Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
File: t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft (raw, json)
Hash identifier: I6owrtpzD28mjzxtSncv1FbFlR1XjwFdkkjoCOI8XAo=
Subject key identifier: 7A:58:A5:25:50:63:FA:E6:EF:34:C0:E4:12:88:59:C2:B4:8F:92:FA
Authority key identifier: B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
Certificate issuer: /CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Certificate serial: 019D38D315E96BB069E27979560B869A971D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
Manifest number: 0CF4
Signing time: Sun 29 Mar 2026 09:00:50 +0000
Manifest this update: Sun 29 Mar 2026 09:00:50 +0000
Manifest next update: Mon 30 Mar 2026 09:00:50 +0000
Files and hashes: 1: 1LdSNQtPKGuFRCqVT7O_Fm0yv40.roa (hash: 5g11W+WX3bmU8CryNIDPD2SicuCDU6UduQYdcWR73Uc=)
2: RzWzE6OpgeFZk0yxSCkJMoNMTwA.roa (hash: EOrql+fdFMhDNMTm2/S5izzC4MsYg2L6WcA9m2Sp+8U=)
3: t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl (hash: qWZ7aglyWpy6+QGjGFy3mv3R4bD7AM/t11lmKcDdkYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:15:e9:6b:b0:69:e2:79:79:56:0b:86:9a:97:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Validity
Not Before: Mar 29 09:00:50 2026 GMT
Not After : Mar 30 09:00:50 2026 GMT
Subject: CN=7a58a5255063fae6ef34c0e4128859c2b48f92fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8b:ad:ae:77:1d:31:47:00:49:24:2b:70:33:
32:db:24:11:4a:15:ba:5a:7b:25:a0:4b:69:65:a8:
da:1a:73:0c:b2:45:af:e9:87:90:f6:e0:b3:d4:92:
9b:4b:7a:39:85:7e:c7:ad:38:3f:b6:ae:58:77:0d:
94:1d:3f:aa:2d:e0:bd:aa:6d:fa:bb:ee:30:a2:3a:
e4:a1:b2:b1:55:9d:4c:a1:d6:7b:2b:8a:8c:ca:05:
49:ad:02:ce:fa:a1:7a:73:89:1b:c6:1b:e7:7a:ef:
16:2c:20:9f:bf:46:9f:78:67:99:5f:42:a0:e7:07:
a8:3f:c6:ef:15:9e:6a:4b:34:9e:8d:da:d5:42:70:
f4:01:52:2e:dc:b3:11:d1:70:c8:aa:93:96:52:d4:
68:41:66:2a:28:3f:f6:17:57:92:09:c9:db:fc:6e:
97:91:90:f8:8f:fa:a3:df:69:93:b3:14:6e:62:6d:
93:e7:7f:5c:5d:ef:3a:13:3c:0f:cd:fe:54:8c:f6:
c7:dd:c7:73:70:e7:d6:c1:84:95:60:3f:6b:b5:42:
b6:3b:4b:78:c6:47:76:49:89:e8:7a:a3:79:ce:a1:
78:84:c0:3e:ed:45:1b:d4:a1:54:ba:91:de:ff:31:
ff:bb:61:d9:a3:e2:f9:6f:72:c4:b5:97:72:29:eb:
57:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:58:A5:25:50:63:FA:E6:EF:34:C0:E4:12:88:59:C2:B4:8F:92:FA
X509v3 Authority Key Identifier:
keyid:B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:08:7f:33:24:16:a0:a1:cd:03:c4:e0:dd:16:54:3c:86:cd:
c0:1e:03:a3:c2:35:c2:3d:9b:93:b2:a9:5e:0f:80:b6:7a:6b:
fe:e7:3c:c3:4e:5d:56:5a:c8:ee:7a:6d:bc:7e:f3:7c:a8:d6:
30:a6:7a:aa:4c:28:3a:a4:f3:24:77:47:f5:42:30:a6:0d:19:
45:5a:bf:95:55:ed:d8:5e:dd:3b:7f:11:03:2d:7b:bc:c0:31:
c3:44:b7:48:ce:59:f7:b6:6f:f5:23:21:1f:57:18:77:e1:93:
2f:6d:73:04:f5:e4:ae:7c:fd:da:70:a1:7a:ea:80:95:97:5c:
1f:ba:50:f8:b4:08:d6:36:b7:e4:7d:3e:87:75:49:7f:d5:6b:
31:cf:19:9f:c5:21:46:27:48:9d:2a:5a:ba:c3:e2:6c:92:6c:
75:b9:3e:a2:28:3c:74:63:98:b0:f6:b0:12:a1:52:a6:b3:5d:
8a:00:ca:4b:ba:80:ba:81:e2:e5:e1:9a:ee:de:6e:97:6f:40:
46:5b:d8:67:54:26:12:e7:3a:78:4f:63:6a:1d:7b:c5:1b:48:
2d:33:11:8c:4f:e6:9a:cc:1e:b9:76:51:7d:01:78:34:18:f5:
cd:e0:28:08:a0:ff:e2:06:a6:aa:98:92:cf:87:55:87:35:9e:
03:80:37:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:25 2026 by rpki-client