Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json)
Hash identifier: Eb94tm3/JDrxQA83qzJwWU/LGK7Uftpys8msZr93Ku4=
Subject key identifier: 20:A4:18:1F:8F:CA:0E:BF:04:59:8D:FB:57:68:A1:FF:98:91:71:66
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 01A0DB722011D54C2DB7381D2739BEA636E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
Manifest number: 1A8F
Signing time: Sat 26 Sep 2026 02:01:24 +0000
Manifest this update: Sat 26 Sep 2026 02:01:24 +0000
Manifest next update: Sun 27 Sep 2026 02:01:24 +0000
Files and hashes: 1: 6Gck1jxV8hodHhNErcSoI6JCNmA.roa (hash: ZJ993Nb90CZhKx6tSfqiMnkrneDYqT7k3WP7+tY6XUY=)
2: 7jdX2vpO5uCMPNO9rSFgGQqc0Gw.roa (hash: ahm7PdjiT+UCze9YxNHHJ718mQmpE2KNx0aN2n76nnw=)
3: G3uJYRSZUjfrvtiFmlyRvRhBBnA.roa (hash: 1tM7Vw8K0/gUIeZ/iYC6KYD4hpW6Ty8UDOVU+XXhmB8=)
4: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: ruMx8006o0us8XV75TYHHFh9nQGa7ArIW/vMLsgI16A=)
5: gNqfXwEsDs2H9TmakWZzI3gll9M.roa (hash: XIA0aeWXMxA5hB+A1Fir62br/80BKcxOMOVJi2T93Z0=)
6: onXjnQEY4hcP21uX6HvKyD_sh40.roa (hash: 1+uh6uHlVREA4Hr0Fh7rDtvFvhZ0puVYIQxEp34fL4k=)
7: sb1L_tb530EwShpxnDt_BiEWOvU.roa (hash: EMgvCRICOzvWsYzygGZP7z9kar9bIGfovvk+MIsFSak=)
8: sv2FAXo6jyPqf-vJbDUr2DO3Hg0.roa (hash: Zsa8lqyguE2u77V1Eisy6P+vc07N1wlZNc+RMj3qjdE=)
9: wknRz97PHlyOf13z1G9d-K0BBvc.roa (hash: avyftMAiCO+JYCFUGz7ppk560plkXp2uOVpLkDpCMlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:72:20:11:d5:4c:2d:b7:38:1d:27:39:be:a6:36:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Sep 26 02:01:24 2026 GMT
Not After : Sep 27 02:01:24 2026 GMT
Subject: CN=20a4181f8fca0ebf04598dfb5768a1ff98917166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9a:f8:9a:49:b9:f2:ff:c1:b3:73:23:52:e1:
c6:f9:12:92:ba:c0:59:d5:5c:1d:2b:c2:a7:c6:f3:
3b:a7:5d:0d:be:64:7e:5f:75:18:15:4c:d7:b7:7b:
2d:70:c2:53:78:36:32:61:3f:68:ad:32:66:88:72:
ce:9b:d4:d6:24:3e:bf:92:d5:a1:c9:fc:d6:87:34:
a1:19:58:d7:74:f3:82:51:6e:0d:60:2d:7d:f0:d1:
19:cf:89:bf:61:e1:ff:53:1a:22:46:38:ef:13:8a:
9a:6d:1a:28:b0:06:fd:16:fa:1d:d8:56:c3:77:1e:
83:76:d2:ca:44:b5:8d:54:28:c2:92:77:bc:b6:3a:
21:22:25:f5:d1:6b:5a:22:2d:75:6f:51:15:01:63:
71:22:4b:96:89:88:73:ae:19:f8:d2:8b:23:54:41:
72:93:b9:db:8e:a5:7e:41:a9:70:18:06:9f:a7:72:
fd:0d:7f:5b:5f:d7:b0:b2:b7:be:93:5b:97:9d:87:
81:68:d8:ba:ba:36:68:da:9b:70:50:83:77:98:65:
ee:ef:7a:7b:49:28:51:76:18:98:57:a9:3d:16:6c:
1b:43:ba:0d:6e:6f:b1:c4:9c:2e:46:e7:52:73:e2:
35:de:5f:d6:b8:56:88:0c:ec:5d:6b:47:14:77:02:
08:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A4:18:1F:8F:CA:0E:BF:04:59:8D:FB:57:68:A1:FF:98:91:71:66
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e3:86:96:e7:ea:ad:a1:68:b7:e3:b0:98:82:bf:61:15:f8:
87:9c:58:b5:57:4b:ff:34:0a:02:2e:87:ed:23:2c:d8:6b:76:
87:31:bb:c5:c6:b3:3c:9a:44:3e:22:5e:04:b6:e2:d9:3b:96:
6b:a3:cd:5a:33:23:1a:fa:c5:60:3e:bb:c7:a3:d1:86:e0:d8:
ce:86:ba:3c:3b:6e:a7:41:58:ff:fa:5d:c8:19:58:dc:84:f8:
c6:d2:18:bb:71:4d:2d:5b:67:16:64:2e:9d:22:10:16:90:e6:
40:d1:85:aa:7a:a5:5d:80:db:3e:98:40:ca:d2:a9:d6:19:92:
78:73:89:64:95:66:3c:83:d5:5d:ef:c2:d7:a8:d8:ba:a3:08:
a1:d4:e8:01:d9:49:8e:25:5f:1d:91:a4:98:34:a9:ef:97:a6:
f2:74:ca:7e:27:0f:2d:7f:fa:f1:33:30:cc:7e:8b:9f:a3:c1:
a2:58:96:9b:a5:e7:c7:3d:a5:13:67:c1:f6:ef:82:4c:33:d8:
cb:32:25:ad:49:ce:a4:f2:76:71:64:23:44:10:b2:a1:7d:03:
41:d2:e5:39:ae:07:c9:9b:b7:f0:41:8e:77:89:af:b2:69:ea:
14:b1:41:64:11:e9:70:a4:37:e2:b0:e8:80:88:f8:91:a6:84:
ca:6b:8e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:03:24 2026 by rpki-client