Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
File: NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft (raw, json)
Hash identifier: 5blGhqDi3SVv4O/Jamvccx17ovUWrv7y9yM3mn1kGWA=
Subject key identifier: DB:37:3E:00:C8:9F:C6:3D:59:83:57:26:BE:3E:EE:6F:92:93:59:FA
Authority key identifier: 34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
Certificate issuer: /CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Certificate serial: 01A002818F0AA95CB918E0DF62D9111F4D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 23:00:40 +0000
Manifest this update: Fri 14 Aug 2026 23:00:40 +0000
Manifest next update: Sat 15 Aug 2026 23:00:40 +0000
Files and hashes: 1: NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl (hash: 2QvM+tY2uY1WRH7VaNQxsoNNtg2rjmkHrX7JwNde3JQ=)
2: u9-8FtTHX-Iha_x3C5q4_edNJaM.roa (hash: BJecwIh123OLgBTMSQtQt7fraFVyOfqi7zQMkz1z9tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:81:8f:0a:a9:5c:b9:18:e0:df:62:d9:11:1f:4d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Validity
Not Before: Aug 14 23:00:40 2026 GMT
Not After : Aug 15 23:00:40 2026 GMT
Subject: CN=db373e00c89fc63d59835726be3eee6f929359fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:95:c1:7d:bf:01:a5:a1:4d:32:7d:4b:bc:d3:
ee:f9:73:54:e1:d4:2a:75:c5:d9:ca:0f:ff:6c:d1:
d2:80:3e:60:a1:70:9d:b3:cb:51:5c:c0:ea:49:77:
2d:50:55:12:4c:1d:fd:c7:06:c6:fe:fe:ea:81:ee:
27:d1:5b:4d:73:80:6f:2c:28:82:42:aa:bb:89:95:
0e:b5:35:6f:69:bd:a3:10:5d:d6:1e:a3:f7:9c:85:
f9:c7:53:b2:ab:86:4e:55:aa:5c:1f:3d:d9:d6:82:
68:c5:c0:dc:79:c7:fe:8f:c3:cc:c4:de:8b:44:a6:
36:41:60:11:2c:89:a6:c3:fc:a0:44:3e:07:62:cc:
0e:40:17:5d:a9:b0:d1:f8:e2:0a:f5:72:08:40:eb:
2c:d6:8a:08:8a:65:98:d2:e5:9e:8c:07:51:87:5b:
f8:89:10:58:b3:1b:cd:57:3f:10:e6:98:f2:02:b9:
25:49:8f:42:b3:c1:74:08:80:35:7a:7d:07:1a:f4:
d6:c4:1a:92:19:43:0e:44:55:b6:bf:3a:b4:c3:ca:
8a:f4:df:98:ef:c5:0c:f3:6b:a9:29:60:f5:d8:20:
3f:5c:0a:4c:26:8f:28:b7:c3:a4:7d:eb:00:25:4b:
72:b9:0e:8e:0f:60:2c:1b:dc:39:d4:42:e8:98:bb:
d9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:37:3E:00:C8:9F:C6:3D:59:83:57:26:BE:3E:EE:6F:92:93:59:FA
X509v3 Authority Key Identifier:
keyid:34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:82:d6:32:1d:62:f8:6f:56:ad:79:53:a3:c5:00:fd:c5:e9:
16:e6:6a:58:42:3c:68:50:9d:c1:1c:2d:db:85:f8:14:e0:a0:
c5:53:c0:a8:b9:3e:7a:49:37:f8:40:d1:2a:cb:36:be:a0:29:
44:d4:92:eb:a4:41:7a:af:f2:df:ed:3a:67:31:3b:4c:65:39:
52:cd:b2:6b:94:a9:fd:d2:19:06:92:0d:b8:d2:1d:19:a2:b3:
01:b6:ca:df:f1:92:b6:63:8c:54:25:0c:af:c9:7e:f6:54:af:
1c:c1:1a:a0:7e:93:7b:6f:45:13:7a:a6:33:59:0a:34:8d:13:
18:e5:4e:2d:04:55:06:d0:38:42:ef:2f:a6:d8:e8:46:f0:29:
ad:1a:90:fe:c1:30:41:0b:22:7d:46:ee:40:03:e1:b2:eb:69:
bc:df:05:41:64:8f:9f:a3:4e:aa:90:7b:a6:34:c6:6d:e9:a0:
f9:2f:aa:e7:14:f9:92:a2:24:2a:15:5a:dd:1a:97:74:88:fa:
fe:85:d3:1d:7d:ae:da:6e:db:0a:c6:13:f0:0e:49:4c:24:6b:
ab:e4:b6:d1:1b:ec:47:33:ad:ed:e0:64:69:57:81:45:31:2b:
fe:61:7d:00:d6:af:02:74:6e:43:97:08:8d:a7:a7:19:59:cf:
61:4c:95:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:12:36 2026 by rpki-client