Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json)
Hash identifier: cwmtVCS/e7PDB/Few4vgtGCb8ptJvNd/6NM6pmO0rgc=
Subject key identifier: 6D:E4:38:80:9F:DD:EE:5C:AD:22:3E:25:9F:2B:97:EF:6D:D1:A0:05
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 019DBFCAE124EB3A52010737BE3A5BA6C66E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
Manifest number: 18F3
Signing time: Fri 24 Apr 2026 14:00:37 +0000
Manifest this update: Fri 24 Apr 2026 14:00:37 +0000
Manifest next update: Sat 25 Apr 2026 14:00:37 +0000
Files and hashes: 1: 6Gck1jxV8hodHhNErcSoI6JCNmA.roa (hash: ZJ993Nb90CZhKx6tSfqiMnkrneDYqT7k3WP7+tY6XUY=)
2: 7jdX2vpO5uCMPNO9rSFgGQqc0Gw.roa (hash: ahm7PdjiT+UCze9YxNHHJ718mQmpE2KNx0aN2n76nnw=)
3: G3uJYRSZUjfrvtiFmlyRvRhBBnA.roa (hash: 1tM7Vw8K0/gUIeZ/iYC6KYD4hpW6Ty8UDOVU+XXhmB8=)
4: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: hArOGxArOxzZHUgcuuyuqDweCrHhCDNK2KVIkyKW/Z4=)
5: gNqfXwEsDs2H9TmakWZzI3gll9M.roa (hash: XIA0aeWXMxA5hB+A1Fir62br/80BKcxOMOVJi2T93Z0=)
6: onXjnQEY4hcP21uX6HvKyD_sh40.roa (hash: 1+uh6uHlVREA4Hr0Fh7rDtvFvhZ0puVYIQxEp34fL4k=)
7: sb1L_tb530EwShpxnDt_BiEWOvU.roa (hash: EMgvCRICOzvWsYzygGZP7z9kar9bIGfovvk+MIsFSak=)
8: sv2FAXo6jyPqf-vJbDUr2DO3Hg0.roa (hash: Zsa8lqyguE2u77V1Eisy6P+vc07N1wlZNc+RMj3qjdE=)
9: wknRz97PHlyOf13z1G9d-K0BBvc.roa (hash: avyftMAiCO+JYCFUGz7ppk560plkXp2uOVpLkDpCMlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bf:ca:e1:24:eb:3a:52:01:07:37:be:3a:5b:a6:c6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Apr 24 14:00:37 2026 GMT
Not After : Apr 25 14:00:37 2026 GMT
Subject: CN=6de438809fddee5cad223e259f2b97ef6dd1a005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:77:53:fa:6f:e7:9f:35:28:c8:b0:da:88:fc:
14:81:c0:42:9e:79:76:a0:6a:6c:a2:09:4c:0e:53:
84:c5:0c:24:fe:24:76:02:09:ef:96:ea:e1:3c:e4:
5b:24:d3:40:b1:ee:22:86:5c:6a:c1:6a:61:60:fc:
e4:65:2e:cf:b5:c2:0d:50:15:4e:26:1f:cd:b0:68:
04:2e:26:d2:8e:7c:c0:f9:b3:71:e1:b3:c9:03:1f:
8b:1d:47:85:95:77:82:64:33:12:ee:fa:67:d1:e1:
26:32:07:6e:d8:29:48:71:ef:48:c3:39:3e:3c:50:
0b:de:26:aa:a1:85:c3:f2:7d:5c:e5:24:8c:ae:75:
dc:64:1c:9b:7b:2f:8f:8f:f2:65:66:2d:60:da:2f:
2d:bc:af:8b:5a:39:05:cd:82:f1:3b:d9:86:e7:ec:
70:2c:1d:f3:02:2c:76:20:29:0b:2e:a2:35:82:4b:
ad:76:d5:81:5a:56:e9:07:e6:b5:c3:c0:8a:b6:a4:
51:bd:c2:fa:e3:38:34:56:2c:e7:af:7c:0f:bd:b9:
c7:b6:c0:46:f8:c9:ea:67:34:9a:f5:75:bb:1e:80:
e0:83:45:c2:6d:42:58:8e:6e:0b:17:b9:f8:44:f9:
02:8a:54:21:5e:ec:94:29:a7:7e:a3:bf:46:3b:bb:
c6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E4:38:80:9F:DD:EE:5C:AD:22:3E:25:9F:2B:97:EF:6D:D1:A0:05
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:b9:9d:2d:30:b5:cd:8c:6a:f8:16:54:cc:4d:6c:7f:63:86:
f9:0e:4b:8b:1e:0c:a2:d7:7e:5d:fd:3a:c8:50:83:fa:e2:26:
0a:73:b4:bc:61:2a:e9:a3:7b:5d:f7:e1:67:af:f7:46:0a:07:
3c:e3:26:45:d4:2a:a2:c2:c8:98:86:75:47:ae:60:ba:a2:37:
c2:57:81:3d:11:44:88:34:23:76:49:36:98:59:a0:8b:c0:ca:
cf:49:ea:8f:bc:63:4d:c9:41:46:7c:4d:77:49:af:4d:e6:93:
41:53:92:d0:cd:34:47:89:24:ff:8e:d5:a4:ff:a3:91:ba:77:
14:14:03:a4:bb:2c:2b:35:55:2d:a4:66:a2:8a:88:b3:1e:f6:
ce:1f:27:84:ae:23:48:80:3a:43:02:26:49:c8:ca:3c:33:ee:
3f:1c:9d:d9:ba:b1:87:5d:83:10:37:d3:9e:08:96:ce:63:3d:
30:6b:fd:77:10:90:6e:57:be:37:a1:7b:ef:88:20:ff:7a:19:
e8:d8:06:23:29:46:05:5b:ba:dc:1d:2b:2b:f2:46:2d:10:1e:
39:66:da:ee:e1:05:4d:b3:11:36:0e:05:c6:c6:a8:78:24:56:
94:41:01:dc:85:9d:36:9a:bf:d7:8e:f7:85:58:87:f7:6d:c1:
c9:d4:0f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 25 00:35:18 2026 by rpki-client