Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft
File: nphC_lRy5id-eSB2x9OHcALi4lE.mft (raw, json)
Hash identifier: cxFN6F4Rv955VhreYKq34hoX+VH0ZXM52VvXDL/85Tg=
Subject key identifier: 75:67:2C:97:5B:97:51:3E:80:97:66:B9:83:7F:13:49:72:69:61:E7
Authority key identifier: 9E:98:42:FE:54:72:E6:27:7E:79:20:76:C7:D3:87:70:02:E2:E2:51
Certificate issuer: /CN=9e9842fe5472e6277e792076c7d3877002e2e251
Certificate serial: 019D390A31D3054DDC78334BCDD1E6B490E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nphC_lRy5id-eSB2x9OHcALi4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft
Manifest number: 038E
Signing time: Sun 29 Mar 2026 10:01:02 +0000
Manifest this update: Sun 29 Mar 2026 10:01:02 +0000
Manifest next update: Mon 30 Mar 2026 10:01:02 +0000
Files and hashes: 1: nphC_lRy5id-eSB2x9OHcALi4lE.crl (hash: IvVv5DzRwBMn9u0qzxoszAcaCxDNUFMakhWdEIDcoas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nphC_lRy5id-eSB2x9OHcALi4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:31:d3:05:4d:dc:78:33:4b:cd:d1:e6:b4:90:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e9842fe5472e6277e792076c7d3877002e2e251
Validity
Not Before: Mar 29 10:01:02 2026 GMT
Not After : Mar 30 10:01:02 2026 GMT
Subject: CN=75672c975b97513e809766b9837f1349726961e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:24:b4:93:a2:73:bc:82:67:7d:32:2f:2f:90:
f1:8c:d7:32:e0:96:ad:50:4b:32:b5:3f:13:17:99:
4b:5a:a1:79:21:c0:9e:9f:c4:bf:d5:b8:66:60:a4:
bd:d2:13:47:0c:20:9f:0d:7d:03:8b:ec:a6:45:a8:
af:46:6f:9c:af:d3:db:55:fc:e1:e6:73:06:76:5d:
9e:cb:7f:48:a5:fc:d7:00:74:4a:27:78:ab:65:83:
0d:aa:1f:12:62:19:59:23:2a:21:32:94:7b:ca:9f:
fd:4b:0c:4d:b5:37:d8:d5:54:fa:00:d9:ec:23:c6:
fd:c3:c1:5b:53:45:51:6b:f3:ec:12:9b:1c:49:72:
e4:f9:a2:7c:d7:a9:c9:a3:89:76:ff:6a:4f:e9:ff:
b1:af:b4:e7:8a:91:7e:3b:ec:b4:43:b1:1b:1f:da:
d4:6e:b9:93:83:84:d7:af:d0:64:4f:d0:66:b4:e0:
f6:88:47:b2:1e:aa:cc:33:2d:2e:77:e6:71:dd:79:
47:f7:7a:41:43:13:df:1f:1b:a4:f1:e4:2a:59:65:
ca:a1:bc:92:45:a5:15:ee:11:4e:32:72:83:83:5a:
6d:29:7e:bd:17:f1:aa:40:d9:a9:0d:31:e4:cf:c6:
7b:66:9b:96:8c:e3:41:92:90:56:5e:a9:03:85:79:
51:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:67:2C:97:5B:97:51:3E:80:97:66:B9:83:7F:13:49:72:69:61:E7
X509v3 Authority Key Identifier:
keyid:9E:98:42:FE:54:72:E6:27:7E:79:20:76:C7:D3:87:70:02:E2:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nphC_lRy5id-eSB2x9OHcALi4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:82:1a:ee:bd:91:73:d0:de:25:56:1d:63:8e:4e:9b:65:0e:
e1:ad:f2:1a:c4:4e:ca:9a:12:9e:cb:84:00:ba:d7:0b:91:fc:
b3:cc:c8:20:23:44:bf:61:94:40:3e:90:9e:f8:c6:f7:73:d8:
df:8f:ea:17:51:2a:84:18:38:50:3c:8c:5b:03:10:50:f5:31:
91:90:fb:63:8c:72:61:57:b3:ae:b2:b7:e3:71:d0:5a:be:d1:
d8:11:c6:ce:3f:7f:ce:b8:d4:15:84:ca:6f:0f:93:0c:81:c9:
0a:9f:5a:2b:42:31:dd:bb:c7:bd:cf:fe:d3:8b:7e:b0:88:df:
a9:4a:92:53:e6:05:b4:01:bb:43:34:6d:ca:09:8f:5b:db:a2:
9c:a9:5b:41:0d:9b:10:f9:ee:e6:49:d0:05:fa:37:61:e3:0a:
5f:36:22:1b:f2:44:21:8f:9a:a4:04:b8:0c:5f:11:e0:5a:10:
ce:5e:d5:7d:6f:2e:62:5d:04:da:e0:e6:49:4b:ec:2e:41:29:
ff:a2:eb:38:f4:2b:f5:7f:fc:f6:98:22:e5:b2:2e:89:eb:a1:
2d:a0:ba:ab:99:5e:9f:9f:b3:68:9f:68:c6:23:05:72:a7:3a:
c2:ec:1d:66:8f:f2:33:20:fb:6d:f2:f5:8f:25:fd:84:6e:80:
c7:de:c6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:41 2026 by rpki-client