Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
File: t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft (raw, json)
Hash identifier: 5JxEYSZ597cTvbU2ndce7pqKyAknZJDV52fh7benQAc=
Subject key identifier: 09:CE:74:65:9C:78:5D:B3:BB:2E:40:ED:37:9E:E5:C1:42:F6:31:53
Authority key identifier: B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
Certificate issuer: /CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Certificate serial: 019D27724B82EC32F10FFED7238A40C1508B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
Manifest number: 0CEB
Signing time: Thu 26 Mar 2026 00:01:35 +0000
Manifest this update: Thu 26 Mar 2026 00:01:35 +0000
Manifest next update: Fri 27 Mar 2026 00:01:35 +0000
Files and hashes: 1: 1LdSNQtPKGuFRCqVT7O_Fm0yv40.roa (hash: 5g11W+WX3bmU8CryNIDPD2SicuCDU6UduQYdcWR73Uc=)
2: RzWzE6OpgeFZk0yxSCkJMoNMTwA.roa (hash: EOrql+fdFMhDNMTm2/S5izzC4MsYg2L6WcA9m2Sp+8U=)
3: t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl (hash: ItaSIM3oK1L9NhcXnB5XPqeYGdeHVDqZrDpnpTP+zAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:4b:82:ec:32:f1:0f:fe:d7:23:8a:40:c1:50:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Validity
Not Before: Mar 26 00:01:35 2026 GMT
Not After : Mar 27 00:01:35 2026 GMT
Subject: CN=09ce74659c785db3bb2e40ed379ee5c142f63153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4a:c8:90:05:f6:e6:3f:c0:79:cb:a2:a8:c6:
ca:60:68:fa:d7:b6:c9:99:cb:46:3a:fe:f1:04:b0:
5c:54:11:f2:a7:cc:42:c3:9d:48:3d:75:39:60:f1:
73:94:60:ea:fc:3a:fc:f1:9f:bd:e1:55:36:b6:80:
b3:40:6d:2b:b6:25:cd:48:57:fb:09:57:05:41:5b:
ad:e1:dc:5b:5b:ea:06:7b:82:9c:f5:74:15:d2:b0:
c2:a9:35:b9:ec:28:5a:b8:c5:67:c1:de:e4:41:ca:
18:a5:bb:8f:3d:73:09:cf:aa:d0:18:b2:a1:8a:29:
6f:c6:d7:07:0e:74:5a:e3:1a:d6:55:92:94:7f:e2:
b1:10:0b:78:8d:78:63:8c:f1:41:30:79:f9:8c:3e:
76:f2:63:94:b9:8e:c9:f8:57:52:d1:7d:98:5f:79:
bb:e4:e8:76:ee:e0:9a:1c:9b:09:32:92:37:12:e1:
8e:bf:ce:4f:04:9c:f4:89:30:29:93:0c:64:dc:39:
3f:e1:84:5b:f9:7a:25:00:18:d2:df:17:76:f3:81:
7b:e9:61:68:69:24:44:21:55:de:55:9d:d1:c1:0c:
3b:33:11:94:43:07:5e:b8:67:00:e8:ab:c0:7b:bf:
50:cb:34:e6:ec:82:43:af:25:95:8c:4f:51:b3:76:
cc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CE:74:65:9C:78:5D:B3:BB:2E:40:ED:37:9E:E5:C1:42:F6:31:53
X509v3 Authority Key Identifier:
keyid:B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b5:ca:26:e0:a6:80:08:c8:97:dd:04:18:51:d4:66:bd:25:
ad:60:a9:f9:8e:64:42:bf:d1:48:8c:ba:95:ee:1b:ae:38:f6:
5e:b4:71:c8:8e:ca:47:88:ad:f9:31:79:a2:31:2f:15:ea:f5:
de:28:8a:68:d5:39:91:9b:bd:ab:8a:6b:13:fc:66:15:45:5c:
65:8d:3c:27:34:d7:05:05:c9:1c:76:35:cc:c1:e6:33:11:e6:
e3:6d:15:4a:ae:dc:f5:bc:e9:c8:59:69:bf:34:99:75:9d:f1:
63:7b:b8:22:36:c1:ea:aa:56:15:21:5f:07:62:2e:30:fd:e1:
97:49:6f:f5:d0:51:34:4b:e4:59:3d:86:be:ce:c8:b3:db:3f:
e0:ba:54:d3:23:a8:c6:2b:68:7b:c1:5f:81:17:88:f6:37:00:
91:f6:db:4c:f1:f9:7b:7e:41:e7:cf:4b:af:ed:71:e4:b3:a0:
98:b6:2a:27:ac:40:40:53:96:b0:32:74:a7:24:d3:89:c4:ab:
b6:c5:33:ce:3f:52:91:19:42:13:d8:29:d0:9d:de:24:87:4f:
5b:7c:36:f6:42:41:34:bb:dc:1b:2c:35:80:ca:be:1c:2a:ed:
c8:c2:82:dc:3f:51:2b:3a:5a:7f:53:bd:f9:a1:f3:ed:b3:08:
e2:9c:90:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:56:16 2026 by rpki-client