Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
File: NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft (raw, json)
Hash identifier: pltDO3thCXEhoYzGi7gHDMu4tEPJprypAQB+n56MWSQ=
Subject key identifier: 68:4C:36:70:8E:81:AA:01:A4:EC:23:DD:28:68:3D:9D:20:BB:36:CF
Authority key identifier: 34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
Certificate issuer: /CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Certificate serial: 01A1242F5CA90B72AE3E90EE7BB3B8E66D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
Manifest number: 1A98
Signing time: Sat 10 Oct 2026 05:00:46 +0000
Manifest this update: Sat 10 Oct 2026 05:00:46 +0000
Manifest next update: Sun 11 Oct 2026 05:00:46 +0000
Files and hashes: 1: NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl (hash: nH01aYEbCyVjB7xuvktD9Tc4UrEL2XBMpS42vTJnMLg=)
2: u9-8FtTHX-Iha_x3C5q4_edNJaM.roa (hash: BJecwIh123OLgBTMSQtQt7fraFVyOfqi7zQMkz1z9tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:2f:5c:a9:0b:72:ae:3e:90:ee:7b:b3:b8:e6:6d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Validity
Not Before: Oct 10 05:00:46 2026 GMT
Not After : Oct 11 05:00:46 2026 GMT
Subject: CN=684c36708e81aa01a4ec23dd28683d9d20bb36cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3a:34:0f:4e:f9:42:8b:19:b6:cb:00:14:be:
e8:df:47:c5:11:73:2d:74:65:d4:9f:58:ca:15:e5:
83:f3:5d:17:b1:f4:8c:7a:ce:c4:0e:7e:4f:76:81:
33:f3:f1:f2:31:81:e5:2d:7d:44:a4:1d:66:30:ab:
32:e0:49:08:cb:8e:30:5c:f8:45:3d:83:30:ee:43:
7a:39:2a:4d:0b:51:19:fd:ea:42:cf:15:64:15:13:
1d:c7:52:2f:9d:13:ba:bd:5c:6a:65:d9:ff:33:f9:
3e:be:5e:72:3e:16:45:5b:a4:24:68:1a:e4:10:13:
05:67:8e:43:ea:f5:89:50:9a:97:2b:aa:fc:1c:cf:
d4:b8:13:5d:06:e0:87:e4:49:ee:d8:f3:ae:2c:c5:
ba:4a:df:93:f0:6a:4d:1a:5b:85:fe:5c:78:90:74:
83:26:77:58:e8:90:73:ee:cf:b2:cf:db:fa:da:d5:
85:12:f0:6f:48:8f:46:1e:1c:54:59:65:8f:50:96:
a7:38:27:4f:79:65:3f:53:ad:97:77:af:e0:e9:98:
15:3d:bc:0e:c1:1f:13:57:28:1c:01:68:c4:d2:f4:
a1:a1:82:62:44:59:b6:3b:54:0f:f6:f8:3e:f9:e0:
f8:3c:aa:fd:c9:7a:c6:4c:f2:1a:71:97:53:14:31:
0b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4C:36:70:8E:81:AA:01:A4:EC:23:DD:28:68:3D:9D:20:BB:36:CF
X509v3 Authority Key Identifier:
keyid:34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:6f:be:a1:c1:f4:05:f0:88:82:44:52:a6:a8:5c:5e:f4:99:
86:ac:f2:4b:1a:cc:f5:81:53:da:fa:86:86:18:94:85:43:60:
b9:bd:7c:41:bc:ae:73:c2:d4:60:aa:fe:1d:92:76:7a:4f:26:
ad:06:e2:f7:0e:4c:1b:e4:a7:41:6c:8c:54:69:fc:94:e3:e3:
6c:b4:bf:ff:1d:d5:4f:a6:11:1b:f7:5f:a8:ab:72:86:63:75:
5b:4d:30:d8:82:09:d0:b6:c5:30:cd:d3:97:95:1c:5d:19:7c:
26:0a:91:b6:48:98:3b:10:b1:d5:81:9e:4e:69:9d:67:95:79:
e0:40:32:6b:43:88:0b:8e:48:f0:17:c8:80:89:b2:6c:a8:2e:
e4:9d:e5:b2:f0:40:59:68:3c:7f:15:66:10:cf:8c:e7:46:32:
27:a6:67:4a:46:cb:83:4c:dd:23:63:4c:9c:aa:7b:c2:2c:6e:
98:14:cd:a0:57:14:c3:f8:80:0a:c6:70:9b:2b:f3:9c:3b:d1:
94:41:4a:c5:5a:07:b0:fc:27:8b:13:ed:58:be:0f:f1:39:37:
2e:7c:c2:c3:04:47:b9:12:bb:4b:fc:f8:43:ca:b7:62:a1:85:
02:5b:eb:85:8a:60:2b:bc:66:02:69:5e:4f:8d:a2:93:c9:82:
f9:13:53:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:17:36 2026 by rpki-client