Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
File: npTVvz231nNNzxvmItX97i_sO48.mft (raw, json)
Hash identifier: OgdJPr146pTwIx9jxQJe7HA8gsKJoD7i8I44b7JQTQ0=
Subject key identifier: 6E:F7:8E:0B:CA:AA:10:21:D7:33:A2:1B:AE:2B:3F:AE:81:88:AE:0F
Authority key identifier: 9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F
Certificate issuer: /CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f
Certificate serial: 01A16D5B43676C75B50713F5ED6190B4ED49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
Manifest number: 0B7B
Signing time: Sat 24 Oct 2026 10:00:59 +0000
Manifest this update: Sat 24 Oct 2026 10:00:59 +0000
Manifest next update: Sun 25 Oct 2026 10:00:59 +0000
Files and hashes: 1: npTVvz231nNNzxvmItX97i_sO48.crl (hash: mzZj6B3sJPtxws6OKevXtH1QUCtL99c9XtIxfRvnmxY=)
2: zcxoOaYQZVz0kyNkbAvoL7_cGOo.roa (hash: cbQCnBDpdRHmtA6XlyYrBSpV92ISXXC3TjEjSfaVLUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:5b:43:67:6c:75:b5:07:13:f5:ed:61:90:b4:ed:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f
Validity
Not Before: Oct 24 10:00:59 2026 GMT
Not After : Oct 25 10:00:59 2026 GMT
Subject: CN=6ef78e0bcaaa1021d733a21bae2b3fae8188ae0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:5e:54:d1:d8:85:30:43:6d:e3:09:2f:12:
ac:38:49:76:61:53:44:2b:2c:9e:44:47:94:9e:ce:
7c:00:70:4c:a6:85:06:df:e9:a2:7f:e1:e5:b1:54:
19:c6:7b:c7:43:ce:8d:07:3a:d7:fe:f7:88:fa:bc:
59:73:ea:3c:b0:40:65:98:a6:42:6e:4e:2b:0c:7a:
90:f4:ff:63:10:f7:cf:b3:36:11:01:71:d8:a1:9c:
2e:fa:42:f4:cc:8f:bc:53:fd:45:5d:1f:99:e8:07:
68:e3:a8:87:30:3e:37:f0:50:a7:c6:93:bf:69:4e:
96:10:24:c9:9f:e3:1b:f7:e8:03:62:c6:b1:93:08:
af:64:25:4a:0e:ac:0b:8e:e0:68:d3:9d:27:16:18:
ae:99:14:c5:06:d7:e0:fd:0f:65:58:58:54:e2:5a:
dc:57:d8:bd:2a:ea:3b:0f:e4:4e:0e:b1:99:30:72:
ca:27:0a:8e:6e:bb:52:90:df:71:2b:d4:9b:7b:58:
4f:34:1a:9b:aa:09:24:56:d4:9e:d1:a7:45:19:fd:
65:b8:b1:f9:a5:95:77:4b:22:14:f8:cf:bf:91:96:
6a:44:a8:fe:d0:ce:5b:c2:84:46:49:95:69:89:58:
a4:aa:04:c2:38:22:07:f2:90:ad:a6:96:4d:82:4a:
fa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F7:8E:0B:CA:AA:10:21:D7:33:A2:1B:AE:2B:3F:AE:81:88:AE:0F
X509v3 Authority Key Identifier:
keyid:9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d6:f2:4a:66:4c:63:19:83:c4:90:6d:49:b9:f1:4a:b8:8a:
39:c6:9b:df:15:10:c8:fc:5f:e6:09:e3:68:4b:fe:93:de:07:
04:6f:f8:d9:51:5d:22:29:47:37:97:99:e3:94:2b:fb:9d:b1:
c7:e9:24:cd:f7:e1:b7:33:59:c8:34:53:ba:d8:d0:77:be:80:
98:04:e6:74:d3:ba:1f:29:c5:4b:67:0b:64:c9:68:d3:8b:79:
ae:a2:cd:22:72:65:26:4a:ee:07:ae:88:f8:ff:73:c9:6c:df:
2d:9f:7a:a7:b4:20:62:20:9b:a0:ed:5d:0b:f2:91:1e:2f:a1:
b0:65:e8:44:02:77:d3:a3:7a:5b:74:2a:11:dc:65:b0:d7:47:
ba:96:e7:6b:cf:ae:10:f4:b2:22:73:ab:bc:b4:65:ed:36:64:
c1:af:48:5c:ad:e9:f4:6a:c3:37:b6:9f:73:7d:1a:ef:e9:f3:
1b:e0:e7:d8:7d:97:69:e2:e1:84:1c:cf:5b:ce:66:dc:8b:51:
09:46:49:d8:d0:03:de:05:b2:c6:96:78:7a:fa:69:15:35:d3:
d9:5f:66:dd:8d:c6:84:bd:16:07:d2:69:76:4d:a5:ec:ab:e1:
eb:33:d2:d0:c1:69:da:1e:d6:61:03:11:81:d0:19:7e:94:91:
2a:e6:fe:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:47:49 2026 by rpki-client