Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
File: npNqlnzlH9NBCUdGmWvO8WrL764.mft (raw, json)
Hash identifier: WWUIhauppmOWXCCW7tv7CXXdjc8PmQ6GeZBY/hswR9s=
Subject key identifier: 2D:AA:4C:0E:8F:A1:D5:73:42:D5:8F:69:1A:9E:EE:62:62:05:9A:38
Authority key identifier: 9E:93:6A:96:7C:E5:1F:D3:41:09:47:46:99:6B:CE:F1:6A:CB:EF:AE
Certificate issuer: /CN=9e936a967ce51fd341094746996bcef16acbefae
Certificate serial: 01A1833EB39E8E4F04CC2CA909569F03DD29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
Manifest number: 118E
Signing time: Wed 28 Oct 2026 16:01:26 +0000
Manifest this update: Wed 28 Oct 2026 16:01:26 +0000
Manifest next update: Thu 29 Oct 2026 16:01:26 +0000
Files and hashes: 1: npNqlnzlH9NBCUdGmWvO8WrL764.crl (hash: 0Oa/gkn2cL7J5nRcLDf10+dKJRpo66lij5vC31/RI70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:3e:b3:9e:8e:4f:04:cc:2c:a9:09:56:9f:03:dd:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e936a967ce51fd341094746996bcef16acbefae
Validity
Not Before: Oct 28 16:01:26 2026 GMT
Not After : Oct 29 16:01:26 2026 GMT
Subject: CN=2daa4c0e8fa1d57342d58f691a9eee6262059a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:db:87:ef:34:5d:74:ca:f4:61:24:0f:8e:a9:
84:54:c8:07:74:8c:58:1a:8a:3a:13:80:64:88:05:
9a:2e:d7:eb:69:e4:4a:15:4d:e9:ce:78:2f:69:c9:
f8:7c:d3:91:59:65:d1:76:9b:34:51:f8:4e:4c:6f:
04:b8:91:3b:4f:05:1b:3d:0f:18:b4:4a:2a:f7:97:
c5:f8:ee:38:ca:90:73:2d:a5:8b:3d:e5:4d:6e:9a:
19:a8:44:c2:21:8a:c2:59:57:46:4b:44:49:77:83:
00:dc:a8:6f:ab:55:aa:1f:0b:1d:11:62:d5:a9:68:
71:e0:cc:14:a4:ca:4c:49:3c:65:7c:69:85:4c:44:
70:73:c6:63:9b:a0:6c:60:13:d9:ef:63:de:e8:66:
fa:eb:42:1e:23:87:29:8e:b2:9e:c6:e3:3a:79:be:
69:30:eb:7b:bc:48:99:01:75:80:81:9b:ad:c0:82:
27:9c:fe:33:0b:d0:21:8f:36:ce:66:d5:25:9f:a9:
3c:07:ed:b3:78:45:86:a0:86:08:b4:c9:81:c1:23:
1a:20:a5:d5:91:33:36:c6:48:64:da:60:18:e3:15:
db:07:db:8d:3f:bb:4b:4d:2d:93:d1:da:48:98:bc:
ab:b9:bf:9a:b1:aa:29:93:8f:5e:fe:2e:70:6c:9c:
21:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AA:4C:0E:8F:A1:D5:73:42:D5:8F:69:1A:9E:EE:62:62:05:9A:38
X509v3 Authority Key Identifier:
keyid:9E:93:6A:96:7C:E5:1F:D3:41:09:47:46:99:6B:CE:F1:6A:CB:EF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d5:d7:0d:e2:fd:0c:05:0a:4e:ea:d1:8e:0f:c9:88:8c:fb:
ba:b3:e6:9a:b7:18:a6:32:66:4e:05:83:35:e7:89:fe:15:56:
02:f7:ac:33:d8:b1:ee:22:87:31:87:88:49:e8:90:bd:da:81:
21:97:59:f8:f0:d8:c8:e7:3f:ce:b5:4e:93:d0:b6:2e:a4:84:
4d:1a:25:89:3b:ca:e8:1f:ec:af:af:be:6b:3d:75:f7:95:97:
11:de:ab:c1:2d:22:ea:82:27:aa:46:0c:87:af:1d:52:d1:6c:
ee:57:0f:00:dc:88:c1:b5:3d:2d:99:ac:ab:7c:4f:6f:46:42:
da:38:72:dc:ed:5f:ad:61:67:65:40:4c:53:50:80:c7:70:4c:
4a:9e:d4:f0:1e:c4:32:34:0a:1e:34:58:0b:2c:62:0f:70:a2:
4f:c8:4e:63:ce:a2:8f:af:9d:c4:d3:48:93:d5:6b:c1:a6:a4:
57:42:fe:04:bd:46:69:5e:2d:2a:a1:8d:a3:5d:5a:7d:2b:ee:
41:f2:5f:29:6b:be:c1:1c:02:db:39:13:3b:0d:94:bd:56:fe:
50:b0:7b:ab:e4:a6:94:5c:41:61:1d:13:d9:0c:8d:35:c6:c0:
45:28:16:12:a4:48:b9:b4:7b:3f:c9:3a:98:c0:f7:91:c6:1f:
0e:47:25:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGDPrOejk8EzCypCVafA90pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTM2YTk2N2NlNTFmZDM0MTA5NDc0Njk5NmJjZWYxNmFj
YmVmYWUwHhcNMjYxMDI4MTYwMTI2WhcNMjYxMDI5MTYwMTI2WjAzMTEwLwYDVQQD
EygyZGFhNGMwZThmYTFkNTczNDJkNThmNjkxYTllZWU2MjYyMDU5YTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArduH7zRddMr0YSQPjqmEVMgHdIxY
Goo6E4BkiAWaLtfraeRKFU3pzngvacn4fNORWWXRdps0UfhOTG8EuJE7TwUbPQ8Y
tEoq95fF+O44ypBzLaWLPeVNbpoZqETCIYrCWVdGS0RJd4MA3Khvq1WqHwsdEWLV
qWhx4MwUpMpMSTxlfGmFTERwc8Zjm6BsYBPZ72Pe6Gb660IeI4cpjrKexuM6eb5p
MOt7vEiZAXWAgZutwIInnP4zC9AhjzbOZtUln6k8B+2zeEWGoIYItMmBwSMaIKXV
kTM2xkhk2mAY4xXbB9uNP7tLTS2T0dpImLyrub+asaopk49e/i5wbJwh1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2qTA6PodVzQtWPaRqe7mJiBZo4MB8GA1UdIwQY
MBaAFJ6TapZ85R/TQQlHRplrzvFqy++uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBOcWxuemxIOU5CQ1VkR21Xdk84V3JMNzY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kMjVlZDAtZmRkYy00YjI4LWI0N2Mt
MzM2MGNkZWRiMzVmLzEvbnBOcWxuemxIOU5CQ1VkR21Xdk84V3JMNzY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kMjVlZDAtZmRkYy00YjI4LWI0N2MtMzM2MGNkZWRiMzVm
LzEvbnBOcWxuemxIOU5CQ1VkR21Xdk84V3JMNzY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD9XXDeL9
DAUKTurRjg/JiIz7urPmmrcYpjJmTgWDNeeJ/hVWAvesM9ix7iKHMYeISeiQvdqB
IZdZ+PDYyOc/zrVOk9C2LqSETRoliTvK6B/sr6++az1195WXEd6rwS0i6oInqkYM
h68dUtFs7lcPANyIwbU9LZmsq3xPb0ZC2jhy3O1frWFnZUBMU1CAx3BMSp7U8B7E
MjQKHjRYCyxiD3CiT8hOY86ij6+dxNNIk9VrwaakV0L+BL1GaV4tKqGNo11afSvu
QfJfKWu+wRwC2zkTOw2UvVb+ULB7q+SmlFxBYR0T2QyNNcbARSgWEqRIubR7P8k6
mMD3kcYfDkcl0w==
-----END CERTIFICATE-----
Generated at Thu Oct 29 00:44:22 2026 by rpki-client