Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
File: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft (raw, json)
Hash identifier: pFFWgjVHF98fDFaKKLnyLCqm8b8qjPikGJDQjMadu5Q=
Subject key identifier: 68:9E:19:98:C1:76:46:DE:3E:71:E7:DE:C7:FC:C3:F7:6B:5D:4B:16
Authority key identifier: 34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
Certificate issuer: /CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Certificate serial: 019EB6FBE412DA5ED3EAD5244BDE4A61A7BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
Manifest number: 064F
Signing time: Thu 11 Jun 2026 14:00:21 +0000
Manifest this update: Thu 11 Jun 2026 14:00:21 +0000
Manifest next update: Fri 12 Jun 2026 14:00:21 +0000
Files and hashes: 1: B0_cwZ4nzA_Ywxh0ZIm8WPjoc0w.roa (hash: Z+AKsVLV4+wS5Tyt+lO7+23YuqTpw2iHXm3p9OVCEys=)
2: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl (hash: bwLLPaWiGzA8Ww973McQASUitgwhQA8zNkQnJY/UxkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:fb:e4:12:da:5e:d3:ea:d5:24:4b:de:4a:61:a7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Validity
Not Before: Jun 11 14:00:21 2026 GMT
Not After : Jun 12 14:00:21 2026 GMT
Subject: CN=689e1998c17646de3e71e7dec7fcc3f76b5d4b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:81:60:2f:45:56:33:a3:82:e1:ae:05:13:f0:
b3:89:a3:a5:52:d2:8a:16:3c:bf:96:38:ca:96:b3:
76:de:18:34:57:be:a8:91:98:78:37:a8:0a:84:fe:
ca:ba:13:2f:4d:bd:a1:95:d5:16:62:69:08:09:32:
83:c2:ea:78:c3:1b:6a:eb:c6:ee:87:66:da:c0:50:
e4:20:4b:17:85:52:57:35:94:9d:2e:29:18:b7:82:
11:4b:56:30:d1:a1:30:cf:53:ca:34:4c:3f:45:a0:
8c:ae:50:0c:f6:f7:73:ec:bc:03:10:3a:88:86:03:
f1:6e:1a:f5:93:6d:0e:35:b1:23:f1:60:91:30:e0:
7e:6d:57:4c:97:66:84:5f:9c:75:bb:89:85:e7:4f:
47:97:c0:fa:11:22:06:64:1d:27:f1:8e:87:b7:c4:
6e:4e:f9:e0:dc:d9:47:45:d5:64:36:5b:c3:c5:14:
49:97:f3:6d:0b:01:23:ce:79:8c:fa:e4:6d:f3:bf:
28:1f:1e:0a:ea:ba:b2:d6:87:5d:d3:bb:51:8e:32:
98:09:ca:8d:c8:ca:70:1e:50:9a:06:17:99:c6:e9:
ea:3e:5f:df:47:1d:70:01:76:62:45:23:1f:1c:43:
88:47:8b:a8:3b:54:54:fc:c1:ab:e0:6b:ed:31:46:
d9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9E:19:98:C1:76:46:DE:3E:71:E7:DE:C7:FC:C3:F7:6B:5D:4B:16
X509v3 Authority Key Identifier:
keyid:34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:06:a7:53:54:d7:b1:71:77:ec:fe:10:ee:e4:65:3c:b4:1b:
a8:17:d4:b3:da:d8:3f:39:83:9b:8d:94:1d:37:ce:0b:10:4c:
00:87:b3:0e:c7:e2:c0:84:02:6b:f5:9d:4f:bf:85:97:6f:e3:
4b:f4:71:e3:9e:c5:73:06:9f:84:46:e5:aa:b0:67:48:ca:c2:
52:68:00:8d:67:ef:b7:a1:4a:b3:41:81:18:a0:0b:d6:7d:4c:
e4:19:71:e5:d3:39:74:22:87:e6:e0:18:70:e4:4b:2f:08:e1:
41:7a:d0:88:f3:05:72:d1:32:d8:60:17:f0:45:19:d2:08:a8:
c3:e9:57:75:b6:1b:91:4a:40:e0:c1:67:78:c9:1b:d2:dc:b0:
f4:21:ec:d4:b4:75:cb:3d:25:b2:c1:f6:ad:04:2d:d1:87:2b:
c2:f6:fd:51:c0:19:c7:79:0f:d3:5c:cc:5f:14:1d:51:f4:13:
59:ef:98:e7:8e:2c:e2:66:fe:10:58:46:b1:b6:fa:2e:76:5a:
8f:68:b0:91:b6:06:3c:2c:05:a5:6f:3d:c1:82:96:55:31:40:
a8:5c:65:fe:ef:e7:26:d9:c7:ba:a8:e1:48:f0:c6:45:33:76:
9a:3a:ca:ba:92:5a:cf:e6:88:a6:d3:e3:91:6c:01:d6:cd:fa:
b1:24:ff:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:16:07 2026 by rpki-client