Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
File: nPYI_632AAge6SIpjksq6Wr_SOg.mft (raw, json)
Hash identifier: NVkwu18fvvljn8iv6qi72ajeGnXTndeNJ75Lu5twbeU=
Subject key identifier: 74:AC:BD:B8:F0:07:4F:08:4F:90:92:B0:60:0F:D4:28:3F:F0:5D:8C
Authority key identifier: 9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
Certificate issuer: /CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Certificate serial: 019D29615DB12A5EDB913DC79AEAD1E81246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 09:02:19 +0000
Manifest this update: Thu 26 Mar 2026 09:02:19 +0000
Manifest next update: Fri 27 Mar 2026 09:02:19 +0000
Files and hashes: 1: nPYI_632AAge6SIpjksq6Wr_SOg.crl (hash: kysRlEnqUCIyhvo8xDc+zUgxdCU6I30wru4389VEYNc=)
2: vLirgPar5c0l-_w2MTo6mnE8j2o.roa (hash: aEBCV68tz4z6OeR59pAV8N/3RKw1Sou9vg9NQB/F55k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:5d:b1:2a:5e:db:91:3d:c7:9a:ea:d1:e8:12:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Validity
Not Before: Mar 26 09:02:19 2026 GMT
Not After : Mar 27 09:02:19 2026 GMT
Subject: CN=74acbdb8f0074f084f9092b0600fd4283ff05d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:06:75:d5:85:49:6e:b6:69:1d:8d:1b:ff:83:
ad:a6:fd:29:3b:a7:5b:aa:25:4c:54:4d:67:c4:52:
a8:60:41:18:92:3b:be:d5:6d:d0:4a:a8:cc:7f:e1:
f0:d4:a6:fd:c9:b3:f6:66:87:0d:8a:81:a9:f1:51:
1a:04:49:7d:00:5e:96:63:95:1d:15:22:4e:6e:29:
74:1b:14:26:29:02:8a:ff:6c:2c:19:be:48:54:0a:
4f:29:de:e1:d1:7f:8c:3c:74:77:73:6c:c6:a8:59:
db:17:4d:24:12:bf:3f:35:fe:a1:a8:13:15:6d:63:
39:44:14:86:d5:63:e3:41:f9:fd:ef:4f:3e:ee:bf:
8e:6d:99:f5:e0:ed:e3:91:51:72:2f:8e:4e:79:aa:
92:95:e8:31:2f:cc:e6:cf:e4:b7:79:d6:16:71:72:
9c:52:69:6d:c9:ad:6b:f6:1c:89:e7:46:59:f9:e3:
bb:f7:11:04:b0:82:fa:b3:8a:7f:7c:6a:44:7d:11:
d3:f4:9d:46:4e:2e:49:23:21:9d:08:bd:5d:5a:bf:
69:b2:b3:d6:7c:4d:06:7a:e6:4c:0a:3a:fe:7d:38:
6b:3b:c6:41:77:0d:dd:0b:48:05:19:3a:ea:21:a1:
d4:24:bc:d9:fb:c2:ef:ad:31:ca:2a:57:78:f4:b0:
b8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AC:BD:B8:F0:07:4F:08:4F:90:92:B0:60:0F:D4:28:3F:F0:5D:8C
X509v3 Authority Key Identifier:
keyid:9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f4:a4:12:cb:b5:0f:f4:7f:01:c0:4e:c4:d1:9e:92:ab:c3:
f2:b6:52:f7:57:88:4c:c2:79:81:cb:51:26:a7:d7:45:45:04:
9e:08:db:a2:c9:fe:d9:e6:d9:36:f3:78:c2:d6:e5:90:8d:f8:
16:d2:8d:ff:0b:58:71:53:38:71:88:a2:37:96:4b:f9:66:11:
f0:16:3d:b2:d0:5c:c2:87:70:af:c3:c5:9c:1a:a6:65:b9:65:
c7:2d:45:1b:50:71:d0:9d:75:94:07:47:61:8a:c3:fb:64:25:
ee:ff:5b:71:f3:8c:6c:4b:75:0f:a4:29:39:3f:d5:94:1b:e1:
74:3e:0f:8d:e6:23:da:e1:7e:f3:dc:a0:1e:0c:db:77:5e:bb:
07:38:60:d4:eb:1d:9c:06:95:f3:fa:2b:65:1c:b4:cc:43:be:
00:9b:75:34:b1:1a:75:7f:c6:fe:ba:97:e0:e4:78:e4:b7:98:
d5:40:58:bc:71:02:00:c9:70:85:e4:7e:71:13:a1:71:34:ff:
65:7d:2d:3b:6c:40:ba:59:4b:69:1a:f7:b8:c5:b8:bc:c0:1b:
56:4f:3c:f4:41:a9:fc:36:4e:b7:66:82:26:77:5d:95:55:09:
79:05:11:02:ec:2d:c2:78:8c:61:6c:9c:06:99:67:9a:07:04:
5e:d9:c7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:22:33 2026 by rpki-client