Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
File: NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft (raw, json)
Hash identifier: PvPPfbkgqv2x7wk3jjqYZP7WIGXOz6yYiDI/V3GNQD4=
Subject key identifier: 83:DE:2F:FE:C9:40:E1:D0:C6:0B:E2:3D:DA:BC:CF:40:D1:D3:53:BF
Authority key identifier: 35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83
Certificate issuer: /CN=353620da4452ac82aaf4c8c08819eb0b82513b83
Certificate serial: 019D9A74EDBF15069E9099A289C76F180AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
Manifest number: 071D
Signing time: Fri 17 Apr 2026 08:00:47 +0000
Manifest this update: Fri 17 Apr 2026 08:00:47 +0000
Manifest next update: Sat 18 Apr 2026 08:00:47 +0000
Files and hashes: 1: NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl (hash: fOEoBl/YPuwtc/qEgsDso+8h34ntRkMBTfdAgSLZHMo=)
2: hWIPowhULMETPFMJ5-_H_ZNBRis.roa (hash: BNHF5BsMBRRalDPKnOb0xVzO7bSBgF7JDrPzIyr5BeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:ed:bf:15:06:9e:90:99:a2:89:c7:6f:18:0a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353620da4452ac82aaf4c8c08819eb0b82513b83
Validity
Not Before: Apr 17 08:00:47 2026 GMT
Not After : Apr 18 08:00:47 2026 GMT
Subject: CN=83de2ffec940e1d0c60be23ddabccf40d1d353bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6e:27:15:8f:a1:4d:18:77:56:3c:ca:7f:91:
94:c7:54:a3:71:a5:50:96:8c:61:ab:ee:c1:13:fb:
21:30:55:ff:ac:1d:1f:b1:95:2b:28:f4:0f:26:23:
2b:c1:41:a3:86:d9:17:76:dd:3c:94:d7:d0:cd:2a:
dc:23:61:4d:eb:7d:f7:f2:73:38:dd:23:6c:90:03:
12:6c:01:40:2f:05:6e:d9:f3:ac:10:62:b6:b5:df:
ab:64:88:4a:b2:53:6e:68:a9:76:3e:5f:6b:6d:7b:
fc:a6:fc:b6:16:c9:2e:81:e2:b0:42:d8:e4:d3:cd:
77:d3:c6:a1:55:ac:91:ec:c2:f5:bd:2b:bc:c6:cc:
8c:b1:88:43:af:b6:a7:e3:73:1f:b3:f9:46:10:e8:
80:59:c3:a3:5d:db:16:4a:00:34:02:06:27:06:c9:
6a:fc:07:96:35:54:9c:26:cb:29:c2:3b:f2:16:ac:
11:80:63:ce:b9:f8:eb:87:ab:6d:9c:60:f4:04:e7:
85:24:2a:8e:18:bf:e4:7c:d4:8b:40:99:e9:0d:44:
ce:34:8b:96:32:32:91:47:ba:42:86:c8:27:96:56:
0c:4c:30:b9:e4:ea:ce:20:f5:fd:9a:62:b2:34:98:
65:ca:ff:56:70:f6:87:8d:b7:ec:e0:f2:d2:10:1d:
1d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DE:2F:FE:C9:40:E1:D0:C6:0B:E2:3D:DA:BC:CF:40:D1:D3:53:BF
X509v3 Authority Key Identifier:
keyid:35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c8:37:47:83:b8:6d:28:90:f4:fe:ad:b3:57:ba:dd:0f:aa:
74:db:95:95:14:83:d9:38:70:b2:64:50:f2:a4:4c:d9:6a:ca:
0f:48:2b:c2:6a:57:f4:0c:64:6d:40:f5:22:55:7f:08:58:f8:
76:c6:52:ad:7a:19:c7:35:11:69:09:e4:13:73:95:62:6a:0f:
b7:ef:04:01:eb:ce:48:19:01:71:7d:96:42:66:33:5a:64:ac:
7d:b4:92:96:75:cc:15:8d:6b:11:78:21:64:44:e0:be:a3:65:
77:24:36:79:e6:96:0e:eb:3f:3b:7f:1e:7d:f3:1d:8e:e4:f1:
c4:92:87:29:db:ba:94:53:22:f0:df:29:d7:94:97:d1:d9:65:
82:eb:b4:dc:54:72:17:ad:33:53:1e:a2:8b:f3:9b:10:9f:24:
f6:d8:ed:9e:9f:f5:e2:0f:90:54:5f:61:f3:23:1e:f5:56:16:
06:d4:e3:ce:12:74:47:e1:01:59:0c:9d:dd:89:4e:0b:09:1d:
36:c0:ab:87:66:16:e5:47:a8:de:17:b8:6d:ff:9a:2e:18:9d:
5a:cf:8f:1a:a2:26:9e:bd:ef:dc:f9:06:33:07:ae:e6:95:68:
49:8d:02:90:7b:10:56:d7:90:fa:50:e1:d2:2f:69:eb:b7:fc:
e8:74:4e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:58:10 2026 by rpki-client