Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
File: NPdSlbuVtVRThE8y1uOVCdO-zkU.mft (raw, json)
Hash identifier: b9rucuEPWFNPj3N2cathsOp++wu6z8u1REjRYgQPFwE=
Subject key identifier: 84:9D:30:0A:82:21:06:A1:71:66:40:C5:86:43:05:14:47:CA:55:21
Authority key identifier: 34:F7:52:95:BB:95:B5:54:53:84:4F:32:D6:E3:95:09:D3:BE:CE:45
Certificate issuer: /CN=34f75295bb95b55453844f32d6e39509d3bece45
Certificate serial: 01A0E8C09900A019AC015A5CD451C9074471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
Manifest number: 04EE
Signing time: Mon 28 Sep 2026 16:02:11 +0000
Manifest this update: Mon 28 Sep 2026 16:02:11 +0000
Manifest next update: Tue 29 Sep 2026 16:02:11 +0000
Files and hashes: 1: NPdSlbuVtVRThE8y1uOVCdO-zkU.crl (hash: qvkf1D2KwHJStWuS0NdduVSDkxDLjzQtDt7fBU3ONJc=)
2: U7LuUPl-UaS1Nz7kE-Ov6c0Y3U4.asa (hash: 4pjiq26J/GEImFtYQjL5TuBS9mjmJQu5GgR6+/ZZjEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:c0:99:00:a0:19:ac:01:5a:5c:d4:51:c9:07:44:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f75295bb95b55453844f32d6e39509d3bece45
Validity
Not Before: Sep 28 16:02:11 2026 GMT
Not After : Sep 29 16:02:11 2026 GMT
Subject: CN=849d300a822106a1716640c58643051447ca5521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:1b:0a:bf:d4:96:d4:a5:4c:25:c5:94:2e:
11:a5:9c:65:52:9d:43:f0:a8:25:63:da:1a:aa:eb:
7c:26:bf:4f:25:2f:2c:4f:5a:27:bd:70:30:07:4b:
78:80:a6:c6:80:d2:fe:a9:4e:2c:9c:da:c2:70:d1:
08:f6:93:70:4c:e6:44:0c:76:f6:9a:51:74:fd:bc:
7d:3e:b5:23:6e:25:93:99:5a:7f:df:75:87:7f:6f:
01:bd:01:0a:66:e0:ae:8d:f0:ab:25:d3:87:80:25:
b0:b9:95:a2:1c:52:79:93:54:ab:06:94:43:3e:75:
ad:cd:84:9e:99:5a:24:a7:1d:15:08:79:92:6d:9d:
7c:84:40:6c:4b:1e:89:1a:2b:d3:1a:f3:c0:7d:d4:
77:d8:39:ae:50:57:d1:aa:55:72:6e:31:41:3f:ab:
f8:08:47:1c:3e:9d:e7:43:1a:88:d4:0e:aa:0f:46:
13:20:ec:04:60:0f:2c:52:22:3e:40:b6:a8:fb:ec:
d8:cc:5e:94:75:d4:f9:23:20:65:55:e2:46:32:7c:
74:d1:40:f7:90:8b:6f:f2:c4:34:c1:ff:7e:e8:46:
6d:4f:91:e6:c4:e4:a6:93:50:b5:61:d7:20:6c:18:
0f:83:a6:1a:63:c4:8b:bd:ec:71:09:36:71:45:d1:
57:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9D:30:0A:82:21:06:A1:71:66:40:C5:86:43:05:14:47:CA:55:21
X509v3 Authority Key Identifier:
keyid:34:F7:52:95:BB:95:B5:54:53:84:4F:32:D6:E3:95:09:D3:BE:CE:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:bb:ce:e7:7d:32:44:4f:58:c4:15:6b:dd:98:8c:ef:4a:8a:
37:c7:c6:a0:16:c9:31:e9:66:18:42:82:a7:77:a8:d6:0e:e5:
6d:03:55:a3:32:02:61:43:94:ba:d1:cc:8a:3f:8d:d9:ee:e5:
fa:85:5c:15:2f:93:ed:45:04:7d:b5:c2:55:ef:8f:3c:80:e3:
bf:d3:85:86:f0:d2:a9:df:18:4e:a3:d4:94:23:af:68:ba:de:
dc:fa:82:f9:7b:c1:09:3e:ac:0e:6d:15:46:a5:3f:5a:f4:08:
4c:4a:57:e8:b7:8e:77:ed:e7:78:19:6b:62:4c:21:21:3f:4a:
d7:34:cc:f4:af:a4:4b:64:17:4e:fe:3e:b7:81:02:a1:d6:86:
52:14:37:f6:26:96:47:18:09:ba:9f:6b:3e:f7:64:a5:50:28:
1a:76:29:b4:0f:1c:20:09:00:b1:ba:22:b4:50:fe:4a:90:61:
e3:cc:b3:b4:da:c9:d0:ee:2b:b3:81:72:d4:68:08:c5:b1:94:
8d:b8:7a:98:c6:d4:78:97:ec:19:2b:eb:66:5e:a3:6b:05:71:
82:11:55:9f:6c:fe:e3:bf:ef:b1:a3:fe:29:aa:9a:12:68:f2:
5b:c4:2d:ba:b6:1b:f7:4e:cf:e9:d0:55:79:ca:47:21:92:2a:
8e:95:36:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:29:57 2026 by rpki-client