Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json)
Hash identifier: hx6BN1laP+lqUI/MYL/x4pqF3cMCQX9oAEgcec0UTZc=
Subject key identifier: E3:2E:5F:73:2A:18:29:CC:AE:52:A6:7A:A2:52:93:F1:CC:E7:06:75
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 01A1DE398807A1F4F6BFB80DF79C166D322E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
Manifest number: 1B15
Signing time: Sun 15 Nov 2026 08:01:14 +0000
Manifest this update: Sun 15 Nov 2026 08:01:14 +0000
Manifest next update: Mon 16 Nov 2026 08:01:14 +0000
Files and hashes: 1: 6Gck1jxV8hodHhNErcSoI6JCNmA.roa (hash: ZJ993Nb90CZhKx6tSfqiMnkrneDYqT7k3WP7+tY6XUY=)
2: 7jdX2vpO5uCMPNO9rSFgGQqc0Gw.roa (hash: ahm7PdjiT+UCze9YxNHHJ718mQmpE2KNx0aN2n76nnw=)
3: G3uJYRSZUjfrvtiFmlyRvRhBBnA.roa (hash: 1tM7Vw8K0/gUIeZ/iYC6KYD4hpW6Ty8UDOVU+XXhmB8=)
4: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: 82xs7HYN2qepw/S5+PFcnGSMy5bKHyJvaGIXZMFs8rA=)
5: gNqfXwEsDs2H9TmakWZzI3gll9M.roa (hash: XIA0aeWXMxA5hB+A1Fir62br/80BKcxOMOVJi2T93Z0=)
6: onXjnQEY4hcP21uX6HvKyD_sh40.roa (hash: 1+uh6uHlVREA4Hr0Fh7rDtvFvhZ0puVYIQxEp34fL4k=)
7: sb1L_tb530EwShpxnDt_BiEWOvU.roa (hash: EMgvCRICOzvWsYzygGZP7z9kar9bIGfovvk+MIsFSak=)
8: sv2FAXo6jyPqf-vJbDUr2DO3Hg0.roa (hash: Zsa8lqyguE2u77V1Eisy6P+vc07N1wlZNc+RMj3qjdE=)
9: wknRz97PHlyOf13z1G9d-K0BBvc.roa (hash: avyftMAiCO+JYCFUGz7ppk560plkXp2uOVpLkDpCMlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:88:07:a1:f4:f6:bf:b8:0d:f7:9c:16:6d:32:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Nov 15 08:01:14 2026 GMT
Not After : Nov 16 08:01:14 2026 GMT
Subject: CN=e32e5f732a1829ccae52a67aa25293f1cce70675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:97:52:fb:b4:62:78:89:74:0d:aa:66:6d:c2:
64:b4:dd:cc:31:53:52:ac:f5:75:47:d4:4a:3c:4d:
c2:00:83:16:a5:f1:cc:0c:10:f5:be:3f:d5:0f:dc:
e3:3d:9f:0c:8a:11:db:c6:ab:ed:63:14:a5:0f:b5:
ac:c9:81:6f:87:1d:1a:3a:1b:d7:3f:bc:47:06:c0:
67:17:ab:7a:fc:f5:4b:07:57:c2:8b:d5:bf:98:30:
43:af:5f:7b:d8:e4:dc:8d:60:ae:79:71:89:d6:42:
93:7b:ff:e2:5f:68:21:a6:63:fd:45:28:c5:c0:ac:
56:fe:7b:29:49:e4:d4:d0:75:f7:d3:49:bb:41:35:
1a:26:3d:52:32:0c:ec:7d:5e:5a:28:cf:15:57:e2:
b6:64:56:7b:b5:bf:83:f6:29:40:05:de:c7:71:a0:
f2:61:24:44:91:85:20:d3:a5:6f:7f:d4:33:f0:4d:
dc:ac:84:d1:88:78:1e:94:60:b9:03:c8:31:56:75:
f7:8f:68:00:31:da:2a:38:31:c2:65:e7:ee:12:c8:
7d:b4:c9:97:40:84:1d:cc:04:f0:6d:d6:f7:43:12:
57:5e:25:a7:63:b5:41:ed:17:1b:57:71:67:fa:32:
57:e4:f4:96:de:45:a3:dc:5d:a3:56:6c:53:88:3d:
9d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2E:5F:73:2A:18:29:CC:AE:52:A6:7A:A2:52:93:F1:CC:E7:06:75
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:79:13:eb:fb:24:91:77:90:f7:3f:fd:ad:eb:79:44:eb:a2:
06:95:0e:2c:9f:3e:b9:8b:71:eb:57:f1:80:4a:aa:94:b6:0d:
ae:af:3e:69:ea:98:06:98:03:54:4c:88:f4:fe:6a:19:82:54:
e1:c0:c2:09:14:33:cc:e0:03:dc:1b:c8:f2:20:4a:9c:61:e4:
6e:aa:27:1d:c0:30:a3:e5:93:bb:0a:c3:43:64:be:1f:ea:85:
14:44:61:cd:34:fe:db:f4:e4:7c:91:bf:db:3f:3c:d7:86:1c:
cf:0f:80:de:90:53:8a:4d:19:9a:55:1d:b3:57:6a:be:61:e8:
4c:b8:f9:e8:37:0f:47:80:51:da:c7:6c:a0:96:a0:99:a3:6f:
5c:47:43:f1:41:6e:17:b9:1d:7e:30:3e:3d:a5:fd:88:17:70:
4b:e2:59:4a:4a:1d:83:c5:38:09:42:36:07:20:a3:4f:e5:0c:
34:af:c5:3e:03:d3:f3:93:05:f7:bf:ff:84:d2:b8:96:e6:da:
12:04:8c:fe:df:19:21:e4:5e:bf:bd:2d:15:01:ac:bf:32:7b:
a2:5e:04:33:58:39:83:65:2a:0c:64:e4:89:75:8d:74:aa:ee:
2a:27:13:89:a2:96:c1:05:ee:cb:ba:ed:7a:61:2b:70:10:ad:
95:a7:76:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHeOYgHofT2v7gN95wWbTIuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OTRmY2M2YmY2YTg3NDBmYTc4MTQ2NDFmZDlkNmVjOGQ4
NjJlNWYwHhcNMjYxMTE1MDgwMTE0WhcNMjYxMTE2MDgwMTE0WjAzMTEwLwYDVQQD
EyhlMzJlNWY3MzJhMTgyOWNjYWU1MmE2N2FhMjUyOTNmMWNjZTcwNjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpdS+7RieIl0DapmbcJktN3MMVNS
rPV1R9RKPE3CAIMWpfHMDBD1vj/VD9zjPZ8MihHbxqvtYxSlD7WsyYFvhx0aOhvX
P7xHBsBnF6t6/PVLB1fCi9W/mDBDr1972OTcjWCueXGJ1kKTe//iX2ghpmP9RSjF
wKxW/nspSeTU0HX300m7QTUaJj1SMgzsfV5aKM8VV+K2ZFZ7tb+D9ilABd7HcaDy
YSREkYUg06Vvf9Qz8E3crITRiHgelGC5A8gxVnX3j2gAMdoqODHCZefuEsh9tMmX
QIQdzATwbdb3QxJXXiWnY7VB7RcbV3Fn+jJX5PSW3kWj3F2jVmxTiD2dswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMuX3MqGCnMrlKmeqJSk/HM5wZ1MB8GA1UdIwQY
MBaAFDaU/Ma/aodA+ngUZB/Z1uyNhi5fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hOGRkOWUtNzFmMi00Zjc3LWI1NzUt
MGQzZmNlNDI5YmRlLzEvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9hOGRkOWUtNzFmMi00Zjc3LWI1NzUtMGQzZmNlNDI5YmRl
LzEvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWnkT6/sk
kXeQ9z/9ret5ROuiBpUOLJ8+uYtx61fxgEqqlLYNrq8+aeqYBpgDVEyI9P5qGYJU
4cDCCRQzzOAD3BvI8iBKnGHkbqonHcAwo+WTuwrDQ2S+H+qFFERhzTT+2/TkfJG/
2z8814Yczw+A3pBTik0ZmlUds1dqvmHoTLj56DcPR4BR2sdsoJagmaNvXEdD8UFu
F7kdfjA+PaX9iBdwS+JZSkodg8U4CUI2ByCjT+UMNK/FPgPT85MF97//hNK4luba
EgSM/t8ZIeRev70tFQGsvzJ7ol4EM1g5g2UqDGTkiXWNdKruKicTiaKWwQXuy7rt
emErcBCtlad2JA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:31:27 2026 by rpki-client