Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
File: NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft (raw, json)
Hash identifier: L6BEbqdOQA5nTO9TOJStNfUVen9mK+AFNjm4Vmpdhvo=
Subject key identifier: 80:26:7B:1A:8F:A2:5E:AA:D1:05:5F:20:A7:0A:0E:65:BD:34:D8:55
Authority key identifier: 35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
Certificate issuer: /CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Certificate serial: 019D9962FB6926E2E881BAD646902DAF8877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
Manifest number: 1140
Signing time: Fri 17 Apr 2026 03:01:33 +0000
Manifest this update: Fri 17 Apr 2026 03:01:33 +0000
Manifest next update: Sat 18 Apr 2026 03:01:33 +0000
Files and hashes: 1: 1dnMq6ZCcFb70edGxGmL0hiobfI.roa (hash: +vsRlNxh8n7NYthhGysqntNveXYKCA8nzfq82JjmeCw=)
2: NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl (hash: c6Ri2PurBRB+TgiEsUzy1fP5d4areYKdf5OomSt98/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:fb:69:26:e2:e8:81:ba:d6:46:90:2d:af:88:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Validity
Not Before: Apr 17 03:01:33 2026 GMT
Not After : Apr 18 03:01:33 2026 GMT
Subject: CN=80267b1a8fa25eaad1055f20a70a0e65bd34d855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:54:47:de:61:c7:e4:f1:ef:42:de:2b:9e:
a7:74:b1:e3:9d:2f:f3:54:53:34:88:27:bb:02:f4:
d8:5c:8b:b1:96:27:51:55:1b:af:82:b1:a3:0f:fa:
f5:15:7f:37:15:53:f7:be:36:ae:6e:a1:d5:60:27:
36:43:25:1b:bd:ca:9e:aa:ca:9b:43:3b:49:7d:c8:
84:da:cb:5f:3e:6e:d7:f6:f4:77:b8:21:78:2f:c7:
9f:69:27:f0:c6:03:f5:43:67:6d:6f:3b:2b:6e:27:
dc:6d:59:6c:24:11:92:76:33:8e:a3:4d:56:70:3f:
6f:05:b2:0b:a9:f3:4f:4a:40:1d:47:a0:0c:09:08:
68:82:12:89:c8:9d:c3:de:2e:c4:fd:cf:1e:ef:da:
be:0f:c1:29:04:49:3f:93:e8:ad:bf:8a:59:71:6c:
27:b1:0c:61:43:d9:bc:0d:61:43:85:9e:74:54:16:
e6:8b:84:b5:ee:8c:e7:3d:a3:07:48:02:36:83:79:
f0:d2:32:f4:bc:b6:bc:a1:8d:7d:08:c5:a3:3e:1c:
51:34:86:fa:24:cf:6d:a5:7e:d1:70:9b:60:4b:21:
5d:6a:0b:71:22:d0:55:e3:4c:73:2b:01:b2:a1:42:
45:80:21:b3:1e:cb:c0:8e:41:90:2a:8c:da:e9:8e:
7b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:26:7B:1A:8F:A2:5E:AA:D1:05:5F:20:A7:0A:0E:65:BD:34:D8:55
X509v3 Authority Key Identifier:
keyid:35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:5c:74:9c:bd:84:1c:5a:1a:18:b2:f6:d7:c1:27:5b:e9:3e:
7d:3c:79:06:bf:b1:51:d6:bc:41:5a:f5:54:e0:76:fa:be:df:
ad:76:9b:e1:3d:39:79:75:ed:25:83:67:b9:6c:89:f2:6f:ab:
ab:a6:c2:7a:2e:97:b0:4a:b5:87:08:4b:9f:39:41:23:d7:26:
06:59:30:a4:ff:d1:95:39:3f:24:0d:c3:1f:4b:da:bb:96:51:
8f:1c:33:eb:5d:25:b4:6f:ae:30:ff:13:75:fe:87:3a:42:68:
8d:8f:1c:c2:1a:d7:b9:49:b4:bc:39:2d:fd:89:d3:4b:f6:b2:
29:08:7f:3a:79:ad:ae:cf:dd:71:65:bc:69:f5:0b:56:3c:8b:
f6:3c:42:e2:6d:6d:87:c9:e9:89:34:33:48:e2:04:2e:f8:85:
94:02:01:bd:79:94:76:8b:75:e1:df:8f:d9:cd:ad:18:d2:fe:
00:a6:0c:af:91:d4:b2:96:f2:3e:40:f2:5e:83:55:86:a2:1e:
8a:de:d4:1a:d6:f3:a7:e3:ec:4a:10:47:5e:7c:e7:1d:12:de:
d2:90:b8:fb:03:75:9d:ff:90:9a:14:27:c4:41:c0:08:83:06:
71:04:d8:40:34:c6:84:9d:a5:d8:d4:3a:4d:fb:fd:af:50:44:
38:ad:4f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:16:03 2026 by rpki-client