Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
File: NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft (raw, json)
Hash identifier: ls4vYfwtZnEBvMMmexjwLeYk33IPvFkQGaCzDnK8v0s=
Subject key identifier: C0:20:89:5A:0C:2D:DE:42:12:6E:9F:02:20:11:8C:4A:DC:CE:3A:ED
Authority key identifier: 35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
Certificate issuer: /CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Certificate serial: 01A0DD97884261BDA9D69FB60B9C0C7BDF53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
Manifest number: 12F1
Signing time: Sat 26 Sep 2026 12:01:30 +0000
Manifest this update: Sat 26 Sep 2026 12:01:30 +0000
Manifest next update: Sun 27 Sep 2026 12:01:30 +0000
Files and hashes: 1: 1dnMq6ZCcFb70edGxGmL0hiobfI.roa (hash: +vsRlNxh8n7NYthhGysqntNveXYKCA8nzfq82JjmeCw=)
2: NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl (hash: 9isrRQQjRt20ugZjZzA5FVpxWwKA/p2VM5GpBgmyuio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:88:42:61:bd:a9:d6:9f:b6:0b:9c:0c:7b:df:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Validity
Not Before: Sep 26 12:01:30 2026 GMT
Not After : Sep 27 12:01:30 2026 GMT
Subject: CN=c020895a0c2dde42126e9f0220118c4adcce3aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:44:3e:4c:fe:b1:5a:20:aa:9d:c1:fd:aa:
6f:cc:a1:2a:97:c4:05:d0:24:11:86:11:07:ee:e6:
86:57:21:8e:02:9a:29:97:69:34:7f:6b:26:fd:60:
16:48:e2:cc:85:6d:a8:1a:99:09:0a:58:7b:fd:15:
c9:e5:d0:f2:76:ca:a1:f4:50:63:c0:0f:03:16:9d:
04:54:95:0b:53:3f:e5:1e:d9:6e:ac:3c:12:a5:eb:
81:6d:dc:17:8f:fa:a4:8f:82:7d:26:0d:fc:04:52:
e1:44:d0:e5:65:5b:d5:e9:94:89:26:a9:64:86:4f:
74:74:c2:23:97:7f:fe:50:11:a6:8e:a4:0d:d7:e6:
4a:c7:e5:fa:85:a7:38:14:a7:15:99:1b:73:63:c1:
35:e7:89:c6:31:c7:f6:c3:4a:14:66:21:77:7a:b3:
69:ce:6f:d9:5a:df:b1:24:28:11:f1:ec:7c:e4:14:
c2:fb:78:c0:78:31:65:5a:09:9e:2a:6b:fc:f8:59:
09:7f:b0:4d:60:23:68:56:a1:56:78:ee:e7:dd:6b:
8c:73:40:f9:97:83:f7:06:b8:31:33:00:03:31:6d:
fa:85:9b:54:0c:c1:8e:4a:65:9d:1c:da:68:46:c6:
a0:b5:a6:8d:ae:da:fb:f7:82:d8:03:d3:19:e5:6d:
f8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:20:89:5A:0C:2D:DE:42:12:6E:9F:02:20:11:8C:4A:DC:CE:3A:ED
X509v3 Authority Key Identifier:
keyid:35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:82:93:31:f6:08:e1:25:ed:50:74:1a:81:e4:1c:f5:a4:e1:
3f:6b:bc:10:8b:79:e6:4e:6a:40:8e:fb:8c:9a:af:23:c9:f6:
52:b6:3b:7b:3a:fc:89:a7:b3:90:9d:73:10:98:ed:34:3c:31:
80:06:7e:84:4e:e6:4a:2f:9e:f2:95:63:14:3b:7c:8a:66:43:
ec:91:6d:b0:cb:58:25:19:bc:31:ec:2c:8f:f1:27:e1:90:49:
99:ac:bf:18:0d:ad:a6:ce:21:10:08:9c:4e:a8:8c:45:13:f3:
96:cc:7b:d6:cd:a8:81:96:dc:c9:8c:e0:4e:67:96:48:7e:76:
6a:98:6b:f8:72:d7:6c:7a:6b:b2:c2:1b:0f:21:28:f1:69:8a:
da:d7:b6:2d:2d:1d:e3:4c:b0:c2:40:fd:5f:f0:83:26:c1:03:
3b:08:41:03:3e:91:f7:e6:01:6e:40:c0:af:88:08:44:b1:8b:
3b:7f:92:33:81:5f:77:d6:2d:0b:81:0a:43:f4:4e:17:84:d2:
6f:89:88:ff:a0:ea:71:67:f8:33:13:3f:12:48:36:93:2b:04:
17:fa:b4:e0:21:6f:db:2f:0a:d9:f4:d3:00:c2:af:b7:5c:48:
cd:6e:eb:60:e6:da:9f:ab:8c:a0:f6:96:c2:6e:9a:8f:b1:e2:
86:ec:41:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 21:34:52 2026 by rpki-client