Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
File: np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft (raw, json)
Hash identifier: UmlPZ0w+OpH8TL16vFRmck4+T/CMtID9BQ89hAOtkUs=
Subject key identifier: 4C:5E:74:6A:52:A3:9C:A8:62:9D:35:D4:18:9E:C1:27:66:89:BA:89
Authority key identifier: 9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
Certificate issuer: /CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Certificate serial: 019FA2CF3776195F2901C827701BB9DE8214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
Manifest number: 1586
Signing time: Mon 27 Jul 2026 09:01:56 +0000
Manifest this update: Mon 27 Jul 2026 09:01:56 +0000
Manifest next update: Tue 28 Jul 2026 09:01:56 +0000
Files and hashes: 1: 7rKcQQXxl0Wqi99lSzLSIA_PGiE.roa (hash: 6yLayhUVccwVTayfXedjC+AWPa6ZfJFk+hN+rmaMZyA=)
2: np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl (hash: I47gk0dRkZ51XdajUM/tJCwk0V5qRxGvRh/4eovqgn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cf:37:76:19:5f:29:01:c8:27:70:1b:b9:de:82:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Validity
Not Before: Jul 27 09:01:56 2026 GMT
Not After : Jul 28 09:01:56 2026 GMT
Subject: CN=4c5e746a52a39ca8629d35d4189ec1276689ba89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:94:ab:38:0d:72:68:cd:00:32:1a:c6:ea:f9:
ef:2c:54:43:6a:a7:1d:b4:c7:b8:47:e8:0a:d4:ad:
56:a1:9d:33:70:2b:1e:2b:4b:65:b2:cc:d9:48:5b:
05:0b:0d:22:50:76:cb:2e:f8:65:fe:b4:a2:38:b9:
f3:9d:fd:b2:be:d4:79:f9:87:7a:54:2f:5c:a5:89:
39:d7:8e:3b:4f:f6:c2:21:87:57:c6:9d:72:67:5c:
74:78:85:2d:cf:80:7a:61:f4:a2:d7:dc:88:4b:14:
f1:14:b7:10:d8:cd:4f:43:34:0f:8d:1a:9c:f7:e1:
dd:31:c4:ce:f5:a5:92:21:17:34:07:71:10:2c:41:
5a:c6:b6:22:cf:80:e1:2d:32:4e:2f:9c:52:cf:13:
35:12:5d:21:55:3a:d9:da:bc:34:69:9f:d2:ae:89:
6b:a2:e1:b9:3b:cb:36:b5:6b:1f:15:89:b6:3e:e8:
dd:e0:67:26:c9:e6:9e:c6:9c:d6:93:c6:0d:4c:f4:
19:90:29:6d:31:1f:63:56:f5:5b:0b:82:e2:b1:7b:
fb:ee:2a:e9:56:7b:c1:ea:18:96:a1:89:fe:bb:17:
ed:44:07:4f:8b:fc:0d:fd:e8:e5:bb:bc:a3:25:d2:
60:04:a8:0b:b9:02:c0:21:b2:b0:0a:a9:58:22:38:
65:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5E:74:6A:52:A3:9C:A8:62:9D:35:D4:18:9E:C1:27:66:89:BA:89
X509v3 Authority Key Identifier:
keyid:9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:81:48:00:99:2e:2a:f6:39:91:7c:9c:63:74:76:dd:60:14:
b2:a2:d4:fe:6b:ed:99:dd:cd:79:8b:e9:b0:83:27:f8:db:27:
a2:ec:8f:20:62:0c:d0:b0:c9:9c:68:f5:ac:0d:6b:5b:c2:79:
ad:f6:f9:9a:de:b8:f9:1b:83:31:cb:45:fc:12:33:3b:88:b7:
ff:de:4e:1a:62:b1:7e:e8:a7:0c:66:a7:24:d4:a3:1c:d0:0f:
3c:e5:e0:34:94:96:2d:f9:c2:55:fc:a4:c0:51:cc:6b:6e:e7:
b9:df:a5:2b:02:d7:8a:6b:46:8a:40:b8:3d:b6:34:ec:85:f5:
3e:fb:58:37:7f:a0:3f:9f:03:da:1c:6d:b3:7a:f4:eb:93:5b:
c8:4d:0d:9e:3e:33:25:66:1c:fd:25:9c:ed:b8:9c:a5:95:fb:
46:c2:76:cd:29:69:a9:b1:2c:3c:87:80:47:75:00:71:5f:04:
c3:ae:de:69:09:83:02:e3:f4:5f:ac:e2:44:86:56:47:d6:d5:
ca:d9:bc:bd:18:a5:4c:97:35:ba:19:a1:da:f3:9b:c8:a6:7c:
02:04:3f:39:92:a0:e4:56:95:aa:a5:8c:c6:34:f9:c9:e8:8e:
96:dc:22:62:f3:0b:dc:94:38:b7:80:44:c4:ca:f7:ed:ae:38:
83:85:e2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:49:48 2026 by rpki-client