Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.mft
File: NPT7fWqMuH3Z2gbXZqCDjPNWBAI.mft (raw, json)
Hash identifier: sDDkgdoxw/E2hneBvuMqeqdb4ClAPmo5ZHRSCDU79zM=
Subject key identifier: 84:32:A2:55:4E:72:0F:19:FA:D6:A0:90:47:50:98:ED:6C:05:40:C0
Authority key identifier: 34:F4:FB:7D:6A:8C:B8:7D:D9:DA:06:D7:66:A0:83:8C:F3:56:04:02
Certificate issuer: /CN=34f4fb7d6a8cb87dd9da06d766a0838cf3560402
Certificate serial: 019D38D33BAADED67D85BE4697CF237C7304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.mft
Manifest number: 03DC
Signing time: Sun 29 Mar 2026 09:01:00 +0000
Manifest this update: Sun 29 Mar 2026 09:01:00 +0000
Manifest next update: Mon 30 Mar 2026 09:01:00 +0000
Files and hashes: 1: NPT7fWqMuH3Z2gbXZqCDjPNWBAI.crl (hash: HMOjRkoAgr1MojwNsyUuf8+ug+0XXMSrCiq4YM9/v3o=)
2: ZCzBAKCBRfQCNfF6i55cmMnjJrs.roa (hash: QiD+ABZA45afba3sbHjRUZrXE+YSuA8LnCZHvOEsoVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:3b:aa:de:d6:7d:85:be:46:97:cf:23:7c:73:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f4fb7d6a8cb87dd9da06d766a0838cf3560402
Validity
Not Before: Mar 29 09:01:00 2026 GMT
Not After : Mar 30 09:01:00 2026 GMT
Subject: CN=8432a2554e720f19fad6a090475098ed6c0540c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a6:5c:59:32:c7:fb:32:13:b3:9d:0e:41:81:
a1:db:e2:09:90:51:a3:a4:43:56:54:94:79:31:41:
3f:3e:8d:48:8f:82:78:5b:48:86:c0:0a:b3:ab:db:
98:f9:dd:f4:ec:d0:76:95:a2:7b:ca:25:fa:68:ff:
06:7b:98:27:e6:34:c1:0d:82:7e:47:79:bd:cc:4f:
b3:bb:a5:ac:ac:90:7f:ff:4e:ec:38:fc:db:01:27:
8a:26:9f:9a:8d:a5:45:40:44:ed:fc:4f:e2:8d:c7:
bc:2a:16:02:80:e3:b0:06:fa:69:06:47:12:d8:4c:
0a:d0:84:96:1e:04:91:33:ba:8c:ca:02:37:5a:89:
37:3e:3f:4b:12:46:37:16:56:34:76:6d:ae:9c:ec:
32:1c:8b:5e:ff:c9:28:87:47:42:23:2d:4f:e4:c7:
7f:2f:ee:0b:54:ac:73:b0:45:fd:52:67:2e:67:27:
64:7e:cc:a0:6a:b2:4f:e5:42:26:27:c2:12:9e:76:
f2:63:8e:96:27:21:c5:c6:34:0b:1a:ec:39:1f:05:
4f:10:0c:bd:7d:d6:df:50:af:94:cc:db:af:4a:35:
3f:6e:bc:cb:86:3c:7b:95:38:57:c9:ba:cb:13:b3:
cf:6d:ea:a1:c1:25:f2:06:15:d9:69:fd:ec:2d:6c:
29:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:32:A2:55:4E:72:0F:19:FA:D6:A0:90:47:50:98:ED:6C:05:40:C0
X509v3 Authority Key Identifier:
keyid:34:F4:FB:7D:6A:8C:B8:7D:D9:DA:06:D7:66:A0:83:8C:F3:56:04:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:46:3f:c1:9b:2d:fd:b8:2c:84:a3:36:98:3d:70:2c:55:09:
3f:5c:f9:3a:38:9e:38:d1:bd:e6:3b:a0:9b:02:d3:15:57:6b:
29:c5:28:f2:37:49:d1:d4:39:e2:3b:65:38:0d:8f:84:c8:96:
8d:fc:20:70:a3:eb:22:92:75:4a:e8:03:f4:c8:3e:54:e4:a2:
24:0a:df:b8:83:61:b7:ca:43:d0:f6:b0:0e:a7:47:9e:d6:80:
16:d3:66:db:a4:87:c2:f3:09:4e:23:af:0c:57:84:eb:62:73:
16:ff:3a:5e:a7:08:1b:75:c7:92:5a:ec:5f:4e:bd:2d:64:6d:
b5:4f:05:79:95:03:03:56:91:10:0b:7e:94:e1:e2:d2:6e:cd:
dd:af:d4:b9:57:5c:33:09:4f:6a:33:e9:22:f9:e6:e4:48:61:
0f:f4:21:3f:83:24:c2:82:08:52:10:e1:7a:54:b1:56:69:e9:
25:21:02:eb:8e:84:d5:5f:ba:fd:b1:54:a8:3e:e6:3d:5d:ab:
7d:12:8e:eb:a1:a4:cd:35:b1:c0:f3:55:92:2f:ad:f7:d7:5c:
4c:c6:31:0e:43:62:5d:50:58:f3:27:99:0f:15:25:06:54:8a:
9d:49:ec:34:e7:40:c1:69:3b:6d:6b:a5:fe:08:24:89:eb:81:
58:ba:57:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:04 2026 by rpki-client