Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
File: t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft (raw, json)
Hash identifier: TvQ1JCzByAhKZ8C2md34qgmvc9c0TchDvIUccuue/yk=
Subject key identifier: CB:AE:2D:B5:F7:6C:DF:56:2E:8A:F9:6B:D1:92:4A:F1:6E:76:30:C6
Authority key identifier: B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
Certificate issuer: /CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Certificate serial: 019E491FEE10BF478561A99B2DB5AFEBFE37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
Manifest number: 0D81
Signing time: Thu 21 May 2026 06:01:29 +0000
Manifest this update: Thu 21 May 2026 06:01:29 +0000
Manifest next update: Fri 22 May 2026 06:01:29 +0000
Files and hashes: 1: 1LdSNQtPKGuFRCqVT7O_Fm0yv40.roa (hash: 5g11W+WX3bmU8CryNIDPD2SicuCDU6UduQYdcWR73Uc=)
2: RzWzE6OpgeFZk0yxSCkJMoNMTwA.roa (hash: EOrql+fdFMhDNMTm2/S5izzC4MsYg2L6WcA9m2Sp+8U=)
3: t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl (hash: a1dYMcT5tTlu/9zWMX3cgYJGublwoBYu5PAfj981/xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 06:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:49:1f:ee:10:bf:47:85:61:a9:9b:2d:b5:af:eb:fe:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Validity
Not Before: May 21 06:01:29 2026 GMT
Not After : May 22 06:01:29 2026 GMT
Subject: CN=cbae2db5f76cdf562e8af96bd1924af16e7630c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a4:80:dd:86:a4:c7:83:8b:cd:89:08:bf:91:
68:bb:2b:d6:81:df:2f:30:52:62:32:7a:04:a0:af:
64:de:cd:ea:aa:90:2b:67:b3:d2:65:2b:62:92:54:
25:d8:0c:b2:7e:98:cf:d4:30:6c:5d:18:22:0b:4a:
6f:1c:33:3e:a9:11:2a:a7:fc:a2:b3:17:47:99:93:
0c:c0:22:fc:d1:8f:db:87:86:1e:88:11:d1:3b:cc:
da:3c:1a:ac:2b:33:4c:7d:c1:8f:5e:f6:8f:64:3c:
49:39:c7:6b:a1:74:e2:9c:1b:38:ef:6f:ed:1f:55:
a1:c9:61:49:84:32:1b:6a:44:26:7a:27:26:3d:78:
15:b0:8f:ff:73:bb:78:7a:0a:4e:5e:2e:ff:b6:2d:
c7:08:69:19:b8:ee:a6:ef:21:e8:10:f6:ed:23:cd:
5e:35:91:97:15:8a:9e:19:ec:ed:c3:9f:e2:38:7d:
02:fc:8e:30:38:6c:f6:92:29:27:87:8e:fc:cf:8e:
e6:5f:f9:74:6b:66:eb:f8:df:04:6b:59:ef:7a:f5:
36:17:cb:f9:7d:d8:49:30:33:b8:80:22:51:c6:a4:
dc:e3:aa:dc:3c:08:52:6f:a0:48:6f:12:73:03:ba:
b1:bf:1b:78:59:70:02:42:c6:bd:ac:ab:85:e3:4d:
75:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AE:2D:B5:F7:6C:DF:56:2E:8A:F9:6B:D1:92:4A:F1:6E:76:30:C6
X509v3 Authority Key Identifier:
keyid:B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d6:cd:3b:b8:e2:cd:07:91:ee:f9:bb:53:48:b5:d3:e9:9e:
f3:55:9c:3f:69:2f:87:05:d2:42:4b:26:3f:11:ce:a0:c7:9c:
7d:2b:b6:74:c0:36:4a:dd:3c:93:ec:a6:e3:35:26:b7:71:e1:
63:33:9c:53:c0:a7:66:93:9a:43:97:6b:60:5d:9f:ac:01:84:
06:c1:fa:15:9c:e3:ba:e5:4a:f5:86:60:7d:46:c6:b3:a4:ac:
8e:ae:31:1d:1a:d3:69:67:cd:62:67:68:1e:5b:54:f5:b4:c1:
f9:40:11:3f:53:e2:12:68:de:3c:ec:b5:f3:15:07:90:9a:e8:
1a:35:0b:42:ca:06:ec:f7:2a:e6:5e:78:c0:9c:10:67:9a:08:
7a:90:b2:bb:49:07:47:66:bd:01:55:a4:14:6b:19:89:0f:2b:
98:4c:fd:7c:df:01:ab:10:34:54:09:89:b4:45:ec:7b:50:bb:
eb:57:7c:97:28:b0:03:10:7d:d8:38:60:a0:3d:97:34:2a:dc:
f5:8c:dd:b7:74:83:26:ec:83:ed:7a:ab:5c:cc:aa:f1:38:a4:
46:72:17:a3:ab:60:85:41:01:19:6a:bb:54:29:8a:60:d1:4f:
9f:9a:d9:4a:2e:df:ec:1f:28:c3:77:2d:2f:19:02:f4:12:80:
a3:64:03:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 15:39:59 2026 by rpki-client