Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
File: NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft (raw, json)
Hash identifier: FRsiEBBtybenRk9eq3oOKMYOsYj3t9v4I/I4VYTjbso=
Subject key identifier: EB:08:6B:8E:2B:4A:7A:B8:FC:23:53:50:27:E5:D0:D5:5E:77:7E:D6
Authority key identifier: 35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
Certificate issuer: /CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Certificate serial: 01A0016F26CBDB2CC14580BADA64B1AEF297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
Manifest number: 127F
Signing time: Fri 14 Aug 2026 18:00:56 +0000
Manifest this update: Fri 14 Aug 2026 18:00:56 +0000
Manifest next update: Sat 15 Aug 2026 18:00:56 +0000
Files and hashes: 1: 1dnMq6ZCcFb70edGxGmL0hiobfI.roa (hash: +vsRlNxh8n7NYthhGysqntNveXYKCA8nzfq82JjmeCw=)
2: NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl (hash: S3nVgAnyIFJ5P/qWpP4qNvxpy1jdSczA2bSZAI+7XI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:26:cb:db:2c:c1:45:80:ba:da:64:b1:ae:f2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Validity
Not Before: Aug 14 18:00:56 2026 GMT
Not After : Aug 15 18:00:56 2026 GMT
Subject: CN=eb086b8e2b4a7ab8fc23535027e5d0d55e777ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:77:ec:bf:1a:4c:24:06:fe:1f:81:c8:ec:1f:
12:5c:ad:8d:84:4f:a7:d0:5e:5f:c3:6b:60:f5:01:
99:f4:3c:ff:6c:34:10:6b:d3:87:c7:a8:99:f5:26:
37:10:d1:0e:2d:24:ce:db:3c:76:f0:39:bd:9c:e8:
0e:13:ec:3e:55:72:55:80:19:f4:42:3c:49:50:21:
a4:56:28:90:2b:76:a0:d2:93:37:af:8b:1d:2d:a0:
12:88:0b:1a:41:15:99:f0:a5:f8:76:27:fd:a3:c0:
dd:78:e2:29:f6:1b:3d:75:25:96:67:54:98:65:44:
5b:17:95:80:ab:7f:cb:32:86:19:f0:0d:a8:e5:44:
4e:6c:52:e1:9a:49:de:f2:9c:35:aa:09:92:8c:4b:
3b:85:5e:1d:d6:53:b5:04:bc:fa:5b:51:c0:a5:84:
a7:2e:75:ce:7c:c9:d2:54:6e:27:ac:01:c6:5c:8f:
73:96:ec:ae:98:c3:95:e1:67:9d:fd:e5:08:72:dd:
03:b8:fd:57:04:89:cb:34:56:6a:13:2f:e1:6b:90:
45:d3:47:3d:d5:66:00:0c:38:5e:dd:6d:55:4f:7c:
d0:10:ca:7a:bf:42:75:0f:97:76:e3:2c:8a:66:5f:
d1:52:c0:5f:bc:33:d8:a4:92:51:e4:60:23:d6:04:
15:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:08:6B:8E:2B:4A:7A:B8:FC:23:53:50:27:E5:D0:D5:5E:77:7E:D6
X509v3 Authority Key Identifier:
keyid:35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:6b:14:e5:f2:8a:7b:cb:f0:00:85:b1:19:88:04:b9:43:24:
93:f8:1e:11:4c:68:ff:d0:0c:e7:36:cd:94:97:87:ff:dd:0a:
e8:5f:7b:ac:d3:45:b6:78:c0:68:58:7f:24:5e:08:ef:d5:30:
84:03:51:17:4f:97:5d:e5:28:a2:15:3d:e3:dc:bf:96:e4:14:
f1:56:6e:ee:3d:ad:0f:1a:5c:d6:5f:40:46:1a:f3:12:72:16:
b9:87:6f:15:89:9c:d8:40:41:53:8c:fd:b7:16:db:aa:ac:39:
4d:03:4f:d6:2f:62:6c:91:01:9e:fd:db:98:86:e3:a1:6a:b7:
2a:d5:e3:cc:ab:3e:17:c6:f7:6b:c2:ec:ab:6e:3c:e6:67:f1:
b7:5e:41:83:fa:b5:17:72:ed:bc:82:ae:db:15:4d:f8:ef:a5:
86:a6:f7:cc:f3:6b:57:8a:63:a0:55:ee:b3:b5:2d:7e:d2:42:
55:08:c8:77:88:2a:f8:e4:71:02:06:d1:9e:76:c9:66:9a:85:
60:98:87:38:77:e4:a0:ed:a4:ec:3c:a8:f8:41:73:a6:66:f3:
f7:aa:c5:93:41:c5:50:3e:b9:62:e7:20:df:1a:a5:0c:83:cf:
b8:c2:4e:8c:09:db:31:b9:fc:50:71:42:e6:e0:03:18:95:ed:
cb:82:3a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:40:09 2026 by rpki-client