Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json)
Hash identifier: gJjHwE+1hI+LN/fviYkptj3JHidiNHzqJylb1hCrwWo=
Subject key identifier: 89:52:56:CA:36:0A:44:8D:B6:63:84:3A:85:98:73:BF:B7:2D:E7:EE
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 019D273B2A81E60856850DC179B7C7FDE5D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
Manifest number: 18A4
Signing time: Wed 25 Mar 2026 23:01:22 +0000
Manifest this update: Wed 25 Mar 2026 23:01:22 +0000
Manifest next update: Thu 26 Mar 2026 23:01:22 +0000
Files and hashes: 1: 6Gck1jxV8hodHhNErcSoI6JCNmA.roa (hash: ZJ993Nb90CZhKx6tSfqiMnkrneDYqT7k3WP7+tY6XUY=)
2: 7jdX2vpO5uCMPNO9rSFgGQqc0Gw.roa (hash: ahm7PdjiT+UCze9YxNHHJ718mQmpE2KNx0aN2n76nnw=)
3: G3uJYRSZUjfrvtiFmlyRvRhBBnA.roa (hash: 1tM7Vw8K0/gUIeZ/iYC6KYD4hpW6Ty8UDOVU+XXhmB8=)
4: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: 95OvfIP2TZAJaHVo+sxbpgXQkaV4J0A4cEkaJ/Wwdj0=)
5: gNqfXwEsDs2H9TmakWZzI3gll9M.roa (hash: XIA0aeWXMxA5hB+A1Fir62br/80BKcxOMOVJi2T93Z0=)
6: onXjnQEY4hcP21uX6HvKyD_sh40.roa (hash: 1+uh6uHlVREA4Hr0Fh7rDtvFvhZ0puVYIQxEp34fL4k=)
7: sb1L_tb530EwShpxnDt_BiEWOvU.roa (hash: EMgvCRICOzvWsYzygGZP7z9kar9bIGfovvk+MIsFSak=)
8: sv2FAXo6jyPqf-vJbDUr2DO3Hg0.roa (hash: Zsa8lqyguE2u77V1Eisy6P+vc07N1wlZNc+RMj3qjdE=)
9: wknRz97PHlyOf13z1G9d-K0BBvc.roa (hash: avyftMAiCO+JYCFUGz7ppk560plkXp2uOVpLkDpCMlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:2a:81:e6:08:56:85:0d:c1:79:b7:c7:fd:e5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Mar 25 23:01:22 2026 GMT
Not After : Mar 26 23:01:22 2026 GMT
Subject: CN=895256ca360a448db663843a859873bfb72de7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2f:02:c5:1b:3c:94:6c:ea:a5:14:44:1b:91:
b7:76:92:37:b3:67:28:e9:0e:54:41:7c:47:f0:84:
ff:f1:62:ef:48:15:cb:ff:8f:ca:0e:69:a9:27:06:
c1:27:5f:66:b5:d1:2e:6e:6f:05:3b:24:82:ff:eb:
8d:d7:d8:d2:5c:1c:4a:50:b8:96:bf:b6:5b:1e:fd:
90:65:76:eb:b5:ec:f8:f2:05:bf:98:12:d8:ae:35:
7c:2c:7f:73:b1:21:d3:67:52:66:85:86:43:e0:1e:
e9:4b:e3:d6:e9:25:f9:c6:9c:f7:39:e3:38:59:67:
5e:02:8d:c5:5a:16:79:52:fa:2e:46:37:cd:4c:b1:
c5:ce:11:80:c1:90:86:d0:ac:1b:33:8b:74:88:35:
86:1d:cb:0e:1a:5d:7a:3b:da:e0:97:4c:cc:fc:c7:
18:88:33:40:e7:2c:49:74:eb:ab:3b:05:bf:5b:7b:
dc:2f:43:b1:48:a5:69:35:7e:a9:bd:87:ef:ad:56:
8e:91:94:f5:a0:bd:68:81:6f:be:1a:8b:86:24:3e:
53:19:cb:a0:1f:2b:47:f3:31:39:1d:48:c3:7e:17:
f2:9e:82:df:cd:5c:0e:9b:a8:82:af:70:8c:36:37:
55:54:ce:99:58:a7:a5:91:9c:23:9b:58:48:a1:33:
58:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:52:56:CA:36:0A:44:8D:B6:63:84:3A:85:98:73:BF:B7:2D:E7:EE
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:77:1e:ac:6d:3f:ff:74:62:6a:8a:4f:48:34:ea:49:39:b8:
58:a6:77:cb:43:e8:28:46:a7:30:01:28:44:18:fa:91:72:98:
ef:80:2e:42:48:31:c8:95:62:5a:12:99:7d:5c:b4:35:db:5a:
0a:33:de:ec:48:8e:98:8c:a8:a2:ae:32:75:06:6c:c5:ac:0e:
c3:c5:a1:94:dc:c9:4c:f9:1a:5c:72:3d:9b:89:95:1a:4b:84:
54:aa:f0:de:55:fe:18:53:3f:67:97:e3:3c:09:58:5f:33:58:
a0:8c:44:e8:c6:11:18:0a:2d:7a:af:e6:0b:4e:eb:bd:5b:79:
57:e8:f8:d8:b9:83:12:c3:fc:28:6f:7e:76:7d:95:98:cb:08:
e6:84:53:db:8e:4d:d1:5f:dd:bc:b7:ea:4a:6b:e2:9c:b6:fd:
94:55:74:93:9f:e2:f2:5f:b6:26:d1:36:d2:07:79:5d:50:fa:
aa:f9:13:cc:66:d1:39:1e:5c:c7:fd:86:0c:a5:fc:6a:d2:4e:
d5:e4:1b:f6:13:22:0f:72:48:59:8e:37:ae:04:73:eb:a8:1e:
ef:2b:35:bf:50:ae:3b:f3:54:94:35:00:dc:67:5e:b9:1f:88:
58:9b:40:23:82:1b:49:4a:3c:76:12:df:d5:76:5b:a7:9e:6e:
20:ba:d8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:57 2026 by rpki-client