Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
File: NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft (raw, json)
Hash identifier: 2Uodu+q4hiXsl13HkZWQZxExL41/hCfbuzBqBuwKsMY=
Subject key identifier: 86:7A:4F:E4:23:74:4F:5C:DE:CC:63:9B:0F:68:51:EB:65:29:31:F3
Authority key identifier: 34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
Certificate issuer: /CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Certificate serial: 019D20CAE2191773EB6DF290CA42A799355F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
Manifest number: 1884
Signing time: Tue 24 Mar 2026 17:01:00 +0000
Manifest this update: Tue 24 Mar 2026 17:01:00 +0000
Manifest next update: Wed 25 Mar 2026 17:01:00 +0000
Files and hashes: 1: NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl (hash: csxBnT1HcLQ8iWRN9zOrgpzxtKUsMBGZjgFiJTaTIWU=)
2: u9-8FtTHX-Iha_x3C5q4_edNJaM.roa (hash: BJecwIh123OLgBTMSQtQt7fraFVyOfqi7zQMkz1z9tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 15:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:20:ca:e2:19:17:73:eb:6d:f2:90:ca:42:a7:99:35:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Validity
Not Before: Mar 24 17:01:00 2026 GMT
Not After : Mar 25 17:01:00 2026 GMT
Subject: CN=867a4fe423744f5cdecc639b0f6851eb652931f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:08:2f:73:d0:4b:02:df:eb:0b:a3:5c:0b:f3:
92:07:c6:35:84:e9:37:5a:6f:6e:f9:b1:70:fb:c6:
64:5a:fb:a5:55:04:8e:43:f7:82:69:90:1f:3d:15:
28:36:6d:be:8f:a6:45:fe:9d:4a:9e:57:2a:22:27:
e2:71:c7:ab:e5:4d:6a:b2:aa:81:23:b6:86:fa:c5:
12:6d:32:2b:d1:7b:ef:a7:75:0b:4f:19:0d:4f:91:
c4:f0:73:a7:e9:3a:d3:8e:b2:b8:da:d6:f9:d1:46:
c2:50:51:6a:ab:3d:b9:ce:ba:2c:1e:1d:ac:8f:86:
ac:52:15:c7:cd:e1:cf:e4:85:54:ec:98:f8:52:c7:
1a:67:22:38:99:09:18:03:d8:83:f8:a3:2a:52:ad:
d0:e2:62:98:cb:41:cd:cd:47:3d:be:00:5e:6e:f1:
93:3b:1d:e0:f7:2b:3e:3a:ab:2a:6d:9f:56:37:ca:
fc:08:e1:ce:55:6c:3c:c4:9f:18:a9:a1:dc:14:9c:
17:aa:71:b4:db:8a:b6:8b:47:f7:a1:95:ca:38:42:
39:72:4d:4f:b9:4d:e2:d4:62:76:dd:55:d4:9a:64:
29:d3:9b:12:8b:59:c5:fc:8f:8a:1a:58:4f:54:4d:
25:cd:b5:94:13:22:9c:e5:c7:81:e0:0b:9a:84:60:
e4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7A:4F:E4:23:74:4F:5C:DE:CC:63:9B:0F:68:51:EB:65:29:31:F3
X509v3 Authority Key Identifier:
keyid:34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:6f:7f:c6:89:f8:42:1a:36:50:9b:73:f8:af:c5:51:b1:15:
bb:a9:45:89:c5:06:8e:01:d3:d2:48:a3:2b:27:70:3d:2c:10:
52:83:b6:69:09:fe:55:ca:df:75:b8:74:14:bb:5f:55:91:97:
7a:2c:bf:68:b4:cf:a7:e2:59:39:15:45:d8:e6:0b:0b:5a:1d:
c3:5e:14:e3:2a:c9:54:ca:ac:df:0a:05:7c:44:c9:7a:01:df:
90:aa:19:60:74:53:be:4f:5e:d7:30:0b:41:db:3a:ec:20:62:
9a:4a:00:6d:8f:c9:3b:7e:1a:f2:60:20:b7:c6:55:a9:8d:f5:
c2:ac:7d:cd:4d:75:ff:2d:80:e8:b2:42:9b:8f:d3:84:2f:e7:
a6:55:6a:53:8e:46:e6:d1:d8:5e:6b:1f:56:65:38:80:c3:6c:
10:c2:73:45:8b:15:dc:e7:6e:97:ad:8f:d6:02:7d:3f:87:d4:
6c:c7:a7:fb:fd:d0:fa:8d:ac:6a:56:11:4d:b3:8b:4a:ac:10:
ff:a5:57:49:f7:00:4c:15:70:8e:ff:20:6a:1a:3e:87:b7:d7:
70:1c:9d:8a:5d:05:0c:8c:e6:9b:66:b1:5d:7b:5c:4f:9a:78:
0f:29:af:00:35:d2:72:51:d6:d2:10:92:c5:f1:05:f8:8d:03:
fe:11:2c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 22:36:28 2026 by rpki-client