Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
File: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft (raw, json)
Hash identifier: i5i78nplklg/RiTpmWM1p2EhbcXCNL7jgp1sF8Fn3HY=
Subject key identifier: 7D:76:5C:9B:6B:08:03:90:A0:7D:30:8E:25:27:E7:E1:F0:83:7C:22
Authority key identifier: 34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
Certificate issuer: /CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Certificate serial: 01A08E3287A7195935589D5A5AC32AC08D9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
Manifest number: 0743
Signing time: Fri 11 Sep 2026 02:01:11 +0000
Manifest this update: Fri 11 Sep 2026 02:01:11 +0000
Manifest next update: Sat 12 Sep 2026 02:01:11 +0000
Files and hashes: 1: B0_cwZ4nzA_Ywxh0ZIm8WPjoc0w.roa (hash: Z+AKsVLV4+wS5Tyt+lO7+23YuqTpw2iHXm3p9OVCEys=)
2: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl (hash: LKHbRsyGxywSX8QsXzwfVMGfaW8eUFOezjxZrINY3u8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:32:87:a7:19:59:35:58:9d:5a:5a:c3:2a:c0:8d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Validity
Not Before: Sep 11 02:01:11 2026 GMT
Not After : Sep 12 02:01:11 2026 GMT
Subject: CN=7d765c9b6b080390a07d308e2527e7e1f0837c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1b:79:da:b9:1e:f6:f1:99:6f:8f:77:c1:64:
a0:25:06:8a:49:e6:e7:0a:aa:58:3e:07:86:e2:b2:
72:99:3c:5a:e4:a8:ac:be:fc:3d:e9:bf:32:9f:d6:
a0:52:5c:ab:b9:36:ab:0b:6d:6c:5c:fd:92:34:3c:
54:fc:85:fb:9f:40:e8:37:46:87:30:6b:46:e7:fe:
48:d8:91:f1:7d:66:a7:63:cf:5d:66:c8:28:f1:57:
a6:66:6d:e2:26:0b:e1:d7:35:f4:9b:13:76:0e:a3:
07:b0:b1:4c:ab:09:7f:1f:21:29:38:15:e3:ef:11:
ae:ae:bc:7c:3f:d1:b5:47:94:4e:27:7d:85:d3:5f:
2d:5e:bd:9c:fb:72:94:3d:5e:db:fb:5c:66:8e:06:
d7:33:ad:ee:81:47:2e:03:df:b4:66:6a:86:70:fc:
7d:f4:6d:9b:df:aa:cb:24:72:a9:33:97:c1:92:2c:
21:9e:5f:ab:07:2b:a9:39:29:78:3d:06:fa:0c:b3:
cc:3a:e7:d0:65:f2:70:e3:bd:91:41:d2:65:32:8d:
87:5e:0d:58:5e:f9:68:cb:1b:ab:ac:bd:79:8c:d5:
a7:1a:fb:cf:2d:f6:6b:9d:3b:c9:a0:e8:b9:7b:a6:
82:e0:d7:7d:bd:e8:ea:b5:2f:4a:74:b5:45:ab:d7:
09:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:76:5C:9B:6B:08:03:90:A0:7D:30:8E:25:27:E7:E1:F0:83:7C:22
X509v3 Authority Key Identifier:
keyid:34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b9:04:44:55:d0:82:24:c3:b2:33:36:79:7d:b3:53:54:ed:
92:c9:17:c1:df:61:c4:a3:00:7f:d9:1c:5f:0c:ad:6a:df:74:
a6:82:3d:ea:97:54:eb:b8:f0:e4:cb:1f:b2:0c:a8:7f:16:cd:
10:46:e5:e8:a3:80:86:38:61:79:81:f3:38:6a:c6:6a:36:b1:
69:b5:87:62:37:38:61:6a:6a:98:f0:50:62:46:b2:3f:6c:e6:
6c:f5:b8:c4:b5:d9:7f:d8:1f:58:80:45:36:8c:cc:8d:97:9c:
61:d3:ce:7d:69:a4:cc:ed:7d:1b:90:42:86:71:a6:00:1d:c7:
33:41:d8:c8:25:9d:31:c5:f2:af:17:2e:63:94:9a:d7:fb:3e:
32:56:f1:62:d7:b3:16:47:a6:57:24:c7:da:85:26:7e:f0:1c:
18:8f:c5:f3:74:5f:57:db:06:3b:f9:5d:4c:5e:9a:4e:f0:82:
ca:2a:2f:24:1d:a8:93:c2:42:b2:cd:c8:18:3f:d2:ed:61:45:
3c:6c:d5:de:f4:bd:1f:3c:10:01:67:c1:79:8d:fb:e8:19:66:
ae:de:ea:d9:c3:05:18:07:c3:38:d5:e6:6a:7d:7f:3c:49:3d:
5b:99:8e:50:f3:cd:d1:71:7e:24:d5:b1:03:f9:7b:7b:7d:3d:
1d:88:46:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:58:43 2026 by rpki-client