Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
File: NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft (raw, json)
Hash identifier: xRVgF9iLtK0gaQgu0r1c6kK9SOWzLF1Z4wGbGAb9VQg=
Subject key identifier: 36:77:90:38:30:E6:28:F5:76:4F:4F:4E:23:8A:87:F1:8E:13:0C:41
Authority key identifier: 34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
Certificate issuer: /CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Certificate serial: 019E295DEF46ECD6DCB852147DCE2F69FD2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
Manifest number: 190D
Signing time: Fri 15 May 2026 02:01:22 +0000
Manifest this update: Fri 15 May 2026 02:01:22 +0000
Manifest next update: Sat 16 May 2026 02:01:22 +0000
Files and hashes: 1: NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl (hash: lqWykq+54rr+bdKcxva1lnFtUYdQlb80FM+Rljb6C6w=)
2: u9-8FtTHX-Iha_x3C5q4_edNJaM.roa (hash: BJecwIh123OLgBTMSQtQt7fraFVyOfqi7zQMkz1z9tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:5d:ef:46:ec:d6:dc:b8:52:14:7d:ce:2f:69:fd:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Validity
Not Before: May 15 02:01:22 2026 GMT
Not After : May 16 02:01:22 2026 GMT
Subject: CN=3677903830e628f5764f4f4e238a87f18e130c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f5:eb:cd:c6:73:e6:02:31:01:0c:35:e9:54:
ff:a5:f6:98:c7:51:60:a9:c7:2f:32:11:ec:5e:e7:
9b:fa:dd:8c:ca:5b:ba:1d:8f:60:15:d1:d1:35:5d:
cb:e5:da:69:6a:3e:ea:27:06:c7:2a:f7:1e:80:95:
c5:84:59:b2:6d:ad:44:02:07:cd:70:85:d9:f4:35:
c4:b7:4b:f4:60:bd:81:27:00:01:39:29:aa:5c:3f:
bb:19:a0:9e:3d:9c:9f:b2:4b:0c:e6:4a:a2:c5:61:
bb:3e:c8:49:45:08:88:5f:bd:aa:b5:53:dc:7f:e8:
ed:9f:73:db:90:ed:48:d1:04:5e:11:19:26:1c:29:
38:e1:ed:ad:61:c2:8d:3d:6f:0a:bc:a4:2a:93:8b:
b9:f4:9f:cb:6a:03:0a:35:50:79:a2:f2:15:8b:c0:
c5:a0:94:dc:c1:71:9f:74:29:ff:46:76:43:de:28:
ac:f0:fb:f5:7d:ee:2e:a4:f2:78:ba:50:4c:23:49:
7b:47:a0:94:a1:a3:e3:fa:5d:ab:fa:6c:e2:b9:d5:
d1:fe:17:1c:68:a4:cc:50:0f:b9:c4:5b:af:70:ba:
d7:8f:7c:71:9e:88:7b:22:ac:5a:b3:8f:e8:fd:fb:
77:0b:79:f9:49:b3:5b:ee:76:a4:c4:4a:c6:5f:2d:
0e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:77:90:38:30:E6:28:F5:76:4F:4F:4E:23:8A:87:F1:8E:13:0C:41
X509v3 Authority Key Identifier:
keyid:34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:28:20:f2:51:cf:30:70:27:e0:25:50:99:bf:24:27:79:69:
00:73:6c:f6:0d:ba:81:20:51:d6:d5:6e:c8:45:0b:b4:ee:6e:
d1:05:ed:dc:31:3a:e0:f1:eb:2c:ef:67:ff:b4:4b:88:b8:56:
d5:26:29:f9:4f:90:35:6a:3c:25:9a:32:e0:28:94:1c:0f:62:
5f:c7:83:96:72:1d:1a:19:30:c4:e0:08:08:e3:da:2d:a2:d0:
e6:07:da:0e:1a:45:df:9d:a5:f8:bd:4e:76:16:35:1e:cc:ab:
d3:3d:74:af:23:4a:52:e9:b3:e7:30:99:a8:83:2f:50:17:fe:
04:2d:9a:7d:be:56:97:74:da:a1:49:4e:9e:4b:21:59:11:88:
6b:e0:7f:a3:bb:d4:42:74:7e:e0:f1:f1:13:af:86:b8:a7:f6:
2a:d4:e9:58:8a:81:04:d8:63:f4:a4:b8:ec:99:b6:c5:9b:d1:
fa:cb:32:95:01:3a:f7:5d:ec:fb:07:0e:94:a1:ec:4d:e3:67:
81:44:f8:c4:17:fd:76:ed:1c:b9:a5:51:6c:98:51:e0:2e:e2:
98:35:0b:4e:fa:1c:36:da:13:12:a9:3b:69:c5:3f:d9:ee:c1:
88:e7:1b:c3:5f:29:11:ce:99:6d:bd:6f:b3:cc:a3:ca:76:07:
63:f5:37:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 10:35:08 2026 by rpki-client