Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
File: NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft (raw, json)
Hash identifier: Cb4SZceqEAKk+G859YY7Lasja9TJ4pVKIF3iUhtDYrg=
Subject key identifier: 0E:AE:6F:CF:AB:2F:BE:C2:97:F9:30:C9:90:C3:67:03:27:6D:AC:EC
Authority key identifier: 35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
Certificate issuer: /CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Certificate serial: 019CABD9FB483A7DE1CD2330EFCEFA795FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
Manifest number: 10C5
Signing time: Mon 02 Mar 2026 00:01:55 +0000
Manifest this update: Mon 02 Mar 2026 00:01:55 +0000
Manifest next update: Tue 03 Mar 2026 00:01:55 +0000
Files and hashes: 1: 1dnMq6ZCcFb70edGxGmL0hiobfI.roa (hash: +vsRlNxh8n7NYthhGysqntNveXYKCA8nzfq82JjmeCw=)
2: NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl (hash: Y7DHVR5tRV5ZQjltG738rlIpYsRwlhctrK4K+v09Fh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:fb:48:3a:7d:e1:cd:23:30:ef:ce:fa:79:5f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Validity
Not Before: Mar 2 00:01:55 2026 GMT
Not After : Mar 3 00:01:55 2026 GMT
Subject: CN=0eae6fcfab2fbec297f930c990c36703276dacec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a2:bb:29:77:72:52:ed:75:0a:9a:10:a7:5b:
dd:0b:df:a0:0a:e3:7f:96:45:d0:d8:00:76:33:59:
2e:03:ea:e9:e2:5e:05:a0:34:e5:a4:8e:cd:16:06:
d6:22:61:70:cb:5f:a8:e9:25:75:ca:f5:55:96:1b:
f4:92:c7:8b:2e:a0:79:c0:38:d4:5e:aa:ba:9a:f9:
de:5e:3c:74:bf:1c:2e:6b:34:4a:63:15:9c:46:d6:
9c:ca:41:02:ae:ff:b0:7f:d7:72:e2:7b:63:2c:6f:
2c:97:0a:16:a2:d9:f9:f2:a9:5c:59:de:29:b3:52:
f5:8f:8f:ab:3d:58:d4:ad:67:80:e6:ab:81:06:19:
bc:ed:0e:b9:51:2e:24:f5:c7:ae:6d:d8:d1:b7:44:
56:58:b1:3d:ff:31:e7:b5:48:ff:57:2b:2f:43:6b:
31:cd:90:bc:f0:3f:19:b5:e8:18:a2:a6:5f:9c:da:
0a:00:f4:52:23:83:f1:ff:33:8b:78:db:d0:67:7a:
b0:db:da:17:f8:b0:40:5d:0c:54:e2:d8:d3:55:6d:
ad:66:52:43:82:45:4d:6b:6f:e8:ed:b2:d7:33:44:
fc:83:00:c5:9c:74:65:8b:2d:67:fa:15:3a:25:7e:
7d:5d:eb:d6:c9:cd:a1:b8:9b:b6:58:12:39:51:03:
9c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AE:6F:CF:AB:2F:BE:C2:97:F9:30:C9:90:C3:67:03:27:6D:AC:EC
X509v3 Authority Key Identifier:
keyid:35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:24:d4:09:2e:b3:27:7d:0f:74:86:e2:9c:ad:52:3c:ce:af:
3e:5a:f6:35:36:25:aa:9d:5a:03:62:e6:b2:84:f6:f0:0f:a1:
58:d2:cd:86:c6:0e:35:50:7d:ee:16:99:a7:c2:8c:05:e5:a4:
3c:12:86:0d:0c:92:48:b6:34:16:f7:de:f9:6d:b6:40:e4:fd:
ad:d3:61:08:6c:e7:14:d9:42:cc:16:b6:99:f4:37:92:8b:f0:
ce:26:ac:eb:d8:ca:6c:7f:8d:2e:eb:11:fb:bc:c4:70:63:ae:
4f:43:da:f0:60:41:7a:e0:58:8b:46:a3:bc:29:da:89:56:44:
dd:48:be:e2:09:8d:33:37:de:ae:2d:68:c9:bc:c7:52:b4:ec:
1a:2d:fe:0d:28:69:3a:32:a6:2a:12:9b:66:dd:d0:37:67:2e:
61:1d:38:46:21:91:a6:f3:12:29:ac:4d:e3:76:76:fa:72:eb:
1a:33:20:fc:7d:e5:28:cb:e6:44:45:1e:29:71:a0:30:15:ba:
14:94:1f:09:f8:62:4c:df:e2:5f:fd:14:76:0f:46:7a:e2:6a:
12:d4:5d:dd:39:5b:96:b1:1a:76:ed:b0:b3:88:cd:d3:2f:63:
a5:6f:bc:10:0c:f3:1a:c0:e5:70:14:1e:38:35:f3:56:aa:df:
97:a2:cf:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:54 2026 by rpki-client