Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
File: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft (raw, json)
Hash identifier: eW/S6ABsDleEGAwu0HvBpELTbWPC/afbqiZTE5pK5YQ=
Subject key identifier: BA:99:B8:8B:90:1B:E1:04:64:27:0B:81:01:EF:37:B2:FC:97:09:33
Authority key identifier: 34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
Certificate issuer: /CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Certificate serial: 019EC0A401B98D574AEF1604D90193A4BB70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
Manifest number: 0654
Signing time: Sat 13 Jun 2026 11:00:34 +0000
Manifest this update: Sat 13 Jun 2026 11:00:34 +0000
Manifest next update: Sun 14 Jun 2026 11:00:34 +0000
Files and hashes: 1: B0_cwZ4nzA_Ywxh0ZIm8WPjoc0w.roa (hash: Z+AKsVLV4+wS5Tyt+lO7+23YuqTpw2iHXm3p9OVCEys=)
2: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl (hash: CAeNsYjdiIqRujSS6skSScxvtErO7r+apXyyQEw78NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:01:b9:8d:57:4a:ef:16:04:d9:01:93:a4:bb:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Validity
Not Before: Jun 13 11:00:34 2026 GMT
Not After : Jun 14 11:00:34 2026 GMT
Subject: CN=ba99b88b901be10464270b8101ef37b2fc970933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:52:2c:e2:ee:54:75:44:27:e7:f9:df:b6:8b:
5f:58:98:46:fb:a9:4a:60:9a:1d:a6:bb:41:62:92:
58:3b:f2:f2:4d:5f:d9:d9:85:b2:8f:9c:72:7b:b4:
05:67:e7:c9:c6:6a:78:3e:d9:3e:13:7e:d6:4a:bf:
fa:28:32:5e:07:8d:ae:59:71:df:f1:ea:a0:49:62:
2c:b8:f6:7a:fb:41:ab:e9:35:1b:e0:44:0c:48:4d:
b1:ab:bd:4f:c9:08:cd:2a:85:d5:69:b1:47:3d:d1:
ae:65:0b:d9:70:67:a7:5d:a8:6d:8e:11:c5:e6:4f:
8a:a9:9b:13:44:54:f7:b1:37:fd:10:ef:4d:23:fe:
df:7d:77:ca:3c:f8:98:73:cc:17:b0:57:b5:78:b8:
6f:06:30:bc:c0:42:59:fb:ea:bb:d7:09:0e:db:5f:
bd:09:f8:b6:a1:f8:64:b4:2c:b0:49:9f:90:17:e1:
3a:aa:60:a6:51:f7:6c:ac:a1:b4:f9:91:88:d3:8d:
ad:99:39:1b:61:66:e3:20:38:75:54:1d:7b:dc:66:
e5:e8:2e:09:ee:f5:ca:20:a8:d1:9e:dc:6f:8e:5e:
ea:69:87:48:27:c4:bc:0d:b2:60:7d:6d:93:73:4a:
00:10:0e:f9:50:1c:3a:fe:49:be:37:94:1d:8b:86:
a8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:99:B8:8B:90:1B:E1:04:64:27:0B:81:01:EF:37:B2:FC:97:09:33
X509v3 Authority Key Identifier:
keyid:34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f9:9f:5a:ab:72:ec:80:f5:69:bc:b6:8a:56:41:0b:41:22:
3b:74:6c:37:d7:c2:50:e8:c7:2e:03:5d:61:f8:cf:92:ef:89:
73:6c:f5:3a:3d:53:3e:70:93:93:4f:a5:c0:0a:3f:8e:1e:7b:
6b:2f:c3:87:c7:9c:00:66:06:c9:86:7b:c6:81:46:dd:58:a8:
35:7f:ea:05:0e:01:af:e9:67:ba:f6:2d:94:9e:2c:2f:71:cf:
50:9b:7f:ce:53:9d:d1:f3:03:b3:99:f1:9f:3e:8e:bf:e8:0e:
07:6f:29:36:1f:96:4b:66:c9:b8:fb:5a:2a:4e:a8:5d:b9:e8:
86:60:0c:c8:72:f2:5c:48:eb:d3:29:30:f9:bf:17:e8:9c:45:
18:bf:cf:6d:eb:e3:6c:36:d5:5a:ce:57:8b:45:e4:21:4f:c8:
91:18:18:f9:d2:b3:f0:38:9d:d5:88:f8:ec:d5:5e:45:fa:e3:
24:6c:83:3a:53:30:bc:80:35:bc:4c:25:aa:26:78:60:42:c8:
9a:03:2c:ee:2f:80:34:03:fa:99:42:e9:ba:48:8d:55:ea:0f:
0e:ca:09:3b:c1:3f:79:41:95:4a:1e:9e:0d:3c:a0:74:11:23:
6a:3e:0c:37:b4:14:cb:92:1d:48:dd:c3:87:18:20:af:71:ae:
93:25:0a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:00:17 2026 by rpki-client