Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
File: ntoJbbyNWaRCchzBadautkn1_T8.mft (raw, json)
Hash identifier: p0Fv2yob7S//4TbeYQup2h/pKH7vrH+DoB6aSMdwj+w=
Subject key identifier: F0:15:5E:62:77:66:B3:E9:40:DB:4D:9E:1E:DC:1E:61:FD:0A:07:EE
Authority key identifier: 9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F
Certificate issuer: /CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f
Certificate serial: 019CAC1054EF94B1F1FC70B494B230F37936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
Manifest number: 0CFA
Signing time: Mon 02 Mar 2026 01:01:17 +0000
Manifest this update: Mon 02 Mar 2026 01:01:17 +0000
Manifest next update: Tue 03 Mar 2026 01:01:17 +0000
Files and hashes: 1: liOq_bxUZWYwUQJdTmCeIacGUbE.roa (hash: GqI5g/TpMiOOPnrSMEIczXK7pRHXISy9b4nuM+CDj4s=)
2: ntoJbbyNWaRCchzBadautkn1_T8.crl (hash: DJGrh9b1KpKJOrk9CxKGGL+jUu4oH7C76PmCgCZPKWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:54:ef:94:b1:f1:fc:70:b4:94:b2:30:f3:79:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f
Validity
Not Before: Mar 2 01:01:17 2026 GMT
Not After : Mar 3 01:01:17 2026 GMT
Subject: CN=f0155e627766b3e940db4d9e1edc1e61fd0a07ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:2e:d8:f5:a5:6b:83:84:a1:45:3e:35:c4:52:
6d:cc:47:e2:92:d1:d2:75:46:73:e2:53:5b:8f:3e:
3b:15:22:d4:50:69:cc:4a:32:00:45:af:e1:3d:47:
9e:f1:c1:34:4c:c9:46:79:f0:38:ff:cb:9d:fa:ef:
4a:e2:7e:57:e2:b5:e0:ec:82:54:69:53:16:95:43:
4d:d4:d0:87:79:fc:da:9c:e3:60:6a:f3:6a:fc:1b:
da:77:e7:1b:00:07:0e:29:ff:b9:54:3a:0c:e9:5e:
42:de:0e:30:9f:c7:d4:df:1c:4c:7b:2b:ba:76:58:
30:88:55:40:09:d1:64:fa:78:46:79:1a:8b:3c:30:
f1:51:af:95:5b:80:5b:c6:27:4c:7a:cb:31:05:21:
34:be:88:83:17:41:0b:3f:e7:54:83:3f:41:7d:c9:
78:70:af:b9:98:39:40:04:0e:aa:5b:85:02:f7:6a:
db:55:6c:eb:fc:c8:62:e5:cb:b8:e7:9c:b5:a8:d9:
ac:86:cd:a3:da:cb:e2:2d:cf:1c:b9:08:37:c0:45:
03:ad:fa:00:96:9e:8f:b1:41:f1:9e:84:77:70:7e:
c0:eb:3a:96:9d:62:97:7e:20:29:49:ee:dc:18:45:
50:44:94:4e:6e:ec:61:2a:ff:e5:92:a0:1c:30:7d:
eb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:15:5E:62:77:66:B3:E9:40:DB:4D:9E:1E:DC:1E:61:FD:0A:07:EE
X509v3 Authority Key Identifier:
keyid:9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ff:ea:c8:ab:a5:63:ad:f8:4e:cb:13:ca:d8:24:ce:5d:52:
8b:6b:c3:a1:ba:73:f7:60:e8:09:24:93:8c:86:67:64:77:4a:
0f:b6:db:54:c4:cc:0b:e2:f4:3c:0a:17:97:2d:47:47:b8:cb:
1b:b2:18:63:15:ed:74:b5:42:2e:85:a5:2d:d8:02:1a:c8:70:
a8:64:c5:b3:bb:83:fe:2f:83:41:3a:bd:a5:e3:df:c6:1d:28:
ee:d1:fc:89:d9:3b:b1:84:af:8b:e7:fe:5e:6f:79:26:c8:b8:
cc:24:d3:55:7c:a2:d1:72:d5:2a:c8:16:4a:19:9d:7d:41:7d:
96:e8:7e:12:6c:87:9f:93:c0:43:e6:0d:1b:43:8a:27:7f:43:
4e:20:99:8d:34:bc:b6:61:a8:ae:99:66:94:87:57:86:75:4f:
c7:a7:ee:26:f5:28:23:e2:77:98:73:27:51:bb:a5:92:b8:86:
5c:5f:02:be:b8:d1:6c:1f:a0:67:af:3d:d7:cc:2b:7e:af:69:
74:85:d9:15:a5:2c:ef:ce:40:8d:ab:20:02:e1:7f:43:a2:ef:
ab:fc:b3:16:8a:fe:67:cf:06:ba:68:fa:7c:31:1e:98:38:df:
ee:89:d1:1a:fe:5c:fa:5b:f3:39:02:f5:66:3c:60:d1:c0:fe:
de:74:cb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:07:01 2026 by rpki-client