Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
File: nPYI_632AAge6SIpjksq6Wr_SOg.mft (raw, json)
Hash identifier: rcv2s/Ddp+l8sJ/Q86dXSTeNOT6sK/3V2T4N1XaFDzs=
Subject key identifier: BB:98:95:DC:95:C6:23:7E:CE:B7:BF:6D:CA:79:99:54:CB:AF:B0:85
Authority key identifier: 9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
Certificate issuer: /CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Certificate serial: 019D38D375ECC626AE898789F5BA31879031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:01:15 +0000
Manifest this update: Sun 29 Mar 2026 09:01:15 +0000
Manifest next update: Mon 30 Mar 2026 09:01:15 +0000
Files and hashes: 1: nPYI_632AAge6SIpjksq6Wr_SOg.crl (hash: yAbYOkOfQk2jQJneF8ixHIzMEYFPudy2mKNs/kAVl/U=)
2: vLirgPar5c0l-_w2MTo6mnE8j2o.roa (hash: aEBCV68tz4z6OeR59pAV8N/3RKw1Sou9vg9NQB/F55k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:75:ec:c6:26:ae:89:87:89:f5:ba:31:87:90:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Validity
Not Before: Mar 29 09:01:15 2026 GMT
Not After : Mar 30 09:01:15 2026 GMT
Subject: CN=bb9895dc95c6237eceb7bf6dca799954cbafb085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b4:a5:09:8e:86:8d:8f:61:3f:06:82:55:ff:
96:36:3b:d2:25:d4:87:77:27:4f:e7:8d:75:e2:2a:
e7:46:5c:eb:f2:16:50:b4:86:66:7f:f9:e2:b4:d2:
d8:e8:65:bf:76:2e:32:60:e4:6a:08:1d:87:4a:56:
10:ac:9e:bd:a6:ea:e0:7f:28:b8:17:6f:bc:36:2f:
97:5b:04:80:c9:3e:62:4e:83:76:08:87:9a:d6:d1:
a5:e3:f9:31:98:fb:76:b0:03:2c:cf:f1:7c:87:c8:
3f:bc:14:4a:11:03:88:a3:b8:35:82:1e:43:48:ec:
91:4b:13:e8:c1:96:1f:34:4d:44:2a:86:e6:43:3e:
c6:72:19:3c:7b:25:43:39:0f:f1:2d:ff:7e:5e:f5:
68:d2:0c:d8:45:21:18:0a:f3:e7:41:20:00:ef:72:
74:2e:eb:a1:cc:89:3a:d3:75:6b:84:6b:0e:a2:c9:
ca:0e:84:bf:08:b9:01:58:3c:25:5e:1a:ff:7d:7d:
ad:37:2b:d1:32:c0:48:c6:55:87:a2:82:6c:21:c6:
11:c6:58:03:21:5d:2b:f5:a8:fa:d3:b8:c6:4e:fd:
08:53:c0:7d:bd:6b:16:ba:a2:8f:5a:3f:e9:00:4f:
51:7b:05:bc:1d:07:0b:6f:6d:f3:4b:29:ea:39:6f:
78:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:98:95:DC:95:C6:23:7E:CE:B7:BF:6D:CA:79:99:54:CB:AF:B0:85
X509v3 Authority Key Identifier:
keyid:9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:85:2e:f5:da:d2:50:c2:37:5b:c5:8c:e7:fc:72:d5:38:fe:
b2:6d:59:0a:51:6e:1e:ea:bb:78:01:5d:d3:9d:aa:32:e7:99:
d3:96:2b:dd:ce:33:6c:2d:c9:f9:66:06:c1:28:56:07:8e:9b:
3a:a4:cf:0d:f5:6b:b2:a3:b9:f7:90:3d:3e:7c:b0:dc:05:2c:
e9:ae:6a:76:e5:b1:21:3b:23:27:d8:60:30:5c:fb:e4:75:31:
5d:dd:0b:0a:72:4d:b0:8f:39:7c:e5:55:bb:7f:00:ce:e7:2f:
f5:56:89:dd:21:a6:27:ad:77:69:a1:07:c9:c6:0a:89:2c:04:
8d:97:28:59:04:95:c7:4b:59:fc:f1:59:35:bf:f2:31:37:22:
76:02:d7:b6:ac:b3:6e:48:70:9a:7f:67:44:5a:e8:16:ed:aa:
ab:d7:f0:fb:a2:5d:05:11:b8:57:ea:61:3e:22:7e:7f:bc:e6:
5b:c1:7d:a8:69:4a:19:d7:b0:bb:a1:91:ef:48:5d:7a:2d:2d:
94:a9:8f:84:59:9c:49:2b:39:2c:74:69:f7:1c:b6:d7:bd:98:
20:27:97:c1:10:6d:d5:74:9c:72:27:39:27:db:05:4e:3d:e8:
07:00:4e:9a:96:bb:f1:aa:df:36:9c:48:56:26:3d:f1:6a:dd:
56:b8:7a:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0403XsxiauiYeJ9boxh5AxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZjYwOGZmYWRmNjAwMDgxZWU5MjIyOThlNGIyYWU5NmFm
ZjQ4ZTgwHhcNMjYwMzI5MDkwMTE1WhcNMjYwMzMwMDkwMTE1WjAzMTEwLwYDVQQD
EyhiYjk4OTVkYzk1YzYyMzdlY2ViN2JmNmRjYTc5OTk1NGNiYWZiMDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7SlCY6GjY9hPwaCVf+WNjvSJdSH
dydP54114irnRlzr8hZQtIZmf/nitNLY6GW/di4yYORqCB2HSlYQrJ69purgfyi4
F2+8Ni+XWwSAyT5iToN2CIea1tGl4/kxmPt2sAMsz/F8h8g/vBRKEQOIo7g1gh5D
SOyRSxPowZYfNE1EKobmQz7Gchk8eyVDOQ/xLf9+XvVo0gzYRSEYCvPnQSAA73J0
LuuhzIk603VrhGsOosnKDoS/CLkBWDwlXhr/fX2tNyvRMsBIxlWHooJsIcYRxlgD
IV0r9aj607jGTv0IU8B9vWsWuqKPWj/pAE9RewW8HQcLb23zSynqOW94GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLuYldyVxiN+zre/bcp5mVTLr7CFMB8GA1UdIwQY
MBaAFJz2CP+t9gAIHukiKY5LKulq/0joMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblBZSV82MzJBQWdlNlNJcGprc3E2V3JfU09nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kNDVmMTEtNjdjMi00N2E1LTk5NmMt
ODkxZWI1NDhiODkxLzEvblBZSV82MzJBQWdlNlNJcGprc3E2V3JfU09nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9kNDVmMTEtNjdjMi00N2E1LTk5NmMtODkxZWI1NDhiODkx
LzEvblBZSV82MzJBQWdlNlNJcGprc3E2V3JfU09nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsYUu9drS
UMI3W8WM5/xy1Tj+sm1ZClFuHuq7eAFd052qMueZ05Yr3c4zbC3J+WYGwShWB46b
OqTPDfVrsqO595A9Pnyw3AUs6a5qduWxITsjJ9hgMFz75HUxXd0LCnJNsI85fOVV
u38Azucv9VaJ3SGmJ613aaEHycYKiSwEjZcoWQSVx0tZ/PFZNb/yMTcidgLXtqyz
bkhwmn9nRFroFu2qq9fw+6JdBRG4V+phPiJ+f7zmW8F9qGlKGdewu6GR70hdei0t
lKmPhFmcSSs5LHRp9xy2172YICeXwRBt1XSccic5J9sFTj3oBwBOmpa78arfNpxI
ViY98WrdVrh6qQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:18 2026 by rpki-client