Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json)
Hash identifier: 6cIx1jEdGpzERQxfkvZjm9jzkh3LzClzK1W89ZpX7uo=
Subject key identifier: DC:DA:E8:FC:83:10:EE:85:02:00:14:AB:EF:B8:26:B2:71:A3:90:F0
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 019F91360E349CA843E45A234335225D539F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
Manifest number: 19E4
Signing time: Thu 23 Jul 2026 23:01:06 +0000
Manifest this update: Thu 23 Jul 2026 23:01:06 +0000
Manifest next update: Fri 24 Jul 2026 23:01:06 +0000
Files and hashes: 1: 6Gck1jxV8hodHhNErcSoI6JCNmA.roa (hash: ZJ993Nb90CZhKx6tSfqiMnkrneDYqT7k3WP7+tY6XUY=)
2: 7jdX2vpO5uCMPNO9rSFgGQqc0Gw.roa (hash: ahm7PdjiT+UCze9YxNHHJ718mQmpE2KNx0aN2n76nnw=)
3: G3uJYRSZUjfrvtiFmlyRvRhBBnA.roa (hash: 1tM7Vw8K0/gUIeZ/iYC6KYD4hpW6Ty8UDOVU+XXhmB8=)
4: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: AQLhLexkqtygx36ecAesjyyJEx0HaZAGi0xzOIFlJr0=)
5: gNqfXwEsDs2H9TmakWZzI3gll9M.roa (hash: XIA0aeWXMxA5hB+A1Fir62br/80BKcxOMOVJi2T93Z0=)
6: onXjnQEY4hcP21uX6HvKyD_sh40.roa (hash: 1+uh6uHlVREA4Hr0Fh7rDtvFvhZ0puVYIQxEp34fL4k=)
7: sb1L_tb530EwShpxnDt_BiEWOvU.roa (hash: EMgvCRICOzvWsYzygGZP7z9kar9bIGfovvk+MIsFSak=)
8: sv2FAXo6jyPqf-vJbDUr2DO3Hg0.roa (hash: Zsa8lqyguE2u77V1Eisy6P+vc07N1wlZNc+RMj3qjdE=)
9: wknRz97PHlyOf13z1G9d-K0BBvc.roa (hash: avyftMAiCO+JYCFUGz7ppk560plkXp2uOVpLkDpCMlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:36:0e:34:9c:a8:43:e4:5a:23:43:35:22:5d:53:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Jul 23 23:01:06 2026 GMT
Not After : Jul 24 23:01:06 2026 GMT
Subject: CN=dcdae8fc8310ee85020014abefb826b271a390f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:85:0c:6c:ea:c6:d0:2b:dd:39:cb:90:a5:ef:
03:04:35:dd:60:dd:0e:52:fb:1b:56:00:9f:f7:b4:
16:67:63:32:89:8f:de:99:fc:1a:b6:4d:1d:57:a9:
b6:64:5c:37:ff:ae:b5:d8:49:32:df:18:11:5e:06:
e7:7f:fa:16:49:00:f4:0b:70:8d:fd:e3:d5:f8:c8:
d1:0d:62:d2:f3:9e:bf:35:93:bc:6f:c4:26:1f:c1:
95:8b:dc:fc:ed:96:d2:49:0b:ed:48:08:19:ad:ec:
25:ff:a8:f4:14:9d:1d:aa:f9:46:fa:23:f5:e2:3b:
08:18:30:31:b2:f7:aa:ac:1f:1b:a1:45:f1:7f:96:
b9:f5:12:34:06:0a:95:01:09:fb:6d:19:a9:af:b7:
96:4f:7e:32:16:6b:69:db:16:fe:aa:4b:10:ee:a3:
cc:d0:a0:8f:0b:6e:10:1a:4c:0f:f2:67:76:d9:be:
e8:24:4f:aa:2a:99:74:77:57:d2:0e:9f:8f:5b:72:
4d:b3:b3:1c:fc:e3:9c:ae:29:46:ee:2d:b5:c0:c2:
8a:ca:fe:cd:5e:02:51:df:cb:e8:fd:23:86:b0:cb:
43:e0:cd:43:a2:99:0d:f4:c8:d1:4b:9a:ec:b2:68:
f1:d0:90:4f:f5:de:51:8a:95:6f:23:2a:be:9e:4e:
f8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DA:E8:FC:83:10:EE:85:02:00:14:AB:EF:B8:26:B2:71:A3:90:F0
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:80:35:2e:18:99:ed:8b:55:be:30:81:ba:34:a5:ef:70:dc:
d4:02:ac:ff:18:c1:ef:ca:d1:2c:42:60:cd:e8:27:d3:c8:d5:
ac:34:9a:b7:65:51:b6:e2:8f:d0:47:42:e4:29:5a:64:7f:ea:
05:0f:4d:f6:0a:ca:75:45:14:2c:46:c3:33:3d:77:3a:8e:de:
8e:c5:d4:7b:5d:00:1d:eb:58:af:d9:30:bd:19:7e:3d:7f:d9:
cf:f4:f9:aa:be:3e:77:0f:22:76:5f:07:1b:e3:6c:28:ac:d0:
8b:dd:58:d7:75:31:36:63:e2:97:8c:05:26:8d:0b:5b:6d:ed:
88:aa:42:9a:a8:fb:36:00:0b:2e:b6:73:27:8d:53:dd:91:81:
44:77:e2:31:b6:27:b2:e8:38:51:4a:e6:40:b3:61:f6:65:b7:
78:5c:17:9c:cf:49:da:22:32:fe:ca:56:52:80:1d:97:a8:b9:
3c:f3:32:f1:8d:aa:ef:df:95:c0:18:a8:83:74:f9:d3:ac:e8:
e1:7c:6f:59:4d:50:bd:d8:a7:62:6d:f2:ad:61:36:ac:71:07:
7f:c0:34:6d:12:23:a7:5c:ec:20:87:63:86:69:b0:54:f4:a8:
f8:6b:07:43:65:2b:17:b6:97:d9:da:ba:36:60:6a:94:18:82:
df:ff:2e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:42:41 2026 by rpki-client