Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
File: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft (raw, json)
Hash identifier: HAgQp8XmDGXjhCTl23BvpfVVIKSssB7CxvrPH70mIms=
Subject key identifier: 96:62:2C:AB:AF:19:F1:C9:1B:73:6A:65:F9:48:56:A8:F3:4B:71:87
Authority key identifier: 34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
Certificate issuer: /CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Certificate serial: 019D9B1A027303278FFC17D63F889CF5ED29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
Manifest number: 05BC
Signing time: Fri 17 Apr 2026 11:01:06 +0000
Manifest this update: Fri 17 Apr 2026 11:01:06 +0000
Manifest next update: Sat 18 Apr 2026 11:01:06 +0000
Files and hashes: 1: B0_cwZ4nzA_Ywxh0ZIm8WPjoc0w.roa (hash: Z+AKsVLV4+wS5Tyt+lO7+23YuqTpw2iHXm3p9OVCEys=)
2: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl (hash: k5bL01nsS1o/8cO8XO9hinSA8Ya7KeVRzKyIx+K2Yog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:1a:02:73:03:27:8f:fc:17:d6:3f:88:9c:f5:ed:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Validity
Not Before: Apr 17 11:01:06 2026 GMT
Not After : Apr 18 11:01:06 2026 GMT
Subject: CN=96622cabaf19f1c91b736a65f94856a8f34b7187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:14:91:60:d6:46:8b:b4:75:8b:d8:3f:78:a4:
8b:48:c9:90:4e:f6:eb:d6:61:0d:08:1f:87:a7:e9:
85:52:b3:3c:81:a0:d4:ce:a9:e1:a7:51:1e:bb:db:
20:cf:80:71:00:50:08:3b:79:ae:fe:73:90:3f:73:
46:41:33:a8:d1:fd:c7:80:e3:5c:c2:77:4e:5c:7d:
2e:4e:55:7d:40:21:ca:b0:71:c1:fd:5c:a2:e1:4e:
9d:04:5d:e8:a6:68:fb:a1:fd:0a:af:74:b8:ef:b4:
de:3a:b3:5c:80:80:80:8a:e3:b9:74:11:0a:a7:74:
89:3e:a6:23:dd:72:24:f5:fe:50:0b:3c:1c:1e:53:
c7:06:a4:f8:25:4a:f2:80:ea:d1:a4:cb:74:78:9b:
2e:31:c3:35:c9:36:95:f9:cc:45:8b:5b:ac:bc:b8:
af:85:a7:97:28:47:fd:23:7d:ce:d2:81:75:95:5c:
cd:41:4e:63:60:d4:d8:8c:9a:c2:39:c9:31:d2:15:
c9:b9:34:53:63:b3:20:ab:01:3f:77:da:67:aa:0a:
ba:57:72:6c:ee:2d:e5:5e:53:1a:69:be:d2:23:5e:
c9:6d:f4:e5:40:48:90:c0:de:16:10:2d:a8:d2:db:
1f:26:51:74:30:40:0b:3b:fb:aa:7b:fd:05:c1:bb:
a2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:62:2C:AB:AF:19:F1:C9:1B:73:6A:65:F9:48:56:A8:F3:4B:71:87
X509v3 Authority Key Identifier:
keyid:34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:3d:3a:1e:b4:76:4c:f9:41:a5:36:25:07:c9:44:56:49:25:
96:09:ce:6a:d1:58:7d:2d:a9:ad:2f:1d:4c:17:8f:c3:78:4a:
69:0e:56:ff:84:7f:b5:32:49:82:70:7e:74:64:92:bd:58:1c:
ef:df:7b:88:ed:c2:2c:63:7a:0d:f9:b2:e4:82:cf:25:e1:e4:
78:1a:dc:79:d5:72:6a:04:a8:bc:70:7d:8e:f9:10:4a:d0:03:
96:46:c4:88:e5:84:45:48:f7:e0:f6:90:b3:1c:eb:1b:27:9d:
1c:a0:eb:3f:8e:01:19:13:2e:aa:2e:8a:20:69:9a:d9:0e:e0:
9b:00:1b:02:07:4b:13:80:e8:c7:55:e6:70:19:01:a9:12:9b:
63:7b:55:e9:af:93:9d:60:39:96:34:16:61:82:3d:21:67:4d:
19:2e:ea:da:07:64:a7:fa:b8:27:47:a3:10:9e:59:78:0f:f8:
f9:54:68:83:7d:c6:54:ac:26:37:9d:3e:da:ee:a0:a1:25:e9:
bf:40:7e:ed:3d:41:2f:22:0c:b4:de:22:11:48:79:3a:aa:6b:
fc:3f:06:4a:57:80:21:9f:9e:77:89:1f:57:7b:e7:c6:8c:af:
b0:ba:7d:c9:67:6b:da:e8:04:05:00:59:52:1e:88:dc:08:a0:
7c:26:78:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGgJzAyeP/BfWP4ic9e0pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NjAzNDA2Y2YwZTFkN2RjNGE4Nzg0YTE4OGE2MjM4ZTNj
MTNhYmUwHhcNMjYwNDE3MTEwMTA2WhcNMjYwNDE4MTEwMTA2WjAzMTEwLwYDVQQD
Eyg5NjYyMmNhYmFmMTlmMWM5MWI3MzZhNjVmOTQ4NTZhOGYzNGI3MTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxSRYNZGi7R1i9g/eKSLSMmQTvbr
1mENCB+Hp+mFUrM8gaDUzqnhp1Eeu9sgz4BxAFAIO3mu/nOQP3NGQTOo0f3HgONc
wndOXH0uTlV9QCHKsHHB/Vyi4U6dBF3opmj7of0Kr3S477TeOrNcgICAiuO5dBEK
p3SJPqYj3XIk9f5QCzwcHlPHBqT4JUrygOrRpMt0eJsuMcM1yTaV+cxFi1usvLiv
haeXKEf9I33O0oF1lVzNQU5jYNTYjJrCOckx0hXJuTRTY7MgqwE/d9pnqgq6V3Js
7i3lXlMaab7SI17JbfTlQEiQwN4WEC2o0tsfJlF0MEALO/uqe/0FwbuiKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZiLKuvGfHJG3NqZflIVqjzS3GHMB8GA1UdIwQY
MBaAFDRgNAbPDh19xKh4ShiKYjjjwTq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkdBMEJzOE9IWDNFcUhoS0dJcGlPT1BCT3I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80NWE1MzktNGExZS00OTRiLWJlOTQt
MWVlNTZjNWNmYmY1LzEvTkdBMEJzOE9IWDNFcUhoS0dJcGlPT1BCT3I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS80NWE1MzktNGExZS00OTRiLWJlOTQtMWVlNTZjNWNmYmY1
LzEvTkdBMEJzOE9IWDNFcUhoS0dJcGlPT1BCT3I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlD06HrR2
TPlBpTYlB8lEVkkllgnOatFYfS2prS8dTBePw3hKaQ5W/4R/tTJJgnB+dGSSvVgc
7997iO3CLGN6Dfmy5ILPJeHkeBrcedVyagSovHB9jvkQStADlkbEiOWERUj34PaQ
sxzrGyedHKDrP44BGRMuqi6KIGma2Q7gmwAbAgdLE4Dox1XmcBkBqRKbY3tV6a+T
nWA5ljQWYYI9IWdNGS7q2gdkp/q4J0ejEJ5ZeA/4+VRog33GVKwmN50+2u6goSXp
v0B+7T1BLyIMtN4iEUh5Oqpr/D8GSleAIZ+ed4kfV3vnxoyvsLp9yWdr2ugEBQBZ
Uh6I3AigfCZ4Kw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:39:12 2026 by rpki-client