Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
File: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft (raw, json)
Hash identifier: v8ahMdQ5oPSRPj+r5/+Lf8wikJ5KUJKOV2W4oTLgNbg=
Subject key identifier: DF:80:BF:A3:D4:86:92:C0:7B:9C:E7:50:06:3D:8E:31:5B:16:78:38
Authority key identifier: 34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
Certificate issuer: /CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Certificate serial: 019CE3A2FDDBAA5D85BCBFBC14CA8756068B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
Manifest number: 055D
Signing time: Thu 12 Mar 2026 20:00:35 +0000
Manifest this update: Thu 12 Mar 2026 20:00:35 +0000
Manifest next update: Fri 13 Mar 2026 20:00:35 +0000
Files and hashes: 1: B0_cwZ4nzA_Ywxh0ZIm8WPjoc0w.roa (hash: Z+AKsVLV4+wS5Tyt+lO7+23YuqTpw2iHXm3p9OVCEys=)
2: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl (hash: 6Dwgr7uCAuLfLnZhmhd/RfmsTBmF2tLPoLvd7rfDgyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:a2:fd:db:aa:5d:85:bc:bf:bc:14:ca:87:56:06:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Validity
Not Before: Mar 12 20:00:35 2026 GMT
Not After : Mar 13 20:00:35 2026 GMT
Subject: CN=df80bfa3d48692c07b9ce750063d8e315b167838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f6:6f:0d:b6:89:c6:66:09:8e:bc:e5:c4:bd:
0e:26:ec:a0:b3:0a:94:32:57:98:36:6a:da:56:aa:
ef:4f:c3:0f:fb:d0:1e:f8:2b:91:9a:91:b2:39:40:
d9:47:33:da:94:36:db:78:45:88:c9:da:49:51:ef:
fd:d5:b0:cd:42:cc:39:05:99:dd:20:21:6b:ea:21:
1f:67:96:b4:42:83:55:cc:d4:4a:a2:d7:f7:bd:d2:
28:1e:40:d4:ed:09:e5:de:0b:a7:4b:ce:de:b7:9f:
12:02:84:b6:a1:40:ed:9d:8f:3f:af:63:4b:8c:3b:
14:bd:f0:bb:03:e1:a2:ec:3f:ae:8e:e9:8e:52:2e:
6f:bf:61:d1:df:ad:af:94:25:f5:eb:e8:12:1d:d0:
77:55:9c:be:c2:6d:53:3e:63:5d:6d:7b:da:6a:4c:
79:3a:62:07:29:6b:f0:36:d3:7b:7c:4e:26:a3:59:
e5:39:de:58:74:bd:7d:c8:64:4a:cd:f8:1a:2b:84:
f1:96:32:d8:60:bf:b6:bd:06:ef:a3:08:e9:9a:91:
68:5f:a7:0a:9b:ed:8e:22:07:56:51:73:c0:ea:87:
0d:07:bb:eb:03:fd:16:2a:12:f8:e7:54:96:09:21:
3b:7a:6d:d4:13:63:fd:e5:4a:1e:be:67:40:8e:12:
bd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:80:BF:A3:D4:86:92:C0:7B:9C:E7:50:06:3D:8E:31:5B:16:78:38
X509v3 Authority Key Identifier:
keyid:34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ee:10:ac:a4:dd:b8:38:9d:bf:b4:30:3b:bb:98:31:bc:2a:
85:aa:73:11:36:53:29:91:fa:9c:f0:22:44:c3:50:c4:54:50:
2a:0a:c6:15:da:fd:4e:a7:c6:f8:b0:30:f8:15:e7:2e:f6:d4:
79:57:a9:00:7c:dc:68:c7:38:52:b0:b6:ac:6e:62:58:35:d5:
55:d0:f9:d2:90:e2:1f:4a:a6:50:26:10:c9:e0:02:55:8b:70:
64:a5:6e:3a:42:27:43:36:66:1d:7b:a2:86:fd:0d:ac:d7:f3:
22:68:dd:3a:ff:42:70:a2:a7:02:82:a3:c4:80:2d:ac:64:c6:
03:19:6f:92:ec:46:b1:1c:d6:54:30:47:ed:71:ae:58:b4:d7:
cb:7d:d3:7c:96:78:fa:58:b8:93:98:72:b2:06:0d:c3:ab:f4:
f2:45:bb:95:ee:3a:48:e8:01:84:18:28:5e:7c:d1:ab:69:c2:
c4:12:48:ec:1c:86:f0:29:16:a1:92:b7:9b:0f:b5:8c:ca:9b:
ff:6e:46:80:88:70:00:5a:b5:af:03:75:62:fc:3d:58:36:54:
30:44:54:e6:b3:a1:b6:39:0d:0a:4e:13:6b:37:3d:a7:41:48:
d0:90:38:cb:f4:af:63:9a:41:2f:56:be:37:b8:07:ae:e5:8e:
7e:3a:4f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:48:43 2026 by rpki-client