Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
File: npTVvz231nNNzxvmItX97i_sO48.mft (raw, json)
Hash identifier: XUQBsY4o+j9mBPyR94lKDbYBwGqKqo7RWmkxGR0ag1U=
Subject key identifier: 5E:E8:AF:DC:7A:22:19:13:79:B5:8B:E8:04:63:CB:89:52:EE:18:AB
Authority key identifier: 9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F
Certificate issuer: /CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f
Certificate serial: 01A06E704E96FB7A6D67DF062BCD92986FFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
Manifest number: 0AF7
Signing time: Fri 04 Sep 2026 22:00:48 +0000
Manifest this update: Fri 04 Sep 2026 22:00:48 +0000
Manifest next update: Sat 05 Sep 2026 22:00:48 +0000
Files and hashes: 1: npTVvz231nNNzxvmItX97i_sO48.crl (hash: lneJyFYeygzXQqNaMp9DBT6WSNQdrpWoWpdiQph6gV0=)
2: zcxoOaYQZVz0kyNkbAvoL7_cGOo.roa (hash: cbQCnBDpdRHmtA6XlyYrBSpV92ISXXC3TjEjSfaVLUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:4e:96:fb:7a:6d:67:df:06:2b:cd:92:98:6f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f
Validity
Not Before: Sep 4 22:00:48 2026 GMT
Not After : Sep 5 22:00:48 2026 GMT
Subject: CN=5ee8afdc7a22191379b58be80463cb8952ee18ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1e:34:63:51:8e:be:98:7f:d4:03:a7:7d:b7:
b4:5c:f8:d6:df:77:67:6f:42:29:7c:af:c9:5a:20:
55:c5:77:e3:88:79:7a:13:0a:56:94:cf:7c:6c:03:
8a:a2:6d:8d:10:c3:7b:cf:b4:6f:08:e3:dc:c2:5f:
19:4d:57:16:a7:59:a7:3f:9d:c3:2a:16:3f:28:cc:
12:89:31:f9:c5:bf:39:4a:3b:2c:41:28:45:c7:9d:
02:75:e0:d5:4e:86:3d:89:c0:22:df:5e:e7:3c:84:
83:64:27:36:d3:8f:b4:31:99:bf:de:f7:f0:6c:30:
8e:55:5f:c5:2e:8c:1f:f0:34:c8:23:a1:5d:6b:2d:
c2:65:86:4b:3d:f4:8b:d3:1a:c2:ea:cb:98:75:97:
a2:fb:ed:e6:e7:8d:c2:f2:6b:ee:ed:6c:1c:c1:a4:
86:ee:98:b3:aa:5a:4c:a5:c2:95:93:13:82:ac:e0:
57:cd:82:4e:e5:11:09:9c:68:30:14:2f:11:c2:59:
48:e0:05:63:9f:80:09:76:14:2f:bc:9b:2e:08:ce:
08:78:66:bf:a8:7d:39:7b:fa:15:88:5a:1f:b4:2d:
ec:43:42:f2:c6:26:d1:95:26:13:b5:d8:49:66:e2:
a4:fa:cf:91:12:76:dc:37:9d:c6:41:d7:27:1a:f2:
23:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E8:AF:DC:7A:22:19:13:79:B5:8B:E8:04:63:CB:89:52:EE:18:AB
X509v3 Authority Key Identifier:
keyid:9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:77:71:81:03:45:1a:91:fd:52:dc:3d:df:74:4a:29:5f:d9:
90:84:d3:ff:2e:51:52:6a:c7:1b:d7:da:49:8c:15:08:18:e9:
0f:97:6d:45:e0:cb:7e:60:b1:ee:09:1a:0f:a2:f3:c9:07:42:
0b:22:55:8b:57:53:96:a4:13:82:92:69:29:09:5f:49:cf:25:
a5:6d:4e:bf:35:70:7a:1d:d3:cb:76:dc:69:eb:78:15:71:08:
bf:59:cf:93:e7:f4:01:de:ae:d6:92:be:97:3b:1e:99:dd:7f:
cd:47:39:6d:c9:89:72:5a:0c:cb:55:cd:96:a2:87:1e:8b:a8:
5a:ef:27:47:57:10:88:d9:2c:39:00:2b:e2:82:d4:a6:44:c6:
db:94:f3:e9:ea:9a:a0:1d:e7:dc:c4:bf:50:41:d3:8a:ea:99:
cd:01:0d:7e:0b:d8:a1:f8:5a:81:25:be:b9:e8:cc:8a:37:36:
c5:59:fe:b3:56:dc:ac:b7:1c:7a:41:83:51:08:27:6c:82:65:
06:05:0d:87:8e:69:6d:12:76:29:e0:cc:89:37:70:c3:3d:cc:
c5:32:87:a0:e0:6e:c4:fc:a1:cb:49:3f:05:55:88:70:94:5f:
e0:85:a0:62:7b:cf:59:70:ed:6e:69:ca:3e:1d:f5:e2:c1:be:
27:e7:90:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:25:56 2026 by rpki-client