Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json)
Hash identifier: 8B4/zxhuWuRSw2ZBw8W2ZCmqO/vui3uAMsDNZj+Kwwk=
Subject key identifier: 00:16:3D:BD:94:B8:49:63:8E:2B:9A:14:89:F1:F1:2E:00:4A:5A:70
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 01A080AD647240F552E96988A77170710522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
Manifest number: 1A60
Signing time: Tue 08 Sep 2026 11:00:41 +0000
Manifest this update: Tue 08 Sep 2026 11:00:41 +0000
Manifest next update: Wed 09 Sep 2026 11:00:41 +0000
Files and hashes: 1: 6Gck1jxV8hodHhNErcSoI6JCNmA.roa (hash: ZJ993Nb90CZhKx6tSfqiMnkrneDYqT7k3WP7+tY6XUY=)
2: 7jdX2vpO5uCMPNO9rSFgGQqc0Gw.roa (hash: ahm7PdjiT+UCze9YxNHHJ718mQmpE2KNx0aN2n76nnw=)
3: G3uJYRSZUjfrvtiFmlyRvRhBBnA.roa (hash: 1tM7Vw8K0/gUIeZ/iYC6KYD4hpW6Ty8UDOVU+XXhmB8=)
4: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: u2SHBbhle416nKr8g2i4drKhFcwcsVJqmTQmhIlSz+k=)
5: gNqfXwEsDs2H9TmakWZzI3gll9M.roa (hash: XIA0aeWXMxA5hB+A1Fir62br/80BKcxOMOVJi2T93Z0=)
6: onXjnQEY4hcP21uX6HvKyD_sh40.roa (hash: 1+uh6uHlVREA4Hr0Fh7rDtvFvhZ0puVYIQxEp34fL4k=)
7: sb1L_tb530EwShpxnDt_BiEWOvU.roa (hash: EMgvCRICOzvWsYzygGZP7z9kar9bIGfovvk+MIsFSak=)
8: sv2FAXo6jyPqf-vJbDUr2DO3Hg0.roa (hash: Zsa8lqyguE2u77V1Eisy6P+vc07N1wlZNc+RMj3qjdE=)
9: wknRz97PHlyOf13z1G9d-K0BBvc.roa (hash: avyftMAiCO+JYCFUGz7ppk560plkXp2uOVpLkDpCMlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:ad:64:72:40:f5:52:e9:69:88:a7:71:70:71:05:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Sep 8 11:00:41 2026 GMT
Not After : Sep 9 11:00:41 2026 GMT
Subject: CN=00163dbd94b849638e2b9a1489f1f12e004a5a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:44:7b:26:86:11:ba:da:38:db:e9:54:ef:71:
f0:4d:36:83:bb:c9:af:02:ab:81:54:fe:91:05:dd:
3b:e5:49:e3:db:5a:3b:8d:c3:4b:1c:73:24:be:a1:
63:8b:e6:a8:56:d6:d7:14:50:b6:f2:98:14:e7:18:
f8:2f:73:da:2e:ec:c0:71:91:d5:85:80:64:5c:73:
b9:88:e5:66:14:46:99:12:af:46:65:0a:c1:1c:83:
56:1a:4a:8b:3b:24:11:d1:52:43:b1:65:59:82:9d:
75:80:15:27:38:5b:4b:48:11:4f:91:2d:3f:3d:1d:
68:9e:61:89:81:64:92:ce:bf:ee:fa:4a:ea:f8:1f:
1a:89:bf:a2:40:35:c6:6e:4c:2f:9d:15:ec:a2:80:
4c:fc:38:53:2d:c5:4e:1f:a4:36:ab:53:b9:96:ca:
a1:01:51:59:41:a6:90:2f:1a:81:0d:d1:6a:00:0c:
7a:98:96:b9:b2:3d:30:51:a3:f9:95:f2:28:7e:a3:
8b:f5:b9:34:4f:ac:03:68:6b:92:89:ac:5e:b0:e6:
2a:63:42:6d:75:d7:04:3c:6f:43:0e:f6:b6:5f:66:
6e:23:a7:cf:6a:b2:34:dd:81:1f:ac:3f:c7:47:b4:
a0:4e:8c:ba:00:70:e6:14:09:b6:35:da:2a:0d:ff:
60:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:16:3D:BD:94:B8:49:63:8E:2B:9A:14:89:F1:F1:2E:00:4A:5A:70
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d3:f1:1d:f8:83:dd:61:48:8c:67:cb:dd:bd:2a:ee:d2:fa:
16:f4:e5:fd:3d:54:3d:a3:7b:e3:12:99:b8:ff:ea:4f:52:2a:
47:64:de:6c:50:56:b5:45:99:79:11:3a:ac:ae:f1:f1:69:bf:
27:26:ad:9b:2c:08:19:9f:81:2c:25:46:87:2b:52:a8:bf:7f:
c4:55:43:a9:74:ee:cf:e5:7e:29:c7:32:aa:52:83:26:e9:be:
69:7d:fe:2d:11:27:bd:e7:10:2c:19:73:1c:ee:18:3a:41:26:
32:15:fc:8b:a8:ed:7f:94:77:95:ab:ab:06:d7:f1:29:ec:fa:
65:1e:47:66:df:6c:3b:f5:ed:a5:7a:10:d8:60:72:8c:fc:3a:
e9:78:4b:a0:88:8d:f7:b0:5b:48:48:f3:42:2d:63:39:0f:56:
7b:5f:33:08:90:8b:fc:df:6c:6d:ad:f7:4a:20:b9:fb:ab:d5:
cc:85:ab:24:94:67:41:34:66:c0:90:3a:9a:7b:6f:e8:fc:04:
c4:24:47:22:27:54:dd:6e:99:61:50:b7:7d:68:67:e5:da:32:
06:1a:cf:fa:4f:7a:a2:d9:58:0a:95:80:03:f0:da:fc:ee:b8:
7d:75:c3:8e:7c:e0:69:f2:cd:8f:ab:7f:f9:99:60:73:89:0c:
6a:c7:53:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 17:15:03 2026 by rpki-client