Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json)
Hash identifier: K0ypjL86+Oxuzox+RWtZ7L7Np7hkRLDxt8BcXsrb7J8=
Subject key identifier: B1:A8:F8:95:4A:79:9B:B1:15:E1:D0:06:B7:92:66:0F:72:73:35:08
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 019CD61E99ED477C158E170EB51C2DE1AFF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
Manifest number: 187A
Signing time: Tue 10 Mar 2026 05:00:55 +0000
Manifest this update: Tue 10 Mar 2026 05:00:55 +0000
Manifest next update: Wed 11 Mar 2026 05:00:55 +0000
Files and hashes: 1: 6Gck1jxV8hodHhNErcSoI6JCNmA.roa (hash: ZJ993Nb90CZhKx6tSfqiMnkrneDYqT7k3WP7+tY6XUY=)
2: 7jdX2vpO5uCMPNO9rSFgGQqc0Gw.roa (hash: ahm7PdjiT+UCze9YxNHHJ718mQmpE2KNx0aN2n76nnw=)
3: G3uJYRSZUjfrvtiFmlyRvRhBBnA.roa (hash: 1tM7Vw8K0/gUIeZ/iYC6KYD4hpW6Ty8UDOVU+XXhmB8=)
4: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: 0MqPxul4xQ02+M8LUZIg3Its1uclSqGPRwbeN0YzuTM=)
5: gNqfXwEsDs2H9TmakWZzI3gll9M.roa (hash: XIA0aeWXMxA5hB+A1Fir62br/80BKcxOMOVJi2T93Z0=)
6: onXjnQEY4hcP21uX6HvKyD_sh40.roa (hash: 1+uh6uHlVREA4Hr0Fh7rDtvFvhZ0puVYIQxEp34fL4k=)
7: sb1L_tb530EwShpxnDt_BiEWOvU.roa (hash: EMgvCRICOzvWsYzygGZP7z9kar9bIGfovvk+MIsFSak=)
8: sv2FAXo6jyPqf-vJbDUr2DO3Hg0.roa (hash: Zsa8lqyguE2u77V1Eisy6P+vc07N1wlZNc+RMj3qjdE=)
9: wknRz97PHlyOf13z1G9d-K0BBvc.roa (hash: avyftMAiCO+JYCFUGz7ppk560plkXp2uOVpLkDpCMlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d6:1e:99:ed:47:7c:15:8e:17:0e:b5:1c:2d:e1:af:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Mar 10 05:00:55 2026 GMT
Not After : Mar 11 05:00:55 2026 GMT
Subject: CN=b1a8f8954a799bb115e1d006b792660f72733508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:64:b4:71:60:d9:83:68:47:fa:fc:e5:15:98:
3b:74:35:77:d9:05:b2:91:80:e6:e8:85:2e:22:b3:
37:f3:26:cf:04:8f:a0:0c:b3:01:6b:a9:2a:f9:84:
b9:4c:98:67:50:d8:41:19:be:03:20:ec:35:09:69:
ef:7a:45:5a:55:17:78:0f:33:16:98:b8:6d:6c:70:
c1:06:fe:9e:30:ff:35:67:7c:59:b1:5a:82:2e:d1:
33:62:4d:49:cb:3e:b6:71:93:d3:d2:45:46:df:58:
de:ef:0e:b3:0b:e5:e9:00:3b:29:d7:af:79:bd:16:
60:a1:d0:7c:91:ca:4a:4f:56:ec:f8:99:6c:1c:24:
05:dc:2f:5f:ce:de:a1:ab:67:e0:dc:ff:21:a4:78:
3c:e5:2a:93:65:d6:04:32:8e:10:48:56:91:8a:0b:
2c:d5:1e:2a:e9:19:b3:f8:18:3e:d6:6d:c8:71:a1:
04:0f:fb:c7:e6:24:91:24:35:85:9d:04:7c:97:fa:
0b:f5:a0:ae:6b:e4:fb:32:0c:bf:7b:46:22:40:e7:
c4:49:62:75:52:22:e3:3e:9f:01:34:17:c5:7f:f7:
28:fd:c2:53:1f:fc:ca:fc:eb:b4:2d:cf:43:38:2a:
42:50:5a:c9:51:1c:08:35:6f:ab:1e:65:f7:3f:d8:
4f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A8:F8:95:4A:79:9B:B1:15:E1:D0:06:B7:92:66:0F:72:73:35:08
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:aa:21:94:93:35:e3:4a:ea:e6:4e:ee:f2:a4:f5:1d:36:ea:
44:8a:fb:0d:fc:7f:15:ab:00:99:f1:44:7b:86:4f:f0:e7:85:
db:7b:89:cd:02:e6:f1:aa:77:6f:b6:e4:f0:0a:83:55:f9:3e:
f1:0b:f2:81:83:32:53:18:a4:ce:9d:48:73:0e:4a:1e:8f:e2:
90:a3:07:f3:59:61:b0:d6:5c:9c:72:97:96:96:82:d3:16:d4:
4f:08:e3:ca:28:6f:a7:54:88:c2:24:8a:e2:fa:57:94:44:65:
75:e2:51:56:68:99:28:fd:7c:4a:96:9b:fb:bd:06:10:8b:bc:
a7:48:4d:8e:e5:cc:56:73:91:67:1b:0a:d3:a7:e7:df:35:d9:
56:9a:fd:5a:8e:c1:9e:0a:26:c0:ff:ea:df:4f:9b:be:66:92:
19:af:e3:7d:a9:03:4a:fc:bb:bb:cc:b8:ce:ad:18:e0:03:ad:
1c:15:3d:53:ca:e9:8e:9d:c6:8f:c8:3f:03:44:58:0e:9d:99:
42:8e:0a:85:10:cb:f7:25:90:c0:c1:52:59:97:5d:4b:d1:47:
c1:a3:9b:38:a0:0c:39:30:de:c9:6e:0a:f5:cd:76:9a:91:cd:
bb:bd:98:d8:54:eb:df:2d:9f:37:56:0c:04:1c:0d:e3:a0:22:
1d:53:26:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 11:21:18 2026 by rpki-client