Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
File: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft (raw, json)
Hash identifier: pqp6dfFD5SRxDMS/TLKaQVbdNwFNrZ6s/Aoee+C9K6A=
Subject key identifier: 09:87:3D:56:C9:39:43:F9:D3:06:48:A3:C5:A7:A9:E8:70:34:E6:95
Authority key identifier: 34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
Certificate issuer: /CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Certificate serial: 019EB8EA4C72B9006190061131209C66E912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
Manifest number: 0650
Signing time: Thu 11 Jun 2026 23:00:23 +0000
Manifest this update: Thu 11 Jun 2026 23:00:23 +0000
Manifest next update: Fri 12 Jun 2026 23:00:23 +0000
Files and hashes: 1: B0_cwZ4nzA_Ywxh0ZIm8WPjoc0w.roa (hash: Z+AKsVLV4+wS5Tyt+lO7+23YuqTpw2iHXm3p9OVCEys=)
2: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl (hash: J1LEXaSbqV0sxV3/xQPwoDMYkgwcNJqZPkwjHKQROzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:4c:72:b9:00:61:90:06:11:31:20:9c:66:e9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Validity
Not Before: Jun 11 23:00:23 2026 GMT
Not After : Jun 12 23:00:23 2026 GMT
Subject: CN=09873d56c93943f9d30648a3c5a7a9e87034e695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:43:ca:72:c8:97:ab:93:c8:82:f6:27:ee:d8:
70:d7:e0:43:d8:3e:ba:18:01:d1:6d:08:ac:31:95:
d3:06:86:1b:be:78:88:06:1a:87:77:73:06:35:63:
e5:10:bf:a7:b1:c9:31:35:5b:82:83:26:44:91:13:
08:36:7d:d5:33:40:04:14:47:d2:c8:a9:04:32:c9:
8e:63:5a:e2:bd:22:62:07:9c:8c:93:75:79:2e:b6:
cf:b6:08:7f:59:73:e2:a4:4d:bf:eb:b6:c8:62:f3:
8b:23:5d:bc:d5:23:21:57:ed:d2:9b:64:1f:a3:7c:
6e:59:ed:ce:f8:0d:51:b1:0b:9c:f8:84:97:b5:18:
74:9c:91:a0:8c:f4:96:51:d1:a9:2b:a3:d4:84:e5:
37:37:f6:24:91:3a:64:f5:0a:6c:e5:56:4a:c6:b3:
ba:d5:ac:3e:3f:8d:95:52:52:6a:9b:64:50:7b:06:
fe:0b:c3:39:62:81:3a:16:31:9d:06:d1:33:57:4a:
be:d1:fb:d3:94:da:7b:e0:7e:de:03:2a:96:d1:d7:
22:4e:e6:ad:c1:7c:71:df:15:e9:a0:ba:5a:62:ac:
dc:5c:47:d6:ce:2d:2c:82:e8:c2:3d:44:91:1c:7e:
76:b5:0c:6b:00:ac:03:25:79:59:0e:85:ef:e0:63:
10:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:87:3D:56:C9:39:43:F9:D3:06:48:A3:C5:A7:A9:E8:70:34:E6:95
X509v3 Authority Key Identifier:
keyid:34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c9:de:b6:0d:5c:43:ee:ac:e5:93:23:56:b1:ac:8b:70:24:
0d:91:75:ce:7c:63:bf:fa:cc:c9:3a:1a:9c:53:21:ba:83:3f:
26:d5:ba:cb:41:c9:cf:b4:ed:5a:dd:d6:a9:ed:28:00:82:b7:
fd:6a:7e:c4:11:ae:15:49:01:c2:b0:64:b2:70:1b:f3:3a:24:
b4:d6:bc:1e:0c:05:2d:38:59:38:98:30:e9:e7:37:e3:fc:98:
14:c4:9b:1f:40:2d:e4:6b:9b:fd:dd:d7:5a:77:37:87:76:b9:
9d:f0:d2:7f:90:a3:77:14:80:54:d2:6d:3e:52:58:6a:21:03:
5d:d4:93:27:f9:15:54:2a:e3:00:28:89:35:3c:78:f8:0b:41:
79:db:05:60:de:e4:b7:b7:8d:df:e3:1e:5a:d2:4f:1f:9b:f4:
8f:31:14:29:d8:b6:7a:f1:8f:b8:12:64:dd:fe:21:26:27:80:
3a:aa:d4:f3:1a:ca:87:57:b3:5a:21:7a:0a:05:a7:a7:28:18:
a8:ac:02:d2:2d:df:83:00:63:2a:03:60:9f:16:92:15:95:7f:
bc:eb:4f:dd:71:10:c4:85:05:64:f7:3c:2a:06:ef:d9:06:ae:
f2:1f:02:42:a2:ff:8a:26:19:4b:dc:50:1f:4c:92:2c:dd:bd:
87:9f:a5:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ646kxyuQBhkAYRMSCcZukSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NjAzNDA2Y2YwZTFkN2RjNGE4Nzg0YTE4OGE2MjM4ZTNj
MTNhYmUwHhcNMjYwNjExMjMwMDIzWhcNMjYwNjEyMjMwMDIzWjAzMTEwLwYDVQQD
EygwOTg3M2Q1NmM5Mzk0M2Y5ZDMwNjQ4YTNjNWE3YTllODcwMzRlNjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0PKcsiXq5PIgvYn7thw1+BD2D66
GAHRbQisMZXTBoYbvniIBhqHd3MGNWPlEL+nsckxNVuCgyZEkRMINn3VM0AEFEfS
yKkEMsmOY1rivSJiB5yMk3V5LrbPtgh/WXPipE2/67bIYvOLI1281SMhV+3Sm2Qf
o3xuWe3O+A1RsQuc+ISXtRh0nJGgjPSWUdGpK6PUhOU3N/YkkTpk9Qps5VZKxrO6
1aw+P42VUlJqm2RQewb+C8M5YoE6FjGdBtEzV0q+0fvTlNp74H7eAyqW0dciTuat
wXxx3xXpoLpaYqzcXEfWzi0sgujCPUSRHH52tQxrAKwDJXlZDoXv4GMQTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmHPVbJOUP50wZIo8WnqehwNOaVMB8GA1UdIwQY
MBaAFDRgNAbPDh19xKh4ShiKYjjjwTq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkdBMEJzOE9IWDNFcUhoS0dJcGlPT1BCT3I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80NWE1MzktNGExZS00OTRiLWJlOTQt
MWVlNTZjNWNmYmY1LzEvTkdBMEJzOE9IWDNFcUhoS0dJcGlPT1BCT3I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS80NWE1MzktNGExZS00OTRiLWJlOTQtMWVlNTZjNWNmYmY1
LzEvTkdBMEJzOE9IWDNFcUhoS0dJcGlPT1BCT3I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADcnetg1c
Q+6s5ZMjVrGsi3AkDZF1znxjv/rMyToanFMhuoM/JtW6y0HJz7TtWt3Wqe0oAIK3
/Wp+xBGuFUkBwrBksnAb8zoktNa8HgwFLThZOJgw6ec34/yYFMSbH0At5Gub/d3X
Wnc3h3a5nfDSf5CjdxSAVNJtPlJYaiEDXdSTJ/kVVCrjACiJNTx4+AtBedsFYN7k
t7eN3+MeWtJPH5v0jzEUKdi2evGPuBJk3f4hJieAOqrU8xrKh1ezWiF6CgWnpygY
qKwC0i3fgwBjKgNgnxaSFZV/vOtP3XEQxIUFZPc8Kgbv2Qau8h8CQqL/iiYZS9xQ
H0ySLN29h5+lAw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:35:26 2026 by rpki-client