Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
File: NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft (raw, json)
Hash identifier: 2C61+z0iM/EzPpESkHLwHY7zR2xsCPPfwpXZySX7Qjk=
Subject key identifier: B4:9C:2C:77:57:BF:FF:CA:7F:37:78:4E:02:AE:16:7B:35:1B:37:31
Authority key identifier: 35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
Certificate issuer: /CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Certificate serial: 019F916CB73D8B32F704E597AEBE2ADF0106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
Manifest number: 1245
Signing time: Fri 24 Jul 2026 00:00:48 +0000
Manifest this update: Fri 24 Jul 2026 00:00:48 +0000
Manifest next update: Sat 25 Jul 2026 00:00:48 +0000
Files and hashes: 1: 1dnMq6ZCcFb70edGxGmL0hiobfI.roa (hash: +vsRlNxh8n7NYthhGysqntNveXYKCA8nzfq82JjmeCw=)
2: NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl (hash: cFU5PpLa3Zaou2xr2QdiraPjgru+C/c9LthMOV6cJ/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:b7:3d:8b:32:f7:04:e5:97:ae:be:2a:df:01:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Validity
Not Before: Jul 24 00:00:48 2026 GMT
Not After : Jul 25 00:00:48 2026 GMT
Subject: CN=b49c2c7757bfffca7f37784e02ae167b351b3731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:81:4a:5e:d5:8a:67:83:6e:b4:bd:dd:6f:e5:
5a:75:9b:0a:cf:31:f3:e4:da:ab:8e:dc:5c:89:72:
3a:4d:78:a4:f4:00:40:81:6e:90:c4:63:b1:fd:75:
3a:6c:c2:49:40:a1:c8:fe:8f:d9:b7:2c:c6:be:a1:
9f:12:1a:e9:94:d8:38:d7:87:ce:c0:8f:91:d1:b2:
58:7c:d2:c4:34:77:b7:e3:3a:0a:9f:3e:dc:02:8e:
3b:a7:bb:7d:d4:5c:da:65:5f:bc:36:70:46:3a:14:
4f:2f:e6:71:57:28:c4:cf:a1:b6:f0:7d:53:5a:60:
82:1f:4f:e7:1a:04:af:e9:ce:76:19:ea:cb:e8:1a:
a9:9b:cd:76:29:96:93:77:1d:6e:a9:d9:0b:d8:c5:
03:9e:e8:02:d6:bd:a4:71:6d:cf:3e:34:28:e1:30:
6a:a1:bc:d5:8e:f7:d9:72:be:a6:b2:9b:85:24:61:
af:5a:7f:3e:12:69:a5:b7:13:f5:00:9e:d4:1c:f2:
80:ee:6b:56:cb:92:33:16:c3:b5:ed:a9:55:10:d6:
d3:0c:8d:0e:5f:c9:42:22:fa:51:49:3d:86:22:76:
78:07:2e:85:91:f8:1a:07:23:64:61:c2:5e:d0:f9:
25:66:51:03:11:7e:cc:60:85:ff:d4:8a:9e:76:3f:
1f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9C:2C:77:57:BF:FF:CA:7F:37:78:4E:02:AE:16:7B:35:1B:37:31
X509v3 Authority Key Identifier:
keyid:35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:9e:e5:94:ac:e9:70:47:4d:94:e2:82:02:8e:fd:d5:6e:a3:
0c:a2:c3:9a:59:0f:4b:e6:92:49:b7:9c:26:a7:fc:89:0a:66:
e8:7c:d1:e3:11:dc:5a:71:b8:20:21:67:99:64:e5:48:45:ce:
eb:1c:ca:3f:9c:2c:53:eb:37:8a:fc:e9:e6:2b:82:b3:b2:7b:
dc:1d:83:7b:c9:14:42:96:72:dd:d7:6b:6f:7f:26:12:b0:15:
47:89:86:39:e1:f5:8d:ce:69:4f:02:16:74:fd:37:6b:a0:db:
b7:7e:13:b9:0e:32:79:3b:1e:f5:c2:78:ce:d0:31:14:68:14:
a3:b3:d1:2f:03:68:78:83:a7:ad:e7:00:a3:9e:05:ad:92:9c:
7f:2d:05:ed:19:02:58:b0:16:ec:0a:1f:70:63:58:e3:2d:32:
73:e7:7a:7f:da:c1:8e:c1:8c:f6:80:ca:9a:e6:18:99:7d:bb:
b2:9e:00:08:c9:50:48:d7:b7:a2:31:54:fd:be:d4:6b:7a:ea:
70:d9:c9:62:3f:89:c0:8d:30:d3:18:e1:e7:08:e7:14:12:4c:
2e:4c:05:62:41:0a:be:b2:16:93:6a:93:66:fd:93:d0:87:1a:
f1:be:d1:17:7f:25:31:09:31:b5:52:10:93:02:c9:0e:52:7c:
0b:88:01:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:07:07 2026 by rpki-client