Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
File: NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft (raw, json)
Hash identifier: ZHOx6CcjSNrsp9IDKyOB3pbb4JQEvQZ5FWoV4STiNbI=
Subject key identifier: 08:AD:3A:97:DE:E8:0A:2E:96:BF:B4:09:0E:44:9C:C5:E5:61:68:43
Authority key identifier: 34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
Certificate issuer: /CN=34f78361a077b0d789135ccd68b1261db138f950
Certificate serial: 019D371B3A00D8D1C2C71E057C98D0ED8479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
Manifest number: 128A
Signing time: Sun 29 Mar 2026 01:00:24 +0000
Manifest this update: Sun 29 Mar 2026 01:00:24 +0000
Manifest next update: Mon 30 Mar 2026 01:00:24 +0000
Files and hashes: 1: 8d-0n5QXgWSBRoTXLSmO5ePVF_Q.roa (hash: 4bi8HBY89WSg/0IezYkrsaa7KDMO+ZPuMjHVuXQc5nM=)
2: NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl (hash: SfYjdXfsUZoqnRcbAYaysSfxnuuQqpptgvN5D9s2cQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:3a:00:d8:d1:c2:c7:1e:05:7c:98:d0:ed:84:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f78361a077b0d789135ccd68b1261db138f950
Validity
Not Before: Mar 29 01:00:24 2026 GMT
Not After : Mar 30 01:00:24 2026 GMT
Subject: CN=08ad3a97dee80a2e96bfb4090e449cc5e5616843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2d:00:86:b4:b9:27:0c:b4:a9:71:79:43:b8:
02:04:97:b2:cd:5a:72:81:5a:de:df:9a:b1:1a:26:
e2:78:6a:3a:63:11:8e:6a:05:e2:e8:9e:1c:ce:18:
d5:73:9d:f9:5c:b8:76:ea:7a:cb:2b:f4:de:18:9b:
25:56:59:d1:d6:50:fd:b8:ce:2c:76:f3:ec:26:8e:
d9:6e:75:1d:2b:d1:86:64:99:16:ff:c9:97:52:71:
7f:af:92:b5:de:4b:f9:5a:dd:9f:7d:a2:f0:73:a2:
4a:a0:9e:3e:56:31:8c:60:63:d8:de:5e:4d:90:b3:
fa:24:50:a2:0f:05:88:08:54:cc:06:ac:d7:16:53:
e0:65:f1:a5:54:27:e3:89:4c:ea:a8:ee:a2:76:8b:
a1:df:9d:86:ee:c9:4d:b7:e8:3d:f0:51:16:16:1c:
2b:57:4f:22:8e:02:06:bf:4c:b5:06:bb:86:4d:a4:
e3:04:42:99:95:0e:7a:a7:f7:c0:7c:d8:d9:81:05:
7e:a7:07:83:f6:97:67:01:99:b5:00:a5:4c:77:46:
45:0a:a6:c6:fd:6f:f8:9e:bd:10:ec:bd:c1:1a:4a:
47:ac:7c:c4:41:57:54:2c:c1:74:6c:09:c1:1c:3b:
ea:68:47:82:b4:21:4a:71:f6:21:34:8e:4f:29:a1:
25:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AD:3A:97:DE:E8:0A:2E:96:BF:B4:09:0E:44:9C:C5:E5:61:68:43
X509v3 Authority Key Identifier:
keyid:34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c7:01:83:00:42:bc:f1:80:75:5f:01:f1:d3:f6:9d:82:7f:
72:a1:5f:58:38:e5:ae:aa:be:2e:ac:e7:28:16:6d:e4:df:90:
65:8e:9c:73:55:b9:ba:18:4b:e2:7c:58:f2:90:53:4d:a1:ed:
fb:ec:a6:cf:f7:38:08:ed:ae:86:6d:1c:74:16:90:31:51:8e:
95:38:aa:df:96:77:fb:49:69:be:ab:bf:b3:d0:91:15:f5:40:
3a:c5:2c:a8:d1:cb:e3:d3:4d:63:97:c1:f2:a2:61:fd:1f:32:
b0:76:47:5d:df:86:19:04:96:19:88:dc:13:b8:32:e6:ed:d7:
f6:dd:0a:89:0d:e7:23:ab:b0:0b:ab:8a:66:08:6f:b1:2a:23:
8b:40:20:ca:2d:bb:f0:21:f9:b9:5e:39:ec:28:48:d3:c0:f4:
14:08:82:87:a9:b5:44:63:e0:66:1b:22:25:c0:31:c1:c0:11:
53:27:39:8c:62:7e:eb:33:b5:ad:b4:1b:c5:35:74:07:0d:df:
18:b3:23:26:57:76:ea:52:8c:21:ff:a5:f2:fb:70:e2:02:2b:
66:f2:ad:4e:3b:a1:f9:a0:8d:54:9f:c6:2b:f0:52:4a:b4:3b:
0d:46:c5:14:0d:05:21:a4:74:49:24:ad:56:19:cc:47:3d:5f:
91:6b:61:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:48 2026 by rpki-client