Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json)
Hash identifier: csErkI9H816FoDoV5Szhf6x0NXvAmsLb+OSmWL9wOtY=
Subject key identifier: 87:9D:E2:76:9F:96:23:9D:7B:FF:6E:B6:86:65:5C:7C:DB:8A:FB:F1
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 019E1E6CD912A19DF33A9F877F3605615D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
Manifest number: 1924
Signing time: Tue 12 May 2026 23:01:50 +0000
Manifest this update: Tue 12 May 2026 23:01:50 +0000
Manifest next update: Wed 13 May 2026 23:01:50 +0000
Files and hashes: 1: 6Gck1jxV8hodHhNErcSoI6JCNmA.roa (hash: ZJ993Nb90CZhKx6tSfqiMnkrneDYqT7k3WP7+tY6XUY=)
2: 7jdX2vpO5uCMPNO9rSFgGQqc0Gw.roa (hash: ahm7PdjiT+UCze9YxNHHJ718mQmpE2KNx0aN2n76nnw=)
3: G3uJYRSZUjfrvtiFmlyRvRhBBnA.roa (hash: 1tM7Vw8K0/gUIeZ/iYC6KYD4hpW6Ty8UDOVU+XXhmB8=)
4: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: 7V5Xi+b5D8wwYMM1gYfmELa8GOjiX1NfqfFyEbtiVhg=)
5: gNqfXwEsDs2H9TmakWZzI3gll9M.roa (hash: XIA0aeWXMxA5hB+A1Fir62br/80BKcxOMOVJi2T93Z0=)
6: onXjnQEY4hcP21uX6HvKyD_sh40.roa (hash: 1+uh6uHlVREA4Hr0Fh7rDtvFvhZ0puVYIQxEp34fL4k=)
7: sb1L_tb530EwShpxnDt_BiEWOvU.roa (hash: EMgvCRICOzvWsYzygGZP7z9kar9bIGfovvk+MIsFSak=)
8: sv2FAXo6jyPqf-vJbDUr2DO3Hg0.roa (hash: Zsa8lqyguE2u77V1Eisy6P+vc07N1wlZNc+RMj3qjdE=)
9: wknRz97PHlyOf13z1G9d-K0BBvc.roa (hash: avyftMAiCO+JYCFUGz7ppk560plkXp2uOVpLkDpCMlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:d9:12:a1:9d:f3:3a:9f:87:7f:36:05:61:5d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: May 12 23:01:50 2026 GMT
Not After : May 13 23:01:50 2026 GMT
Subject: CN=879de2769f96239d7bff6eb686655c7cdb8afbf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:36:12:53:90:21:17:d1:51:13:ee:d3:ea:a4:
0d:e3:f7:e8:33:5a:f5:e6:45:04:2b:77:de:4e:a9:
a6:9a:d9:3f:c5:01:cc:bc:9e:ca:54:ed:4b:51:50:
06:5e:8f:a9:10:61:53:9e:43:3c:06:89:2f:3a:92:
b8:ee:44:a2:3c:8d:d8:59:bb:78:bd:1d:cb:65:45:
5c:5c:cb:92:a0:db:aa:27:dd:83:55:8d:88:e6:37:
f3:d5:50:e5:5c:73:5b:71:c9:23:ee:d2:69:e8:5d:
49:96:85:60:36:f3:25:40:cb:42:f1:e5:bb:91:d0:
cb:89:cb:30:fd:b9:11:49:a7:4a:de:88:7e:db:2c:
02:79:7a:2c:30:b6:79:51:f9:98:20:46:6c:c7:72:
7f:72:1b:e8:d0:0c:af:ce:ca:57:18:b9:a5:08:fb:
b2:34:e9:3b:06:bc:a7:9a:ef:05:53:fa:19:ca:0c:
f8:fa:0f:a9:60:49:e0:4e:59:e2:94:33:d8:2d:3e:
9f:a0:8e:23:a8:7c:d4:1e:83:76:1c:59:3a:e9:4a:
08:fe:d9:99:ad:31:37:6e:d5:57:58:e3:c3:80:b3:
43:d2:d7:16:80:a4:04:d8:8d:5c:b8:dc:96:fe:98:
a7:8f:c5:a6:8d:ac:19:ee:66:5f:02:6f:29:66:cb:
33:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9D:E2:76:9F:96:23:9D:7B:FF:6E:B6:86:65:5C:7C:DB:8A:FB:F1
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:99:e4:f2:ab:17:14:03:42:c8:bc:b1:81:0a:94:c9:11:33:
71:c5:0a:15:17:dc:af:b8:78:39:cf:c2:7b:c8:e6:f4:13:f7:
2a:91:a3:10:cb:98:cd:8a:d4:66:bb:44:4f:4d:9c:c5:48:f3:
9f:bc:bb:fb:32:c0:57:04:da:9f:c5:73:c4:69:e0:f6:78:5b:
a8:10:7b:04:3f:eb:60:92:00:4d:78:2a:6e:86:ee:5a:92:cc:
84:21:78:f6:e9:a8:e1:1d:38:d9:cc:1a:68:44:8c:46:9a:13:
3e:43:c9:0d:04:31:f3:27:02:3e:c6:6c:34:7d:98:c0:b5:93:
79:f5:00:60:9a:7a:c0:ee:7b:78:2a:74:8a:4f:e0:69:6c:44:
30:6b:ee:fc:e5:3f:d5:4e:db:f2:a1:3e:a5:90:1c:8d:77:de:
36:0e:8c:26:f2:8f:db:ef:6c:b1:2f:1c:a8:c4:87:72:86:f3:
f3:ec:0d:b1:0c:6b:9a:10:86:17:78:8e:5c:98:e2:e3:b3:d5:
fc:fb:8e:b1:13:f3:85:bc:5c:81:f3:86:3b:e9:c1:02:72:f3:
5a:34:5d:f5:f0:b4:b6:a4:8e:3f:41:19:24:99:0b:61:8f:1f:
86:5e:b2:e1:28:9b:7e:11:2c:8e:76:57:8d:a0:f9:1f:87:34:
00:91:e4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:52:31 2026 by rpki-client