Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
File: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft (raw, json)
Hash identifier: TgkpKXikKpsODtNqex6qgpBOJEPY/qDTeuRRyCf41OU=
Subject key identifier: 62:DF:87:BD:D3:58:1F:3B:D0:5D:78:B1:7D:44:3E:6B:29:04:C8:0B
Authority key identifier: 34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
Certificate issuer: /CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Certificate serial: 019DCD4F6E3685ED745E3ED31635DF8E13A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
Manifest number: 05D6
Signing time: Mon 27 Apr 2026 05:00:27 +0000
Manifest this update: Mon 27 Apr 2026 05:00:27 +0000
Manifest next update: Tue 28 Apr 2026 05:00:27 +0000
Files and hashes: 1: B0_cwZ4nzA_Ywxh0ZIm8WPjoc0w.roa (hash: Z+AKsVLV4+wS5Tyt+lO7+23YuqTpw2iHXm3p9OVCEys=)
2: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl (hash: OT1T/9r8MrCVXYbzkVuTHplZGPNeQqvWKNskatGWvew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:4f:6e:36:85:ed:74:5e:3e:d3:16:35:df:8e:13:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Validity
Not Before: Apr 27 05:00:27 2026 GMT
Not After : Apr 28 05:00:27 2026 GMT
Subject: CN=62df87bdd3581f3bd05d78b17d443e6b2904c80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:87:22:79:5b:ea:ac:de:c3:cc:db:ad:8b:8a:
67:3a:34:62:c2:8c:2d:c4:32:6a:b5:05:a8:58:7b:
42:fe:f1:4e:82:53:8e:45:e5:ae:45:52:87:26:f4:
25:27:39:db:4b:d4:91:f3:1e:2d:0d:8f:64:68:84:
9d:67:69:59:3b:8a:ec:39:11:df:6a:87:cb:c1:01:
b4:93:93:f2:f8:e4:4e:01:e8:25:62:0d:a2:a4:e6:
53:c3:5a:07:90:27:a0:23:e1:c0:97:98:57:f3:21:
49:35:2a:c8:7d:10:04:2b:c3:c0:6f:dd:98:d5:8c:
1d:fd:02:73:cf:e5:fa:08:28:f6:5e:8d:86:9e:ba:
e9:aa:5f:5c:76:ce:94:71:2f:0e:51:5d:e5:4f:ea:
c5:67:60:99:59:e6:16:e1:bd:24:95:ac:b0:81:a5:
70:5f:b2:f3:56:bc:49:6e:07:ee:4b:d4:04:8e:ec:
0d:6c:d6:4d:b5:ec:31:9b:dd:1f:3f:21:b9:f4:7c:
ce:2f:8c:da:11:1d:c6:0a:7f:86:c3:89:36:eb:6c:
d3:ea:84:21:a4:6d:1b:68:6b:2f:a4:04:aa:a4:d6:
d3:8e:0f:b7:e1:7e:3b:86:7f:60:f2:5f:d0:2b:03:
6b:10:42:75:ad:6e:7b:ce:63:09:eb:2d:ea:36:dd:
7f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DF:87:BD:D3:58:1F:3B:D0:5D:78:B1:7D:44:3E:6B:29:04:C8:0B
X509v3 Authority Key Identifier:
keyid:34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9c:a3:ab:a1:dd:b1:9f:d6:96:c0:f8:f2:ab:24:c1:7d:63:
4b:32:10:7b:4a:f1:20:4c:1a:cb:9a:c1:40:20:0f:63:d2:36:
73:d9:4e:3f:c4:c6:d1:ca:3d:68:9c:1e:62:d8:dd:28:3b:31:
8f:42:df:57:d5:7e:63:f5:15:b1:94:4f:5d:c7:dd:53:8f:92:
a0:7e:18:6a:5e:78:c9:dc:47:b1:f6:b4:aa:94:47:cb:93:ef:
7c:ae:84:82:e2:c5:4d:a8:b5:bc:7b:0e:78:27:17:40:a9:ee:
51:d4:e1:e7:20:d2:75:90:a6:21:e7:65:59:8a:22:3b:69:fd:
1a:f7:6f:d3:5d:d9:3e:8f:7b:d4:60:40:a1:42:80:eb:d0:39:
13:08:c1:14:8c:07:bd:f6:8e:78:bd:5b:bf:26:85:39:9e:05:
81:ec:29:1d:70:8d:c3:fe:c2:fa:27:ca:d6:c9:61:ed:ed:c2:
49:66:c2:82:73:29:a7:46:58:5b:39:76:13:e0:a1:eb:50:c6:
8a:c0:c7:7a:46:ea:b4:2d:0a:f4:d9:2b:f5:df:57:bb:3f:a4:
e8:08:45:c0:17:e0:cd:de:33:a3:99:c4:f2:38:95:05:78:41:
01:56:9c:ec:e1:2e:df:96:79:62:a1:0f:f7:25:c9:f8:6a:03:
36:8c:e5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:25 2026 by rpki-client