Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
File: npWhGdnBpdbj8-Ifb6hj2HouSw0.mft (raw, json)
Hash identifier: iqfKKbfxuCfz/ryND7P08ClPiQSYNFn8wUdxLlzZcmo=
Subject key identifier: DB:91:40:E1:9E:CC:AE:C5:66:36:E6:E5:27:E0:09:6A:3D:C5:C5:AB
Authority key identifier: 9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D
Certificate issuer: /CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
Certificate serial: 019D37C0F6D3F9F01A6BD22A60B1B6C10A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
Manifest number: 1492
Signing time: Sun 29 Mar 2026 04:01:25 +0000
Manifest this update: Sun 29 Mar 2026 04:01:25 +0000
Manifest next update: Mon 30 Mar 2026 04:01:25 +0000
Files and hashes: 1: npWhGdnBpdbj8-Ifb6hj2HouSw0.crl (hash: yyVVYA1ln/4Mxsj5TU3nv0Xa4bdOoMkMVNN0GhTfdes=)
2: xbOkjht5hqTWU1zF3gIqJ_JDXW4.roa (hash: z9C49AmDbsvtvIoy5XzWirXENyA2RyKapS/mK0EAJ58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f6:d3:f9:f0:1a:6b:d2:2a:60:b1:b6:c1:0a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
Validity
Not Before: Mar 29 04:01:25 2026 GMT
Not After : Mar 30 04:01:25 2026 GMT
Subject: CN=db9140e19eccaec56636e6e527e0096a3dc5c5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:de:07:00:bf:00:c0:56:ff:54:fb:c9:97:87:
e6:28:a9:79:f3:2e:d6:7c:a2:d3:98:7d:8d:8f:ea:
22:e6:55:07:61:45:6f:f8:5b:03:e9:d3:4e:4b:be:
a7:53:46:76:d8:ee:e0:f8:6f:21:c5:89:cb:b4:de:
70:45:b5:f2:88:0b:fd:15:ed:9f:39:b0:fa:8f:e5:
35:eb:fa:3f:62:63:c7:5a:47:e2:2c:0f:72:22:6f:
92:33:d9:f5:b8:b6:fe:84:3f:aa:2d:b3:97:62:02:
33:65:de:02:20:e3:f7:ac:f4:ff:31:93:7f:44:a5:
15:80:32:3f:98:9a:0a:40:3c:dd:80:6d:36:d0:a6:
f7:cf:49:6d:0b:dd:b2:b8:98:56:fb:96:4f:2c:bd:
58:e8:69:89:ad:a9:33:63:5d:15:8b:ee:cb:62:f1:
b1:9b:e1:6d:b9:a7:71:05:b7:ee:e8:e5:f2:f8:1d:
fd:a8:b8:4b:ff:fe:6e:a2:34:e8:ea:e9:6b:d9:97:
a6:0f:7b:a0:db:a9:26:32:00:f1:3b:a8:f0:49:c5:
e4:f0:06:71:19:d8:d5:f6:6d:b7:32:54:45:c2:74:
68:13:61:57:17:d0:1c:9c:73:7e:4e:b3:fa:3b:6d:
de:d2:87:50:33:23:6f:54:df:c4:5a:ab:e0:11:9d:
ba:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:91:40:E1:9E:CC:AE:C5:66:36:E6:E5:27:E0:09:6A:3D:C5:C5:AB
X509v3 Authority Key Identifier:
keyid:9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:78:7a:4e:a0:bd:ac:df:23:e0:5c:34:cc:65:3b:a4:c8:68:
bd:be:ae:4c:4f:be:cc:25:38:63:58:eb:3a:1b:d7:1a:45:91:
5b:db:37:f5:42:77:2f:df:c2:ee:86:89:89:6e:6e:e0:ff:7a:
6c:f0:06:d8:c3:e5:4d:2b:46:1e:26:b8:88:76:c9:0a:36:1e:
b3:14:35:21:0f:62:df:39:de:23:38:a1:e5:74:27:ff:72:bd:
5d:d3:67:a7:71:a3:da:ad:f0:a2:ee:59:0d:51:6c:40:48:57:
fb:06:33:34:b1:e8:c3:54:97:d9:68:67:f1:d3:0f:f6:c1:67:
04:80:e3:8f:8e:63:77:c8:3a:71:71:b8:5e:25:ec:f4:3a:2d:
45:87:a5:5a:60:25:46:9d:1b:78:db:81:a7:9f:4b:af:75:3a:
94:68:71:2b:73:14:72:d0:ab:dc:2b:f7:17:e3:7a:da:d5:98:
9e:0e:4e:51:33:2f:90:2f:d6:74:a2:27:29:86:d1:4d:31:f6:
8b:39:19:4e:bd:45:79:16:3e:11:e7:4c:2c:17:29:d8:2d:93:
62:ff:2b:ba:46:52:56:8a:97:b5:87:cb:40:e6:99:cf:ce:e1:
9c:2c:21:af:bf:99:c3:d4:aa:7d:9c:0d:d8:43:e7:cf:2b:ed:
e9:71:77:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:09 2026 by rpki-client