Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json)
Hash identifier: EBr1De7zwPufOyQqU7TlrXP9TFqxE8fMpWSmW2U6qAE=
Subject key identifier: 7A:4E:E3:C1:54:0C:B5:82:23:02:83:D8:EE:25:EC:E3:4E:2A:00:43
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 019EA977BA174B89D60E5CB0E55594B9B6B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
Manifest number: 196C
Signing time: Mon 08 Jun 2026 23:00:56 +0000
Manifest this update: Mon 08 Jun 2026 23:00:56 +0000
Manifest next update: Tue 09 Jun 2026 23:00:56 +0000
Files and hashes: 1: 6Gck1jxV8hodHhNErcSoI6JCNmA.roa (hash: ZJ993Nb90CZhKx6tSfqiMnkrneDYqT7k3WP7+tY6XUY=)
2: 7jdX2vpO5uCMPNO9rSFgGQqc0Gw.roa (hash: ahm7PdjiT+UCze9YxNHHJ718mQmpE2KNx0aN2n76nnw=)
3: G3uJYRSZUjfrvtiFmlyRvRhBBnA.roa (hash: 1tM7Vw8K0/gUIeZ/iYC6KYD4hpW6Ty8UDOVU+XXhmB8=)
4: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: sfyKk+Rud/M+7TKxrKX+Kz3UyJd9r0U9XY1eJTdYyaA=)
5: gNqfXwEsDs2H9TmakWZzI3gll9M.roa (hash: XIA0aeWXMxA5hB+A1Fir62br/80BKcxOMOVJi2T93Z0=)
6: onXjnQEY4hcP21uX6HvKyD_sh40.roa (hash: 1+uh6uHlVREA4Hr0Fh7rDtvFvhZ0puVYIQxEp34fL4k=)
7: sb1L_tb530EwShpxnDt_BiEWOvU.roa (hash: EMgvCRICOzvWsYzygGZP7z9kar9bIGfovvk+MIsFSak=)
8: sv2FAXo6jyPqf-vJbDUr2DO3Hg0.roa (hash: Zsa8lqyguE2u77V1Eisy6P+vc07N1wlZNc+RMj3qjdE=)
9: wknRz97PHlyOf13z1G9d-K0BBvc.roa (hash: avyftMAiCO+JYCFUGz7ppk560plkXp2uOVpLkDpCMlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jun 2026 19:19:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a9:77:ba:17:4b:89:d6:0e:5c:b0:e5:55:94:b9:b6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Jun 8 23:00:56 2026 GMT
Not After : Jun 9 23:00:56 2026 GMT
Subject: CN=7a4ee3c1540cb582230283d8ee25ece34e2a0043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bf:85:14:f7:7e:d0:b0:93:9b:c6:8e:29:9a:
54:ef:b5:7d:e3:04:3a:d9:12:5d:89:4a:6f:db:0a:
27:06:86:d1:6b:d0:7f:7b:d8:86:cc:9c:7b:f9:3c:
0e:c5:67:ba:65:77:13:6e:31:d0:02:1d:9e:bd:f4:
59:bf:a4:5f:1a:6b:34:f6:48:16:9e:79:e3:16:30:
f4:d6:54:8b:f0:ec:3e:be:21:11:84:3a:eb:e2:fb:
1a:aa:d4:a8:a6:72:c1:a0:5b:aa:86:61:7e:99:5d:
cb:ec:01:e0:8c:6c:da:3b:1d:45:c2:78:68:c1:2f:
dd:09:fe:d0:3f:ce:fa:91:9e:41:5e:10:32:72:61:
7b:75:0d:a0:17:c1:8a:e5:be:db:90:12:06:f0:85:
cb:1c:fc:4f:96:c9:af:e5:ff:3e:cb:22:cf:75:57:
24:9d:e3:57:9a:d5:aa:9a:36:76:89:21:5c:ab:68:
3c:ef:69:f0:d0:65:69:f1:17:19:a1:cb:7f:86:b5:
a3:dd:aa:b7:3b:06:77:61:48:7b:b7:55:f9:b5:28:
11:1c:f7:73:17:2a:2c:95:d8:86:94:b5:d2:ba:c5:
27:4a:74:ef:60:43:2c:a7:49:0a:06:de:0e:4b:a4:
0d:aa:b6:61:32:be:b3:9d:ed:0e:a9:9d:f7:78:32:
e9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4E:E3:C1:54:0C:B5:82:23:02:83:D8:EE:25:EC:E3:4E:2A:00:43
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:c1:57:87:81:93:51:4e:f5:ef:fe:31:c0:3c:27:e6:b6:1a:
ab:54:2b:68:b8:40:6f:b5:23:ff:cc:36:80:59:7c:70:70:05:
c4:59:5a:f6:b6:95:e2:a8:dc:f3:f6:e4:ee:bb:04:82:6d:23:
2a:81:85:3f:b4:f5:9e:3e:39:c8:9a:eb:06:89:b2:37:c1:d3:
24:b3:f2:8b:64:8c:41:63:9c:ef:81:84:6a:60:09:bf:a9:d8:
08:b5:7d:29:e1:12:39:e5:7b:b9:c2:01:f2:dd:3a:eb:88:c2:
01:9c:24:b6:1d:c7:77:87:c0:7b:df:37:b0:48:d0:92:be:77:
c5:f4:53:67:1d:8b:07:5e:bf:d3:fc:e6:bd:7e:c9:23:c7:43:
9d:21:a2:79:dc:31:13:43:1b:1c:d8:c1:32:a2:c3:70:c9:3a:
b7:27:27:6a:44:c1:8a:de:00:55:ca:9d:05:ae:db:58:5a:d0:
c0:8a:c6:1a:88:68:16:f7:ec:93:87:c6:b0:87:5d:4c:c4:ee:
cf:73:7f:6a:f9:2e:4d:18:33:fa:6d:5d:67:45:4b:0f:c5:01:
19:c4:d7:82:30:18:76:03:d8:39:6d:8c:4e:e8:6f:62:c0:ae:
e5:ad:11:f0:31:38:5b:d2:34:05:7c:13:53:a7:d5:db:d9:6c:
1b:45:c7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 04:51:39 2026 by rpki-client