Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
File: t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft (raw, json)
Hash identifier: XzeD4Ii7DDXRdH87VgKwxniv3N1XCdZG2fatCnN0uMA=
Subject key identifier: FF:1A:72:A3:30:33:40:3F:AD:D8:74:08:5C:9C:F2:56:52:36:4A:1A
Authority key identifier: B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
Certificate issuer: /CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Certificate serial: 019CABD99F673CBF1F691DCC51C9EE6BD8EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
Manifest number: 0CAB
Signing time: Mon 02 Mar 2026 00:01:31 +0000
Manifest this update: Mon 02 Mar 2026 00:01:31 +0000
Manifest next update: Tue 03 Mar 2026 00:01:31 +0000
Files and hashes: 1: 1LdSNQtPKGuFRCqVT7O_Fm0yv40.roa (hash: 5g11W+WX3bmU8CryNIDPD2SicuCDU6UduQYdcWR73Uc=)
2: RzWzE6OpgeFZk0yxSCkJMoNMTwA.roa (hash: EOrql+fdFMhDNMTm2/S5izzC4MsYg2L6WcA9m2Sp+8U=)
3: t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl (hash: DKm/WcsxehNfjx2Mc9+4TjmzzRlJX4Sf7HBwCm7Yaug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:9f:67:3c:bf:1f:69:1d:cc:51:c9:ee:6b:d8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Validity
Not Before: Mar 2 00:01:31 2026 GMT
Not After : Mar 3 00:01:31 2026 GMT
Subject: CN=ff1a72a33033403fadd874085c9cf25652364a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a6:d4:41:eb:51:c6:c2:98:0d:63:d5:13:9d:
cd:d0:99:5c:fb:2f:b0:7e:91:4d:01:9e:6a:7d:c5:
51:5e:9d:79:fa:fa:5d:9d:ad:cd:8d:a5:67:e7:bf:
cc:a0:2b:0b:cc:2a:e7:72:93:ac:bb:4b:55:89:e6:
1b:dc:5d:d6:f7:b8:40:94:0b:f1:48:7a:12:ca:23:
4b:72:94:ba:00:52:6d:f1:02:d1:d9:4a:45:8a:22:
76:a4:bb:71:9f:37:35:78:90:4b:55:35:0d:a1:40:
22:98:03:92:9f:0c:20:27:d8:28:87:bf:d8:43:1e:
c1:e7:1c:d4:fa:e7:80:aa:57:15:a5:ae:0c:16:71:
75:a6:77:28:30:8d:dc:f4:08:46:fe:c9:5a:f9:da:
e0:21:50:d0:5c:37:e5:c7:b3:9d:49:fa:7f:23:be:
3f:ed:cc:4d:c4:31:13:bc:53:cb:dd:d9:f6:ba:a7:
c6:ac:96:f4:ae:6d:5c:b8:88:80:b6:cd:a6:ac:9a:
5e:b9:28:3b:1c:11:8f:d9:68:24:ea:82:0b:2f:ae:
7f:0f:e4:1e:34:7b:65:93:e4:78:e9:65:29:7d:63:
78:60:1f:b7:89:8e:7b:d2:a5:c7:1a:1a:41:e2:ff:
d1:79:4f:22:c4:3e:9d:b1:57:b0:35:7a:b5:55:cc:
db:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1A:72:A3:30:33:40:3F:AD:D8:74:08:5C:9C:F2:56:52:36:4A:1A
X509v3 Authority Key Identifier:
keyid:B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:30:9c:d4:22:f2:5f:4f:70:dc:02:26:15:67:cb:a8:08:d8:
80:f8:71:0c:4b:69:89:e9:c6:a1:c2:34:1d:0c:fb:f4:62:98:
17:9a:ac:c0:5b:2c:8c:62:1b:50:a8:82:4e:19:26:19:28:ed:
29:a4:40:6c:eb:70:44:5e:3d:0d:16:61:1f:62:2b:06:80:fb:
67:ba:d0:f6:c5:40:f7:16:06:38:6e:2b:67:4d:93:9f:34:4a:
4b:9b:d0:80:8c:11:c0:30:7c:1a:ba:d8:9b:71:e3:ef:5b:47:
fd:4e:f3:4d:36:9b:0e:12:e2:48:b0:29:4d:56:a0:94:dc:c2:
2e:1a:92:6f:00:c7:e7:3d:b6:40:4e:e9:e0:b2:2d:2d:d9:35:
fa:0b:4f:74:b9:f8:d1:b6:0b:c8:1a:b8:0d:46:31:18:c5:20:
9a:2c:74:3c:e5:d6:34:63:06:23:7a:d3:6c:db:2b:c8:67:ed:
da:6c:6a:d9:b8:2b:6f:cb:50:94:a6:d8:13:69:61:f6:e7:ea:
80:06:17:6d:fd:f2:21:55:3f:7e:13:9d:8d:aa:b6:b9:37:da:
2c:4a:7e:c3:57:76:6b:84:95:55:af:6e:f2:6e:cd:ab:c9:62:
ae:12:43:7a:17:9b:0d:77:93:36:27:d2:ab:66:e7:e1:0a:e9:
b7:ee:1c:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2Z9nPL8faR3MUcnua9jsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ZTM0ZjU3ZDAwNzE2NmRlZjRkZDg4MWQ4ZjdkNWI2ZWQ5
NWU2NTYwHhcNMjYwMzAyMDAwMTMxWhcNMjYwMzAzMDAwMTMxWjAzMTEwLwYDVQQD
EyhmZjFhNzJhMzMwMzM0MDNmYWRkODc0MDg1YzljZjI1NjUyMzY0YTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoabUQetRxsKYDWPVE53N0Jlc+y+w
fpFNAZ5qfcVRXp15+vpdna3NjaVn57/MoCsLzCrncpOsu0tVieYb3F3W97hAlAvx
SHoSyiNLcpS6AFJt8QLR2UpFiiJ2pLtxnzc1eJBLVTUNoUAimAOSnwwgJ9goh7/Y
Qx7B5xzU+ueAqlcVpa4MFnF1pncoMI3c9AhG/sla+drgIVDQXDflx7OdSfp/I74/
7cxNxDETvFPL3dn2uqfGrJb0rm1cuIiAts2mrJpeuSg7HBGP2Wgk6oILL65/D+Qe
NHtlk+R46WUpfWN4YB+3iY570qXHGhpB4v/ReU8ixD6dsVewNXq1VczbaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8acqMwM0A/rdh0CFyc8lZSNkoaMB8GA1UdIwQY
MBaAFLfjT1fQBxZt703Ygdj31bbtleZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdC1OUFY5QUhGbTN2VGRpQjJQZlZ0dTJWNWxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lNWQ1ODAtZWVlOC00NjNlLTg0YTgt
ZWFjY2I4YjQyZGM5LzEvdC1OUFY5QUhGbTN2VGRpQjJQZlZ0dTJWNWxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lNWQ1ODAtZWVlOC00NjNlLTg0YTgtZWFjY2I4YjQyZGM5
LzEvdC1OUFY5QUhGbTN2VGRpQjJQZlZ0dTJWNWxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXjCc1CLy
X09w3AImFWfLqAjYgPhxDEtpienGocI0HQz79GKYF5qswFssjGIbUKiCThkmGSjt
KaRAbOtwRF49DRZhH2IrBoD7Z7rQ9sVA9xYGOG4rZ02TnzRKS5vQgIwRwDB8GrrY
m3Hj71tH/U7zTTabDhLiSLApTVaglNzCLhqSbwDH5z22QE7p4LItLdk1+gtPdLn4
0bYLyBq4DUYxGMUgmix0POXWNGMGI3rTbNsryGft2mxq2bgrb8tQlKbYE2lh9ufq
gAYXbf3yIVU/fhOdjaq2uTfaLEp+w1d2a4SVVa9u8m7Nq8lirhJDehebDXeTNifS
q2bn4Qrpt+4cvA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:41:00 2026 by rpki-client