Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json)
Hash identifier: DKgtnRTgoUWLj07tqDbt+M7eXAAGoZrUjULgdz7VJzY=
Subject key identifier: B7:9D:21:30:8D:33:35:7E:24:35:DC:74:05:C5:5F:8D:42:1B:09:2A
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 019CABA234AC3BBA2F3CA8E5D05D6840FFE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
Manifest number: 1864
Signing time: Sun 01 Mar 2026 23:01:00 +0000
Manifest this update: Sun 01 Mar 2026 23:01:00 +0000
Manifest next update: Mon 02 Mar 2026 23:01:00 +0000
Files and hashes: 1: 6Gck1jxV8hodHhNErcSoI6JCNmA.roa (hash: ZJ993Nb90CZhKx6tSfqiMnkrneDYqT7k3WP7+tY6XUY=)
2: 7jdX2vpO5uCMPNO9rSFgGQqc0Gw.roa (hash: ahm7PdjiT+UCze9YxNHHJ718mQmpE2KNx0aN2n76nnw=)
3: G3uJYRSZUjfrvtiFmlyRvRhBBnA.roa (hash: 1tM7Vw8K0/gUIeZ/iYC6KYD4hpW6Ty8UDOVU+XXhmB8=)
4: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: KY/JJwukDiKF/eOAlQuOQ2IXGNA952EDxVCgUPICiSc=)
5: gNqfXwEsDs2H9TmakWZzI3gll9M.roa (hash: XIA0aeWXMxA5hB+A1Fir62br/80BKcxOMOVJi2T93Z0=)
6: onXjnQEY4hcP21uX6HvKyD_sh40.roa (hash: 1+uh6uHlVREA4Hr0Fh7rDtvFvhZ0puVYIQxEp34fL4k=)
7: sb1L_tb530EwShpxnDt_BiEWOvU.roa (hash: EMgvCRICOzvWsYzygGZP7z9kar9bIGfovvk+MIsFSak=)
8: sv2FAXo6jyPqf-vJbDUr2DO3Hg0.roa (hash: Zsa8lqyguE2u77V1Eisy6P+vc07N1wlZNc+RMj3qjdE=)
9: wknRz97PHlyOf13z1G9d-K0BBvc.roa (hash: avyftMAiCO+JYCFUGz7ppk560plkXp2uOVpLkDpCMlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:34:ac:3b:ba:2f:3c:a8:e5:d0:5d:68:40:ff:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Mar 1 23:01:00 2026 GMT
Not After : Mar 2 23:01:00 2026 GMT
Subject: CN=b79d21308d33357e2435dc7405c55f8d421b092a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bb:98:7f:a8:a7:b2:69:ea:3d:78:2c:00:e2:
ad:a5:0e:6f:95:86:dc:e7:96:56:5c:90:31:6c:a9:
e9:1d:21:7d:12:52:26:8a:b8:bc:f5:3a:8d:fb:a0:
0d:94:35:fb:f7:62:df:7b:32:23:bb:3e:62:40:5a:
8b:87:55:ff:ca:cd:f0:74:5c:93:ba:b1:c9:52:57:
b0:22:c7:2f:ab:35:17:2b:ae:5e:fb:ce:7a:f4:10:
56:17:7d:fc:30:9f:65:87:31:b2:ef:93:72:ef:ea:
b4:d0:c0:74:fc:0a:b0:cd:af:c2:82:da:b8:46:df:
36:30:4c:96:1f:1b:46:b7:70:17:f0:94:6f:79:36:
8d:ba:7a:ea:eb:c7:05:72:8c:1a:d7:e6:52:31:7d:
cc:06:b5:22:2e:36:12:20:d6:80:df:52:5c:6c:c6:
a9:0c:9d:05:8e:df:3c:8e:58:0f:1a:bc:68:08:8e:
be:bc:37:9c:10:93:1e:c9:34:85:3c:e0:52:bb:ff:
00:07:89:a2:4a:ca:20:3f:e2:8c:27:3c:96:e3:31:
93:96:b7:7b:e3:dc:51:35:2f:b0:34:80:6e:47:bd:
f7:e2:3f:ee:ab:c9:17:f9:cb:48:ba:fb:fb:ea:10:
68:14:f5:8c:cd:5e:e5:0f:0a:c2:9f:54:4d:e2:e5:
23:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9D:21:30:8D:33:35:7E:24:35:DC:74:05:C5:5F:8D:42:1B:09:2A
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:38:3e:f4:2e:b0:c0:e1:cf:22:ae:4d:b9:6e:5d:0f:b6:4f:
a6:6e:c5:ed:16:88:ba:5b:66:ae:dc:59:bf:39:07:df:6f:42:
e2:40:fc:28:d0:c3:90:80:cd:b2:5b:19:3e:98:6a:0b:18:c3:
b3:a5:2a:43:9c:d8:dd:c4:92:07:94:7e:22:f4:e2:4f:73:9c:
5a:3d:3e:97:c8:2a:91:27:3e:6c:90:0d:84:2b:75:14:d9:97:
06:4a:28:3e:c6:ab:a3:e5:9c:0d:1a:43:fa:64:04:1b:c2:2e:
d0:2a:02:d5:33:8b:70:94:60:1b:7f:94:a1:ff:d4:b2:d8:63:
cd:fe:39:4e:f3:27:2c:1b:7c:18:77:4a:45:89:64:e6:6e:49:
2a:9d:31:44:dd:46:a3:d4:a5:8a:e9:1b:69:96:79:7b:04:3c:
ff:a7:c7:1e:e5:d2:e6:f0:9c:8c:21:4c:dc:d8:8f:93:ac:9a:
f2:9a:a1:36:5b:cf:e0:c0:7d:25:ed:ff:4f:18:0b:3b:a0:cd:
58:2e:64:cc:2b:39:9d:7e:ad:e2:b6:f0:8b:51:96:11:ce:c3:
59:af:ec:0d:e6:61:01:3b:5d:e6:bb:00:0c:52:f2:ee:73:86:
02:46:0b:08:5b:01:90:12:78:1d:92:f2:76:c4:3d:c5:e7:c6:
d3:a7:71:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:46 2026 by rpki-client