Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
File: NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft (raw, json)
Hash identifier: 2xe8kQOfcvzV358Aqp19QcginmZCYNkarE2wnoInjeg=
Subject key identifier: C6:DA:C6:26:41:D6:39:FB:3C:B3:3A:50:22:05:EC:24:0E:BD:21:10
Authority key identifier: 35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
Certificate issuer: /CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Certificate serial: 019E1EA3152C9D8A1B53F315EF87B9A96FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
Manifest number: 1185
Signing time: Wed 13 May 2026 00:01:04 +0000
Manifest this update: Wed 13 May 2026 00:01:04 +0000
Manifest next update: Thu 14 May 2026 00:01:04 +0000
Files and hashes: 1: 1dnMq6ZCcFb70edGxGmL0hiobfI.roa (hash: +vsRlNxh8n7NYthhGysqntNveXYKCA8nzfq82JjmeCw=)
2: NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl (hash: LeMlLp+xI7OixI2NuUy1YmIqr6QVrELMVqquyvDh3w4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:15:2c:9d:8a:1b:53:f3:15:ef:87:b9:a9:6f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Validity
Not Before: May 13 00:01:04 2026 GMT
Not After : May 14 00:01:04 2026 GMT
Subject: CN=c6dac62641d639fb3cb33a502205ec240ebd2110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8a:37:2e:d1:d4:ff:2d:0f:e1:5c:7f:1c:77:
5b:75:b6:d6:55:ca:a7:7d:d3:7b:61:9e:21:e7:9e:
63:c1:c8:e9:6d:22:b8:93:9c:df:d3:ae:68:52:7d:
1b:e3:a1:da:61:cd:cd:dc:c6:9b:5a:fd:cb:f8:e8:
e4:3b:7a:46:94:88:8b:30:b8:3e:6c:32:11:31:97:
85:58:ee:81:1e:04:ce:f9:33:ce:1d:78:68:c1:93:
0e:eb:e2:8e:cf:87:51:26:d0:82:d2:20:b6:26:2a:
df:eb:9a:5d:4c:6e:26:9f:da:4d:4d:b4:93:73:3c:
67:95:1a:e2:d9:f2:0f:45:49:c2:37:66:47:4f:13:
c8:d7:01:b8:2c:72:d9:42:55:11:fb:52:a0:2a:81:
63:48:64:24:84:e3:d1:8d:49:23:3e:f9:ab:96:da:
38:5c:1e:57:d6:c3:7f:98:79:ef:8e:88:77:52:7b:
09:68:3e:2b:54:86:5d:16:0a:1e:e0:84:f1:ea:71:
04:f1:49:b1:26:4e:cb:b8:73:ca:68:1e:f4:37:54:
b6:f6:c6:63:6f:c6:bb:b0:91:63:da:8b:61:11:48:
b8:bd:40:01:e7:1f:68:73:b2:81:21:59:69:e8:c7:
d2:6b:54:0f:71:e4:ef:d9:39:27:43:fd:35:44:0e:
c6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DA:C6:26:41:D6:39:FB:3C:B3:3A:50:22:05:EC:24:0E:BD:21:10
X509v3 Authority Key Identifier:
keyid:35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:c8:e6:3d:69:41:16:27:44:c2:6e:f9:67:b8:31:34:50:c4:
d6:a3:d5:4e:c8:be:9b:da:1b:d4:48:31:3e:6c:fc:64:29:3c:
93:78:2b:0b:c0:fb:03:37:b0:6e:26:09:df:39:98:ab:d4:e7:
56:59:79:4d:8f:94:ed:f8:b5:76:16:eb:ab:5e:ef:62:a4:7b:
de:25:aa:6e:c7:76:95:8d:b7:80:9f:ee:cb:56:15:5d:8e:e7:
c2:16:cf:a3:10:4a:a0:54:7c:5d:a0:73:be:cb:d1:e0:20:d1:
f3:0b:36:47:c1:e3:7d:c2:a8:65:eb:44:bd:b9:a2:f7:66:f6:
e4:e2:11:a0:2f:15:22:10:75:1f:7e:0c:8b:e4:0f:4d:ec:19:
c9:ec:d5:79:be:1a:28:4d:88:4b:15:ca:c2:23:74:bd:ae:30:
2b:62:9a:db:52:5a:48:e8:31:52:8c:5f:64:dd:fb:36:59:97:
0f:4d:a5:89:ac:38:4b:b8:69:21:f3:a2:49:64:14:37:ad:4e:
62:ca:7b:d3:77:a1:67:3b:cc:f9:36:f9:59:b4:a3:bd:d9:c0:
c2:03:22:4d:e0:3f:0c:5f:6a:81:ea:b8:d2:93:5a:ae:1f:3d:
2a:75:45:76:45:4f:7f:2c:7a:52:c9:b4:13:8e:5e:4e:1f:91:
a5:4c:98:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:48:44 2026 by rpki-client