Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
File: NPdSlbuVtVRThE8y1uOVCdO-zkU.mft (raw, json)
Hash identifier: 2JcTFmzUwMQIJQd9OCWbrbkV0mLOTSPK1cDvib8j1Qw=
Subject key identifier: C9:21:97:C6:65:D5:9A:96:6F:52:29:48:A8:9E:3F:CF:47:FD:AA:8D
Authority key identifier: 34:F7:52:95:BB:95:B5:54:53:84:4F:32:D6:E3:95:09:D3:BE:CE:45
Certificate issuer: /CN=34f75295bb95b55453844f32d6e39509d3bece45
Certificate serial: 019D38663CA94819378D1C5632C1A397985D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
Manifest number: 0303
Signing time: Sun 29 Mar 2026 07:01:57 +0000
Manifest this update: Sun 29 Mar 2026 07:01:57 +0000
Manifest next update: Mon 30 Mar 2026 07:01:57 +0000
Files and hashes: 1: NPdSlbuVtVRThE8y1uOVCdO-zkU.crl (hash: l/ZtV6spnA1IPZTaO2INXOFV57M26R4nisaG/x/5RCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:3c:a9:48:19:37:8d:1c:56:32:c1:a3:97:98:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f75295bb95b55453844f32d6e39509d3bece45
Validity
Not Before: Mar 29 07:01:57 2026 GMT
Not After : Mar 30 07:01:57 2026 GMT
Subject: CN=c92197c665d59a966f522948a89e3fcf47fdaa8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ad:23:be:fc:03:23:d2:5f:db:64:0d:83:b8:
70:c0:09:74:06:35:83:0b:24:c6:f4:15:6d:57:d2:
6f:30:8b:da:d9:ef:5f:ba:f2:f3:9a:5f:8e:f7:98:
55:83:ea:92:28:e8:c7:59:29:f8:c1:a7:36:bf:c1:
7c:1a:48:fe:c2:91:86:c7:f7:43:2e:e1:f3:a4:10:
15:c8:b6:1a:85:81:93:08:4d:5d:e6:4b:de:92:28:
08:09:c5:65:8f:f2:92:77:3f:53:80:01:ae:4c:3e:
4d:01:0e:d0:d5:ec:39:30:a6:dc:24:21:d8:96:da:
a4:68:2f:7b:0e:f9:4d:35:f5:45:53:94:70:ae:8d:
ad:d8:ba:22:d7:bb:1f:35:37:bb:c6:3d:d3:1b:cc:
a4:0f:de:a7:23:fa:9e:ef:90:3a:fa:20:55:53:b7:
cd:a2:58:f1:ee:4e:4c:f2:33:cd:eb:4a:2a:34:2a:
9b:9b:85:42:b7:6f:1c:21:72:3d:12:63:2a:71:de:
cc:c5:4e:37:7a:3a:75:87:c0:b7:ec:9a:db:fc:e6:
2d:2e:6b:b4:6c:e6:bb:e9:9b:cf:67:80:10:68:c7:
48:3b:eb:3b:d9:01:9f:f1:6b:f9:13:34:f9:f4:62:
10:e0:4b:49:ef:8b:e5:ed:4d:de:0b:85:5c:ec:9b:
70:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:21:97:C6:65:D5:9A:96:6F:52:29:48:A8:9E:3F:CF:47:FD:AA:8D
X509v3 Authority Key Identifier:
keyid:34:F7:52:95:BB:95:B5:54:53:84:4F:32:D6:E3:95:09:D3:BE:CE:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:73:3b:0c:4d:7c:0d:41:a5:27:cc:24:40:75:9e:73:73:f4:
b0:4d:b3:f2:45:6a:b6:9b:db:1e:d1:fc:3d:f1:12:e8:e9:6a:
72:39:33:8b:a2:95:51:a7:73:6d:15:9d:b7:3e:03:42:e3:e4:
89:f8:0a:d8:26:c9:43:be:4a:82:16:45:41:ed:7d:ff:79:a1:
a4:40:38:23:21:ee:89:bd:5b:67:70:37:e5:ed:5f:0a:3f:70:
08:2a:8a:d6:b5:1a:27:18:ff:d1:d9:21:28:da:cd:bd:6e:8d:
4e:bf:62:84:27:9e:8f:29:1e:32:a2:06:9e:8c:79:2e:af:9d:
cf:53:97:36:23:66:72:a7:fe:91:b6:a8:5e:9d:59:5a:ff:fe:
60:aa:f3:3e:9a:ef:d5:e9:23:64:4c:c7:e8:2d:6d:a0:0e:22:
c2:e9:89:59:29:1f:e6:97:35:28:01:4f:1e:22:70:60:c5:89:
5b:23:96:cc:f8:c9:79:8e:dd:fb:51:0c:ac:46:49:4c:c5:1d:
6b:d5:e3:09:65:da:4f:54:eb:f8:0d:b9:7f:cb:13:50:68:ca:
bc:08:c3:cc:66:5b:be:3d:25:fa:5c:75:b8:62:ad:c3:52:10:
02:b3:c4:33:67:ba:5d:19:84:12:93:4c:a1:90:74:85:ec:fd:
62:11:ff:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:52 2026 by rpki-client