Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json)
Hash identifier: 6Acli4jlO9K7yBHOrxVAwv1iTN6RC4wF4AbJeQDRrx8=
Subject key identifier: C4:01:E4:AC:65:09:35:C2:1E:99:C8:37:0B:A0:D3:92:EF:9A:51:11
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 019D992B971F0972AF56B7D8B74758184AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
Manifest number: 18DF
Signing time: Fri 17 Apr 2026 02:01:03 +0000
Manifest this update: Fri 17 Apr 2026 02:01:03 +0000
Manifest next update: Sat 18 Apr 2026 02:01:03 +0000
Files and hashes: 1: 6Gck1jxV8hodHhNErcSoI6JCNmA.roa (hash: ZJ993Nb90CZhKx6tSfqiMnkrneDYqT7k3WP7+tY6XUY=)
2: 7jdX2vpO5uCMPNO9rSFgGQqc0Gw.roa (hash: ahm7PdjiT+UCze9YxNHHJ718mQmpE2KNx0aN2n76nnw=)
3: G3uJYRSZUjfrvtiFmlyRvRhBBnA.roa (hash: 1tM7Vw8K0/gUIeZ/iYC6KYD4hpW6Ty8UDOVU+XXhmB8=)
4: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: 31IHIlO2TRX9BziVzGa0aUvARBQzdz7eAIV583XIIQ0=)
5: gNqfXwEsDs2H9TmakWZzI3gll9M.roa (hash: XIA0aeWXMxA5hB+A1Fir62br/80BKcxOMOVJi2T93Z0=)
6: onXjnQEY4hcP21uX6HvKyD_sh40.roa (hash: 1+uh6uHlVREA4Hr0Fh7rDtvFvhZ0puVYIQxEp34fL4k=)
7: sb1L_tb530EwShpxnDt_BiEWOvU.roa (hash: EMgvCRICOzvWsYzygGZP7z9kar9bIGfovvk+MIsFSak=)
8: sv2FAXo6jyPqf-vJbDUr2DO3Hg0.roa (hash: Zsa8lqyguE2u77V1Eisy6P+vc07N1wlZNc+RMj3qjdE=)
9: wknRz97PHlyOf13z1G9d-K0BBvc.roa (hash: avyftMAiCO+JYCFUGz7ppk560plkXp2uOVpLkDpCMlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:97:1f:09:72:af:56:b7:d8:b7:47:58:18:4a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Apr 17 02:01:03 2026 GMT
Not After : Apr 18 02:01:03 2026 GMT
Subject: CN=c401e4ac650935c21e99c8370ba0d392ef9a5111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2c:42:4a:c0:85:b9:0d:31:04:96:2f:78:bc:
9e:50:a3:d3:6f:da:da:1c:c2:96:02:a5:97:c9:4d:
a7:10:1e:42:2d:96:9d:af:3d:6c:e8:c0:64:bc:7d:
78:1e:07:50:37:29:4f:2f:2c:2d:65:d3:15:db:d3:
f3:9c:f6:ae:0f:bc:1b:06:d0:cb:ca:18:23:28:44:
df:3f:fa:2f:61:92:9c:4d:f2:63:18:94:40:cc:10:
73:72:fa:a5:f1:3c:ca:ed:35:8c:10:cd:e6:27:ae:
28:34:68:50:83:91:0e:9c:bc:34:43:14:40:03:6e:
72:9e:44:26:8e:01:ae:23:81:79:fa:7f:48:a4:a2:
c6:1c:eb:4d:35:4b:b6:e0:35:37:36:48:bf:c0:bf:
87:2f:09:58:97:40:87:62:6b:1d:a8:8f:d5:15:9d:
b7:ff:c7:72:72:af:9c:c9:7d:5f:08:d1:6c:47:6d:
71:2d:fe:1d:32:3e:ac:62:e0:54:41:c0:63:fe:91:
d5:f5:df:d2:fe:2b:38:52:03:5e:9a:6c:74:60:93:
28:a6:a9:6f:1d:1c:54:9b:18:d6:9b:c1:22:1c:1b:
b8:d3:8c:16:f7:37:76:1e:87:33:57:0a:f1:0b:cf:
fc:49:00:f5:45:1a:fc:74:51:00:8a:5e:c8:d1:e1:
79:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:01:E4:AC:65:09:35:C2:1E:99:C8:37:0B:A0:D3:92:EF:9A:51:11
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:38:58:f9:9f:0e:66:54:b5:46:57:15:c0:a3:64:f9:71:0b:
ba:86:98:4c:cc:1d:4b:fc:ce:45:83:e7:e1:dd:81:95:8e:97:
fe:ac:66:7c:65:e8:a6:44:71:29:f1:6c:19:a7:91:f4:a0:ea:
ae:8c:f1:c1:5c:29:96:81:14:90:11:6b:b0:a5:85:ad:8d:73:
76:50:02:4a:87:75:2b:a2:d8:2a:30:96:17:fe:c2:c0:19:76:
a8:43:5f:a3:76:25:c0:4b:32:fc:35:cd:2f:fa:35:fb:01:ba:
f0:aa:72:a9:0f:a5:d8:f8:77:c7:fb:19:9d:7f:bf:47:c7:96:
e0:e0:2d:c0:57:87:fb:cf:83:60:02:e0:8e:7b:68:18:87:4b:
f8:6b:a9:15:16:8f:82:45:ac:67:1c:2e:ac:8d:94:40:44:07:
48:02:90:90:06:16:0b:36:a3:31:e6:16:e8:0a:0c:a8:a7:af:
a2:10:ce:b5:3c:5d:df:4b:3e:54:b1:84:fb:fc:31:22:68:de:
c1:61:28:95:a2:e6:fd:da:b6:af:bc:9a:a6:e8:55:51:40:2d:
ec:70:45:13:ea:23:e1:71:62:65:89:9d:30:cb:79:1c:3f:8c:
f5:ff:7c:d5:d4:68:d1:9e:aa:46:dc:a4:27:2d:68:c2:f2:8f:
d6:6f:67:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:27:22 2026 by rpki-client