0:5c:85:5a:2b:d4:
9e:ef:65:91:74:f3:c0:53:b1:3e:a6:fa:07:4a:c5:
df:22:d1:c4:cd:ea:06:85:17:0c:6e:a9:bf:90:ed:
1e:ba:7c:fa:6e:7c:8a:52:ed:47:23:44:28:c7:41:
fd:b3:3e:68:41:13:b1:3e:40:9e:8a:45:72:7a:20:
25:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FB:60:76:88:D2:1F:01:A4:85:8F:F8:D9:82:65:E9:5A:5E:4C:25
X509v3 Authority Key Identifier:
keyid:34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ba:7d:3d:1b:5b:97:38:be:39:6b:39:c4:aa:96:85:65:d8:
a8:92:55:b6:01:f2:44:31:57:e6:90:a5:f2:16:57:51:87:e2:
d2:5a:5c:e7:74:60:ca:d8:2a:d2:23:f6:1e:9e:d3:93:7e:d7:
8a:38:90:5d:40:1e:e4:b9:81:bc:d4:8d:60:c7:ff:57:91:6c:
ff:a9:24:01:f4:e5:3a:41:91:27:96:65:b1:31:a2:f5:2b:c6:
80:fe:91:c8:7b:94:31:a5:b1:4b:b0:df:3f:f5:00:88:7c:11:
95:03:1c:16:df:80:64:e2:de:33:8c:e8:2e:4f:4a:20:b2:15:
ee:03:b1:d2:04:99:67:bf:97:77:b1:e3:73:fe:ee:25:ba:9e:
a7:0a:56:f1:4d:39:a6:09:36:0d:32:9e:32:2c:73:b4:c0:df:
93:9e:49:fe:0a:09:89:cb:fb:11:a1:9c:2b:83:b0:59:ab:29:
9a:52:30:ed:b6:94:9e:d5:cd:17:c0:5d:66:01:9b:56:6a:22:
f1:64:63:9d:61:cb:19:b1:ec:48:e1:99:77:f6:65:fe:1a:0b:
54:47:48:ac:f2:ab:6b:d1:b9:de:29:6c:c7:4e:f6:af:1f:7e:
66:b6:4a:e5:47:b1:24:6b:d7:68:c0:e9:0e:90:28:07:f4:4e:
12:ca:5d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:19:25 2026 by rpki-client