Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
File: NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft (raw, json)
Hash identifier: r6uAr17EqxAPV1lT8eMpD7wNrH35fVJydcAO5Ei0/rg=
Subject key identifier: A5:A3:BF:2B:0D:6D:CD:F3:A6:95:27:B5:88:43:DC:B2:AB:22:93:D2
Authority key identifier: 34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
Certificate issuer: /CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Certificate serial: 019F130A34E7B61DFCEDA31B64D25FEB2B77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
Manifest number: 1986
Signing time: Mon 29 Jun 2026 11:01:03 +0000
Manifest this update: Mon 29 Jun 2026 11:01:03 +0000
Manifest next update: Tue 30 Jun 2026 11:01:03 +0000
Files and hashes: 1: NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl (hash: B7WCvm1zOVa2q2z4r7oydv3PefetV12fnHJrWyvk8dw=)
2: u9-8FtTHX-Iha_x3C5q4_edNJaM.roa (hash: BJecwIh123OLgBTMSQtQt7fraFVyOfqi7zQMkz1z9tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:0a:34:e7:b6:1d:fc:ed:a3:1b:64:d2:5f:eb:2b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Validity
Not Before: Jun 29 11:01:03 2026 GMT
Not After : Jun 30 11:01:03 2026 GMT
Subject: CN=a5a3bf2b0d6dcdf3a69527b58843dcb2ab2293d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2e:96:7b:72:1d:22:ef:7b:bf:73:6c:a8:ce:
2e:0a:1e:da:15:0f:54:22:f8:67:10:c0:e4:c4:32:
0c:3e:b1:a0:1d:f6:00:89:8d:54:fd:61:86:b0:ac:
68:49:b8:ce:ca:f4:85:cf:b4:e6:f1:5b:25:33:e7:
cd:c8:f3:0a:b9:ae:9c:c7:8b:14:10:16:8a:73:6d:
a2:30:51:22:02:11:c8:6d:b7:dd:e6:49:40:c0:cf:
a1:d1:7f:54:51:73:70:6f:f9:9b:68:a3:40:e7:f5:
86:54:f0:46:32:84:e7:7e:fa:da:28:95:c8:4c:7c:
77:29:92:f7:33:af:3c:05:e5:5e:94:1f:98:4d:bd:
fd:b3:21:31:16:0d:ff:01:ef:f0:c7:4a:9f:a6:d0:
11:f2:35:fe:dd:4d:0c:48:4d:ae:b1:08:23:bc:22:
c8:cc:fe:11:06:26:55:6c:8e:b9:d9:04:8b:26:46:
58:fb:15:f6:03:2e:13:24:5c:5e:51:d4:19:55:b4:
e8:47:bd:a8:b2:28:eb:ac:53:a5:ab:7b:fc:76:b2:
ca:ff:ed:84:93:1f:f9:6a:0a:d9:52:36:c7:24:d5:
e4:78:79:eb:c6:28:b2:aa:25:bc:87:20:fe:e7:c3:
94:b7:64:fc:ee:c2:7b:fa:23:60:12:37:ce:b0:dd:
e6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A3:BF:2B:0D:6D:CD:F3:A6:95:27:B5:88:43:DC:B2:AB:22:93:D2
X509v3 Authority Key Identifier:
keyid:34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:dd:71:d9:7f:f3:7e:45:a9:4e:38:67:df:1d:69:b5:af:1b:
4d:1a:a9:fe:48:0c:60:82:52:58:0a:8d:72:d0:1f:76:f9:0e:
14:1a:35:19:de:19:bc:57:55:a5:68:92:27:12:79:84:f9:0e:
0a:87:25:ea:a0:64:e7:be:ef:cc:79:04:1f:35:7c:06:25:dc:
1a:b2:dc:14:3f:ee:6f:52:af:48:49:cf:c5:9d:ea:58:f4:06:
6f:6e:f7:f0:23:43:f5:30:2b:4f:bf:53:e4:48:63:1b:5f:8e:
b7:96:ba:16:2e:bc:a5:66:41:58:70:60:46:ad:4f:e6:3f:a9:
45:2d:cf:67:58:cb:ca:4f:c6:0d:0d:4a:88:2c:fa:cd:a8:09:
44:a4:d6:a1:62:67:22:0f:fe:9f:de:e2:9f:83:25:2c:0e:1c:
2b:6d:58:ef:ed:6b:1e:1e:c0:96:3a:98:d2:e6:ce:b3:60:33:
1d:0f:0a:84:1e:16:f9:dc:76:6a:88:47:fa:ec:f1:73:19:59:
58:8b:31:b4:45:2d:cc:82:6b:11:17:31:5e:95:63:66:d5:7e:
2f:b3:67:b0:af:21:d0:19:95:02:2e:4d:92:5a:d2:5d:b7:9e:
41:20:b2:f8:97:1e:6c:a3:a1:18:ae:67:ae:94:c6:b0:05:8a:
63:a6:72:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:45:06 2026 by rpki-client