Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json)
Hash identifier: IiEY0Tm4qVXPFWsAYNEH6Gjx7FdiB4Upl4C39oPNJ20=
Subject key identifier: A2:24:FA:17:A6:BF:FF:AF:88:B6:E7:B7:71:2D:D2:44:2F:02:D4:05
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 01A0CDECE33B7BC9BB00389F35D6D8611C41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
Manifest number: 1A88
Signing time: Wed 23 Sep 2026 11:00:48 +0000
Manifest this update: Wed 23 Sep 2026 11:00:48 +0000
Manifest next update: Thu 24 Sep 2026 11:00:48 +0000
Files and hashes: 1: 6Gck1jxV8hodHhNErcSoI6JCNmA.roa (hash: ZJ993Nb90CZhKx6tSfqiMnkrneDYqT7k3WP7+tY6XUY=)
2: 7jdX2vpO5uCMPNO9rSFgGQqc0Gw.roa (hash: ahm7PdjiT+UCze9YxNHHJ718mQmpE2KNx0aN2n76nnw=)
3: G3uJYRSZUjfrvtiFmlyRvRhBBnA.roa (hash: 1tM7Vw8K0/gUIeZ/iYC6KYD4hpW6Ty8UDOVU+XXhmB8=)
4: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: 0e8JCcpCwkJDKr2f+Fmsz5zDMS9lB7jzZ4c2KfhLg5o=)
5: gNqfXwEsDs2H9TmakWZzI3gll9M.roa (hash: XIA0aeWXMxA5hB+A1Fir62br/80BKcxOMOVJi2T93Z0=)
6: onXjnQEY4hcP21uX6HvKyD_sh40.roa (hash: 1+uh6uHlVREA4Hr0Fh7rDtvFvhZ0puVYIQxEp34fL4k=)
7: sb1L_tb530EwShpxnDt_BiEWOvU.roa (hash: EMgvCRICOzvWsYzygGZP7z9kar9bIGfovvk+MIsFSak=)
8: sv2FAXo6jyPqf-vJbDUr2DO3Hg0.roa (hash: Zsa8lqyguE2u77V1Eisy6P+vc07N1wlZNc+RMj3qjdE=)
9: wknRz97PHlyOf13z1G9d-K0BBvc.roa (hash: avyftMAiCO+JYCFUGz7ppk560plkXp2uOVpLkDpCMlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:e3:3b:7b:c9:bb:00:38:9f:35:d6:d8:61:1c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Sep 23 11:00:48 2026 GMT
Not After : Sep 24 11:00:48 2026 GMT
Subject: CN=a224fa17a6bfffaf88b6e7b7712dd2442f02d405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e9:cf:82:a3:95:80:e8:c1:7c:33:e8:f5:26:
0c:c9:f3:be:af:ff:5b:3e:dc:08:5e:95:bb:fa:e5:
61:73:b1:a0:e6:67:c8:68:22:cb:53:9f:88:c8:42:
3f:a0:e1:9b:8a:f7:07:a4:58:ee:b5:bf:1f:cb:a0:
ec:88:e9:6b:dd:d2:bd:1f:9a:15:96:2a:30:62:b8:
24:10:e3:6f:30:8f:65:9d:c8:47:3b:f5:87:eb:46:
8e:49:fd:83:c9:53:63:5a:cb:14:3d:c8:78:f2:3d:
f3:bd:24:8b:5a:22:46:3b:4a:28:01:b9:6a:f7:09:
49:b2:16:e1:8e:a4:89:3e:20:68:a0:35:17:c8:ef:
fe:a1:86:f8:26:94:39:3f:8b:9d:e4:41:42:97:82:
f4:a3:75:fe:79:a8:76:63:5c:9b:bd:af:f3:84:f7:
ac:4f:d4:55:86:36:ad:51:f1:0c:79:42:9e:4c:66:
68:41:ed:2d:c0:54:59:46:61:5e:99:0e:0c:1b:14:
55:9c:69:ec:8d:d2:c9:a5:3a:35:41:46:5e:02:88:
f3:3c:bd:17:be:2f:74:f9:03:77:cc:53:13:5e:58:
8a:1d:b9:4c:8b:c3:6f:f7:ce:e3:a5:f3:ea:77:70:
dd:1c:91:da:a0:ce:10:07:ed:a1:0e:01:f6:8e:bb:
4a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:24:FA:17:A6:BF:FF:AF:88:B6:E7:B7:71:2D:D2:44:2F:02:D4:05
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:16:e9:39:6c:28:95:71:da:45:17:d8:41:ae:07:cc:12:54:
80:9a:c0:fa:1e:25:54:11:76:fc:9e:90:aa:6c:25:5b:d7:e7:
83:b9:64:95:21:8c:37:77:8f:d6:4a:7d:41:05:72:92:76:ed:
52:a1:58:f0:62:40:ef:b5:de:02:0b:3a:0b:f7:31:3c:46:b2:
d4:18:d3:8d:0e:6b:92:19:46:33:db:d4:a3:fe:c3:fb:07:cc:
05:29:13:47:31:a6:74:8f:0b:49:94:45:1b:14:a3:76:5a:b3:
92:eb:1c:11:89:03:38:da:85:a9:2a:4d:13:ce:18:50:5f:e6:
b3:0b:8e:cc:3e:32:a4:fc:a8:d0:e9:55:2a:0b:a6:80:91:88:
41:5c:46:11:ee:8b:4c:d7:a1:7f:d5:ba:9f:27:c0:19:19:28:
c3:69:ba:7b:0a:ad:3a:df:3e:16:01:45:78:99:16:de:54:4f:
0d:7a:6b:aa:2f:51:23:70:8a:b6:9e:5c:67:62:7b:22:67:0b:
b8:52:90:38:5d:95:38:3e:f7:58:c1:ce:9e:3c:68:e6:cc:fd:
d1:b1:ce:ce:57:bc:c0:1b:28:06:4c:d7:5e:0f:6f:25:d9:9b:
44:e3:36:3d:d6:03:18:c4:27:df:e9:88:15:db:a1:18:00:a0:
2f:a3:72:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:32:28 2026 by rpki-client