Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json)
Hash identifier: Ff1Iit2qmEPuIowtdXvcNwcC5RJnKZIQwhe786b86UQ=
Subject key identifier: 3E:E5:29:B0:2E:58:24:D6:E4:E4:F2:A7:A0:B0:9F:E6:6B:9A:F8:15
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 019FA862A5F172CF3534E256F0463DD689B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
Manifest number: 19F0
Signing time: Tue 28 Jul 2026 11:01:04 +0000
Manifest this update: Tue 28 Jul 2026 11:01:04 +0000
Manifest next update: Wed 29 Jul 2026 11:01:04 +0000
Files and hashes: 1: 6Gck1jxV8hodHhNErcSoI6JCNmA.roa (hash: ZJ993Nb90CZhKx6tSfqiMnkrneDYqT7k3WP7+tY6XUY=)
2: 7jdX2vpO5uCMPNO9rSFgGQqc0Gw.roa (hash: ahm7PdjiT+UCze9YxNHHJ718mQmpE2KNx0aN2n76nnw=)
3: G3uJYRSZUjfrvtiFmlyRvRhBBnA.roa (hash: 1tM7Vw8K0/gUIeZ/iYC6KYD4hpW6Ty8UDOVU+XXhmB8=)
4: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: w/tHLliqvyi2q+iu2ECvXVe2hoU/g5gZtceJSdS0MPc=)
5: gNqfXwEsDs2H9TmakWZzI3gll9M.roa (hash: XIA0aeWXMxA5hB+A1Fir62br/80BKcxOMOVJi2T93Z0=)
6: onXjnQEY4hcP21uX6HvKyD_sh40.roa (hash: 1+uh6uHlVREA4Hr0Fh7rDtvFvhZ0puVYIQxEp34fL4k=)
7: sb1L_tb530EwShpxnDt_BiEWOvU.roa (hash: EMgvCRICOzvWsYzygGZP7z9kar9bIGfovvk+MIsFSak=)
8: sv2FAXo6jyPqf-vJbDUr2DO3Hg0.roa (hash: Zsa8lqyguE2u77V1Eisy6P+vc07N1wlZNc+RMj3qjdE=)
9: wknRz97PHlyOf13z1G9d-K0BBvc.roa (hash: avyftMAiCO+JYCFUGz7ppk560plkXp2uOVpLkDpCMlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:a5:f1:72:cf:35:34:e2:56:f0:46:3d:d6:89:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Jul 28 11:01:04 2026 GMT
Not After : Jul 29 11:01:04 2026 GMT
Subject: CN=3ee529b02e5824d6e4e4f2a7a0b09fe66b9af815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:bb:8b:0e:0d:9e:c7:28:c8:19:f7:44:ba:
21:bd:d6:39:8a:2f:1a:1e:0d:21:f1:d9:a1:65:b5:
f3:ac:e6:18:18:31:c9:c4:36:88:1d:3f:9c:ea:e0:
ae:f5:4b:f4:10:ae:39:6a:77:72:f5:4a:d2:9f:3a:
56:58:ed:e0:38:5d:36:78:ca:f3:b7:11:35:8f:d3:
29:b1:97:0c:43:0f:61:9b:d4:a3:ee:81:9c:53:79:
b9:8c:a6:b1:7e:0d:b6:77:64:44:8d:1d:27:f1:58:
84:26:62:1f:21:f5:16:00:c1:52:a3:04:ee:9f:71:
1f:59:82:88:10:34:4c:33:33:d7:36:40:52:22:8d:
eb:8b:09:d5:61:dc:52:d2:85:76:2d:ec:e1:cd:3d:
3d:42:ac:1a:31:37:a7:42:c7:71:b5:6b:6c:82:cd:
dd:0a:1b:bb:b2:f4:81:fe:9f:ce:57:e4:c1:a7:27:
62:b6:95:7c:76:f5:aa:87:fb:ef:99:9f:43:db:03:
fc:0e:12:4e:00:59:22:a6:ef:56:8b:87:1b:55:7b:
04:b8:42:cc:07:b0:95:fc:50:58:08:9f:5d:8c:f4:
e7:01:c0:4f:ac:2c:a7:1c:00:8c:f5:77:9f:37:f7:
af:f5:bc:39:c8:eb:2e:8e:a1:8f:01:9b:c3:75:05:
6c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E5:29:B0:2E:58:24:D6:E4:E4:F2:A7:A0:B0:9F:E6:6B:9A:F8:15
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ff:22:a5:45:e5:a6:55:6b:b0:9a:ec:45:90:ae:91:bf:3c:
70:a9:cb:dc:7d:a8:9a:5f:04:ae:1a:aa:d3:68:8a:48:f1:c3:
2a:a2:87:ae:15:88:ec:ec:d2:31:82:3f:c2:4f:85:db:09:42:
61:5a:a1:85:7a:a2:ca:c1:0e:84:8b:9f:85:da:04:7a:9b:ad:
6e:c0:af:1c:a5:f9:8b:7f:5b:49:54:72:5f:77:e7:48:75:a4:
59:45:82:fb:1e:de:29:ca:48:94:aa:ac:45:94:74:c8:15:9a:
b3:af:b1:f5:83:06:10:8a:42:de:d5:6f:2f:39:16:80:f4:9d:
6a:b4:f5:f5:3f:e7:41:dc:17:27:50:31:24:92:b5:bd:de:03:
1a:52:39:7b:b3:c7:24:97:0a:fe:96:7e:97:62:2d:0b:76:79:
9c:c4:33:0a:1c:7c:d3:50:4f:65:67:22:a8:0b:e6:61:30:88:
63:5a:d4:26:26:d5:94:bb:af:48:71:32:f9:76:5d:b3:03:11:
df:f6:44:16:8d:ab:e6:b2:e2:b8:3d:cf:c1:86:19:07:88:d5:
a9:71:02:eb:3f:f5:77:ab:16:2c:0b:17:26:c4:77:af:63:95:
e9:25:9a:69:43:f3:dd:ce:63:dc:95:94:1b:f0:a6:7d:96:05:
c9:01:83:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:32:43 2026 by rpki-client