Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
File: NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft (raw, json)
Hash identifier: UagyZdN2qIzlgBWD8tNvKltycxT7xgW/GqCFgyajZek=
Subject key identifier: DC:FD:BC:82:0F:E3:22:63:29:61:78:44:ED:66:80:96:32:20:59:72
Authority key identifier: 34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
Certificate issuer: /CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Certificate serial: 01A1280C0F5FA27862CC768FDF0DABBB922E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
Manifest number: 1A9A
Signing time: Sat 10 Oct 2026 23:00:41 +0000
Manifest this update: Sat 10 Oct 2026 23:00:41 +0000
Manifest next update: Sun 11 Oct 2026 23:00:41 +0000
Files and hashes: 1: NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl (hash: dPAsPbQOLZaI31mYEPqR0oJApz0vwzc6DgJkkOd5q5o=)
2: u9-8FtTHX-Iha_x3C5q4_edNJaM.roa (hash: BJecwIh123OLgBTMSQtQt7fraFVyOfqi7zQMkz1z9tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:0c:0f:5f:a2:78:62:cc:76:8f:df:0d:ab:bb:92:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Validity
Not Before: Oct 10 23:00:41 2026 GMT
Not After : Oct 11 23:00:41 2026 GMT
Subject: CN=dcfdbc820fe3226329617844ed66809632205972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:94:51:f2:83:66:85:ea:27:82:c8:eb:74:38:
f8:44:7d:16:90:a8:d7:96:7d:68:61:58:08:77:02:
27:9b:93:fe:28:1c:f4:43:a5:36:6a:21:fc:30:dc:
aa:65:27:97:54:79:fa:94:e1:33:7e:99:96:2b:18:
c6:9c:58:5a:da:35:61:8e:21:73:58:14:7c:02:2d:
5d:58:84:c5:49:35:d5:8c:f5:42:8a:70:4b:66:d8:
01:aa:4a:bb:6c:62:fa:23:5a:e2:a0:a2:d1:4c:6d:
0f:dd:e9:9c:23:5d:68:79:ae:04:a7:cc:df:65:ff:
17:f5:6f:cb:63:66:a1:a6:5b:8f:14:22:74:84:75:
59:fd:29:e4:84:19:dd:c1:95:34:06:9e:ad:3c:32:
dd:98:07:6c:cd:8d:cf:e8:00:0f:96:35:18:d5:00:
b5:d4:6d:a3:5b:2d:70:98:cc:aa:9c:f9:ae:64:ac:
18:70:b7:09:37:25:62:ab:06:f1:4a:18:f1:a4:3a:
ef:75:f2:47:20:78:2a:1b:1a:3d:4c:02:82:a4:13:
6c:da:40:4e:8d:03:6f:49:4e:05:c6:7e:65:91:5c:
73:a2:08:7f:b9:a2:f8:3b:1d:44:24:dc:12:c0:23:
c9:51:b7:fd:bb:20:2a:5a:34:1f:e4:79:a4:76:41:
0a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FD:BC:82:0F:E3:22:63:29:61:78:44:ED:66:80:96:32:20:59:72
X509v3 Authority Key Identifier:
keyid:34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:07:de:b4:8b:bf:5f:c4:30:75:98:d1:c5:ca:42:0f:06:2c:
e1:40:ab:77:da:af:19:f6:0b:5c:e3:1a:66:c9:ab:98:c8:e0:
9f:71:db:64:07:bd:96:e1:2c:d7:b0:9e:d5:8c:3a:34:4e:c0:
12:72:ed:cc:02:51:c0:45:21:fa:4e:f7:e9:6f:ac:66:ba:75:
c0:d4:d1:2b:ec:6e:18:8a:5b:7f:fc:1b:ed:2d:fb:fb:17:9c:
8e:b0:94:9e:62:c0:d3:62:1a:0b:68:ca:4f:05:d3:9d:96:a8:
21:7d:33:3b:2a:6c:3d:d9:09:c2:5c:20:c4:eb:1b:85:58:91:
8c:3e:0b:49:75:3b:cc:c2:2f:22:5a:97:44:56:c3:bd:43:b5:
c6:0b:ac:7a:f0:d1:23:33:d4:f8:f9:29:2f:cd:03:48:46:00:
7d:e1:f9:98:48:66:63:fe:07:82:39:ad:9a:23:43:bf:fe:8a:
34:6e:47:62:fc:5e:47:09:2f:71:53:0f:1d:cb:fd:bb:4a:2e:
c7:94:6b:46:29:f7:e9:67:8d:79:97:01:59:5f:2b:15:3f:d9:
4c:67:ea:b4:d0:1d:c1:d4:ca:c0:27:44:c5:c4:61:53:1d:5a:
30:5d:57:fe:12:7b:92:6f:c1:9e:9b:30:14:0f:bd:eb:63:4f:
97:a7:d7:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEoDA9fonhizHaP3w2ru5IuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZjQ4MWE5ZGRjZmI0ODU5MWY3ODkzOGM0ZmNjN2I4YjY3
YzYzMDIwHhcNMjYxMDEwMjMwMDQxWhcNMjYxMDExMjMwMDQxWjAzMTEwLwYDVQQD
EyhkY2ZkYmM4MjBmZTMyMjYzMjk2MTc4NDRlZDY2ODA5NjMyMjA1OTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJRR8oNmheongsjrdDj4RH0WkKjX
ln1oYVgIdwInm5P+KBz0Q6U2aiH8MNyqZSeXVHn6lOEzfpmWKxjGnFha2jVhjiFz
WBR8Ai1dWITFSTXVjPVCinBLZtgBqkq7bGL6I1rioKLRTG0P3emcI11oea4Ep8zf
Zf8X9W/LY2ahpluPFCJ0hHVZ/SnkhBndwZU0Bp6tPDLdmAdszY3P6AAPljUY1QC1
1G2jWy1wmMyqnPmuZKwYcLcJNyViqwbxShjxpDrvdfJHIHgqGxo9TAKCpBNs2kBO
jQNvSU4Fxn5lkVxzogh/uaL4Ox1EJNwSwCPJUbf9uyAqWjQf5HmkdkEKMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNz9vIIP4yJjKWF4RO1mgJYyIFlyMB8GA1UdIwQY
MBaAFDT0gandz7SFkfeJOMT8x7i2fGMCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlBTQnFkM1B0SVdSOTRrNHhQekh1TFo4WXdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zYWQ5YzEtM2UwOS00MWFjLWFjY2Et
ZDExMzM5ZmU3ZGYwLzEvTlBTQnFkM1B0SVdSOTRrNHhQekh1TFo4WXdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8zYWQ5YzEtM2UwOS00MWFjLWFjY2EtZDExMzM5ZmU3ZGYw
LzEvTlBTQnFkM1B0SVdSOTRrNHhQekh1TFo4WXdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjwfetIu/
X8QwdZjRxcpCDwYs4UCrd9qvGfYLXOMaZsmrmMjgn3HbZAe9luEs17Ce1Yw6NE7A
EnLtzAJRwEUh+k736W+sZrp1wNTRK+xuGIpbf/wb7S37+xecjrCUnmLA02IaC2jK
TwXTnZaoIX0zOypsPdkJwlwgxOsbhViRjD4LSXU7zMIvIlqXRFbDvUO1xgusevDR
IzPU+PkpL80DSEYAfeH5mEhmY/4HgjmtmiNDv/6KNG5HYvxeRwkvcVMPHcv9u0ou
x5RrRin36WeNeZcBWV8rFT/ZTGfqtNAdwdTKwCdExcRhUx1aMF1X/hJ7km/Bnpsw
FA+962NPl6fXEg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 06:15:52 2026 by rpki-client