Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
File: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft (raw, json)
Hash identifier: Fcrfu++EzuRU5EZAmlQAuaqrxGhy2TBVcwWKBMprXpU=
Subject key identifier: 20:5A:7F:B9:3B:99:31:D0:B6:B8:DC:43:14:BE:84:C2:92:56:C6:65
Authority key identifier: 34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
Certificate issuer: /CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Certificate serial: 01A17BBB9730CE56DF1D8414EB6A35F22634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
Manifest number: 07BE
Signing time: Tue 27 Oct 2026 05:00:53 +0000
Manifest this update: Tue 27 Oct 2026 05:00:53 +0000
Manifest next update: Wed 28 Oct 2026 05:00:53 +0000
Files and hashes: 1: B0_cwZ4nzA_Ywxh0ZIm8WPjoc0w.roa (hash: Z+AKsVLV4+wS5Tyt+lO7+23YuqTpw2iHXm3p9OVCEys=)
2: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl (hash: 4s65J0h2DqqTcQLZa3ux8BWPq+iL16iDI3D/S3LA3nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:bb:97:30:ce:56:df:1d:84:14:eb:6a:35:f2:26:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Validity
Not Before: Oct 27 05:00:53 2026 GMT
Not After : Oct 28 05:00:53 2026 GMT
Subject: CN=205a7fb93b9931d0b6b8dc4314be84c29256c665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:28:ff:fa:6c:cb:9a:74:3d:25:fa:af:76:c6:
69:e0:c8:cb:b9:1a:32:56:13:fa:1b:0c:a7:32:f8:
2d:77:c4:29:90:07:e8:25:04:6f:71:f5:f1:20:ac:
f9:5e:7b:e0:fd:50:bd:49:6a:22:d1:b8:b5:5e:ae:
18:9e:fd:95:d5:52:97:ae:5d:c0:c8:65:ae:bf:31:
21:6b:c1:a4:c4:47:03:77:7d:53:d9:e4:c8:5e:01:
12:29:f4:96:1d:9d:75:69:0c:b3:31:4e:cc:00:a6:
48:90:b1:a7:7b:21:8b:17:cf:17:54:bd:06:08:14:
9a:84:e5:38:43:6c:8a:af:1b:df:d9:af:1e:fd:c3:
1e:b0:6f:38:16:47:7e:33:9e:62:96:0a:df:29:1f:
46:18:a4:27:7b:0e:9b:79:f8:64:4d:c6:d8:d8:88:
50:07:69:50:bc:55:50:c8:8f:c5:fc:8e:4f:ec:fd:
b2:e3:54:00:d9:4b:82:e0:e1:21:f8:6f:21:a1:79:
9c:a9:ac:51:18:1f:4f:44:cb:d3:0f:d7:a7:0d:b3:
53:8f:b3:e9:d5:f8:75:be:e3:73:94:07:2c:18:6c:
5f:bd:98:e0:34:f4:59:31:fd:49:d9:24:cb:e9:1e:
a5:ed:5f:7f:f4:57:e4:79:2a:14:6d:33:50:3f:ea:
39:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5A:7F:B9:3B:99:31:D0:B6:B8:DC:43:14:BE:84:C2:92:56:C6:65
X509v3 Authority Key Identifier:
keyid:34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:80:0f:f1:51:87:7b:02:55:c0:44:72:1c:32:1d:fc:ef:50:
7b:47:4b:7b:35:c3:46:a1:be:7e:05:65:a2:4c:2c:0b:68:d2:
7b:f8:84:96:9e:9a:17:8c:f2:01:d7:73:88:c7:2a:67:f6:33:
1b:c0:67:2a:25:c9:f8:9c:cc:76:a0:9e:e9:12:24:a9:51:89:
48:79:41:f6:5e:7f:db:b4:9e:d0:67:62:18:cf:36:2d:27:94:
66:49:48:ed:45:cc:5e:7e:21:ef:0a:34:6c:f6:58:24:87:be:
01:96:61:36:dd:5e:aa:9f:8d:af:2d:20:8b:0a:43:68:05:0c:
1e:ac:00:b5:f7:24:38:9c:31:9f:3e:22:a6:1f:07:a9:c0:04:
4d:95:4b:a3:b4:69:12:23:3f:c4:13:fb:e9:cc:21:5b:b3:31:
49:cf:04:8d:89:7e:00:d1:f7:c3:03:21:f7:f7:98:c7:fd:8d:
46:ec:2b:68:da:92:0d:c6:8d:21:39:37:e8:28:71:e7:41:4b:
c2:bc:31:c4:0e:8d:05:33:55:de:f1:3b:be:22:d9:64:67:15:
cf:b2:c0:6d:bf:7e:06:9d:d6:65:42:f3:9b:4d:48:da:08:48:
e2:06:ab:58:e8:27:9d:e0:2c:c5:d9:d2:91:bf:b2:62:ee:d8:
64:89:0f:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF7u5cwzlbfHYQU62o18iY0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NjAzNDA2Y2YwZTFkN2RjNGE4Nzg0YTE4OGE2MjM4ZTNj
MTNhYmUwHhcNMjYxMDI3MDUwMDUzWhcNMjYxMDI4MDUwMDUzWjAzMTEwLwYDVQQD
EygyMDVhN2ZiOTNiOTkzMWQwYjZiOGRjNDMxNGJlODRjMjkyNTZjNjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCj/+mzLmnQ9JfqvdsZp4MjLuRoy
VhP6GwynMvgtd8QpkAfoJQRvcfXxIKz5Xnvg/VC9SWoi0bi1Xq4Ynv2V1VKXrl3A
yGWuvzEha8GkxEcDd31T2eTIXgESKfSWHZ11aQyzMU7MAKZIkLGneyGLF88XVL0G
CBSahOU4Q2yKrxvf2a8e/cMesG84Fkd+M55ilgrfKR9GGKQnew6befhkTcbY2IhQ
B2lQvFVQyI/F/I5P7P2y41QA2UuC4OEh+G8hoXmcqaxRGB9PRMvTD9enDbNTj7Pp
1fh1vuNzlAcsGGxfvZjgNPRZMf1J2STL6R6l7V9/9FfkeSoUbTNQP+o5iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBaf7k7mTHQtrjcQxS+hMKSVsZlMB8GA1UdIwQY
MBaAFDRgNAbPDh19xKh4ShiKYjjjwTq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkdBMEJzOE9IWDNFcUhoS0dJcGlPT1BCT3I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80NWE1MzktNGExZS00OTRiLWJlOTQt
MWVlNTZjNWNmYmY1LzEvTkdBMEJzOE9IWDNFcUhoS0dJcGlPT1BCT3I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS80NWE1MzktNGExZS00OTRiLWJlOTQtMWVlNTZjNWNmYmY1
LzEvTkdBMEJzOE9IWDNFcUhoS0dJcGlPT1BCT3I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKoAP8VGH
ewJVwERyHDId/O9Qe0dLezXDRqG+fgVlokwsC2jSe/iElp6aF4zyAddziMcqZ/Yz
G8BnKiXJ+JzMdqCe6RIkqVGJSHlB9l5/27Se0GdiGM82LSeUZklI7UXMXn4h7wo0
bPZYJIe+AZZhNt1eqp+Nry0giwpDaAUMHqwAtfckOJwxnz4iph8HqcAETZVLo7Rp
EiM/xBP76cwhW7MxSc8EjYl+ANH3wwMh9/eYx/2NRuwraNqSDcaNITk36Chx50FL
wrwxxA6NBTNV3vE7viLZZGcVz7LAbb9+Bp3WZULzm01I2ghI4garWOgnneAsxdnS
kb+yYu7YZIkPtw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 13:20:30 2026 by rpki-client