Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json)
Hash identifier: ulHxeGTdcU88RBm2putKVC0UNOBog9BaVUNQKpi2FMA=
Subject key identifier: 24:BF:5C:22:E4:92:0F:BF:D7:D1:E6:5F:03:D0:6F:E6:07:15:D4:C5
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 01A175F05142605F8C0314A71EE4025ABB53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
Manifest number: 1ADF
Signing time: Mon 26 Oct 2026 02:00:45 +0000
Manifest this update: Mon 26 Oct 2026 02:00:45 +0000
Manifest next update: Tue 27 Oct 2026 02:00:45 +0000
Files and hashes: 1: 6Gck1jxV8hodHhNErcSoI6JCNmA.roa (hash: ZJ993Nb90CZhKx6tSfqiMnkrneDYqT7k3WP7+tY6XUY=)
2: 7jdX2vpO5uCMPNO9rSFgGQqc0Gw.roa (hash: ahm7PdjiT+UCze9YxNHHJ718mQmpE2KNx0aN2n76nnw=)
3: G3uJYRSZUjfrvtiFmlyRvRhBBnA.roa (hash: 1tM7Vw8K0/gUIeZ/iYC6KYD4hpW6Ty8UDOVU+XXhmB8=)
4: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: 5zQ3iMuXk2UihzOXzJ65Ro1TN84ozB1yJwZzg0lsAXI=)
5: gNqfXwEsDs2H9TmakWZzI3gll9M.roa (hash: XIA0aeWXMxA5hB+A1Fir62br/80BKcxOMOVJi2T93Z0=)
6: onXjnQEY4hcP21uX6HvKyD_sh40.roa (hash: 1+uh6uHlVREA4Hr0Fh7rDtvFvhZ0puVYIQxEp34fL4k=)
7: sb1L_tb530EwShpxnDt_BiEWOvU.roa (hash: EMgvCRICOzvWsYzygGZP7z9kar9bIGfovvk+MIsFSak=)
8: sv2FAXo6jyPqf-vJbDUr2DO3Hg0.roa (hash: Zsa8lqyguE2u77V1Eisy6P+vc07N1wlZNc+RMj3qjdE=)
9: wknRz97PHlyOf13z1G9d-K0BBvc.roa (hash: avyftMAiCO+JYCFUGz7ppk560plkXp2uOVpLkDpCMlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:f0:51:42:60:5f:8c:03:14:a7:1e:e4:02:5a:bb:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Oct 26 02:00:45 2026 GMT
Not After : Oct 27 02:00:45 2026 GMT
Subject: CN=24bf5c22e4920fbfd7d1e65f03d06fe60715d4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:57:af:23:ed:1a:12:a7:88:2d:f1:92:a5:b4:
74:61:aa:9a:28:f6:33:2b:21:b2:3c:d2:b0:f8:28:
f8:56:40:bb:94:c9:9c:57:51:33:d4:9d:9b:4c:7b:
14:28:3a:0a:07:f3:5f:2c:51:c1:e4:13:19:fe:a4:
3d:06:ca:d3:3e:74:af:08:f3:e3:38:cc:c7:02:4d:
a8:63:08:92:12:79:32:b1:00:10:a2:b4:8a:f5:2b:
4b:0c:e4:c9:c2:90:0c:e4:ac:d8:79:39:22:74:f9:
21:37:95:89:50:5f:c8:28:4a:33:c4:49:a3:cc:68:
00:e8:96:51:2c:82:50:72:69:e5:10:40:c5:9f:f0:
b8:1a:47:2a:69:dc:12:c2:07:58:b1:96:5c:b8:72:
24:43:1f:8b:7c:0e:12:22:18:ed:75:02:48:e4:4d:
20:20:fa:cf:d5:68:42:a8:be:d3:62:5a:84:03:5a:
60:f4:d7:4b:06:5e:14:5e:a5:a5:f4:46:72:cb:25:
39:a2:18:86:54:e3:d1:a5:43:55:81:e4:30:67:98:
09:8d:e1:30:b8:0a:9e:0f:74:4b:74:82:09:aa:68:
49:94:39:50:0f:11:0f:f5:f0:de:2a:0c:1a:11:5b:
07:27:ac:ab:0c:9f:7b:d7:96:a8:74:c6:56:33:49:
50:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BF:5C:22:E4:92:0F:BF:D7:D1:E6:5F:03:D0:6F:E6:07:15:D4:C5
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:71:47:fd:c0:46:d3:f7:0d:c3:18:30:e9:5f:7c:03:18:1f:
4d:a3:ff:02:45:79:fe:33:68:4d:02:a7:7c:0b:05:0c:52:4d:
27:b6:a3:44:d6:4f:20:e9:6f:56:25:41:00:c9:7b:15:15:44:
70:33:87:48:77:bb:06:0a:06:25:31:47:e0:d5:e4:ea:42:9c:
aa:da:52:f1:68:ed:68:68:e9:fd:4c:a2:4f:46:ef:2a:c9:05:
39:fb:70:7d:f9:5d:e9:88:8b:09:45:28:aa:53:d1:f8:ea:c1:
48:a6:58:c7:fc:d2:be:cf:48:93:d8:be:7b:46:12:e0:a9:ac:
98:e8:3b:ea:de:07:b4:24:c3:5d:c6:31:d7:69:77:bc:fb:36:
30:7c:c3:fb:09:41:df:e1:8a:9b:69:12:cd:2b:d0:95:70:af:
1e:7b:48:b1:39:1c:c6:1b:76:08:a7:61:01:76:c7:9c:31:e8:
57:fb:2f:53:4e:cd:48:66:5b:f5:67:f1:b3:20:f7:35:87:a0:
8b:3f:1a:08:87:7b:e1:bc:6b:c3:50:58:2e:84:84:0c:be:dd:
54:5f:34:43:58:21:4e:2c:44:67:fa:fa:84:25:fe:e2:b8:2c:
80:1e:db:5f:6d:af:7d:89:0b:89:43:25:1d:4a:c9:0d:aa:93:
56:26:b7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:44:44 2026 by rpki-client