Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
File: NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft (raw, json)
Hash identifier: 3n7pY1kgVo/9VnWzfMh9IUPovmicuuvVf+8NQ35NiS4=
Subject key identifier: 86:AC:B1:41:A6:7D:CF:CA:6C:68:F6:96:59:69:5A:22:50:4B:5D:2F
Authority key identifier: 34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
Certificate issuer: /CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Certificate serial: 01A0EE1D0A271F67B0720860C3CC60264EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
Manifest number: 1A7C
Signing time: Tue 29 Sep 2026 17:01:15 +0000
Manifest this update: Tue 29 Sep 2026 17:01:15 +0000
Manifest next update: Wed 30 Sep 2026 17:01:15 +0000
Files and hashes: 1: NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl (hash: CAzHQnhK2bbtnKgRgIBE2bNnCimTDEg5kkjyM48IamM=)
2: u9-8FtTHX-Iha_x3C5q4_edNJaM.roa (hash: BJecwIh123OLgBTMSQtQt7fraFVyOfqi7zQMkz1z9tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:1d:0a:27:1f:67:b0:72:08:60:c3:cc:60:26:4e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Validity
Not Before: Sep 29 17:01:15 2026 GMT
Not After : Sep 30 17:01:15 2026 GMT
Subject: CN=86acb141a67dcfca6c68f69659695a22504b5d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f4:24:25:8f:16:5d:e0:e7:54:99:6e:11:7b:
f8:f6:c8:1d:95:99:75:17:1c:57:d0:55:d6:cc:cd:
8e:b7:fe:fb:fe:34:e6:8c:e5:2b:dc:dc:a1:9d:b3:
e2:a1:65:50:20:4a:c8:da:8a:43:c0:c0:66:e3:e9:
18:f1:43:a5:28:d8:00:6c:29:a5:c2:70:2e:b8:a9:
d0:88:fc:1b:16:db:67:17:bb:41:8e:41:66:a4:c8:
34:ac:a5:93:78:08:32:13:34:0f:44:88:35:a6:12:
0c:19:b4:0e:f3:47:bd:dc:af:ba:1d:6c:ea:01:5a:
0e:db:0a:b7:34:bf:1a:55:8b:15:d6:bc:10:6a:fe:
b4:0b:27:d3:c5:5b:1e:19:81:31:ae:f4:77:91:61:
46:16:bc:dc:f7:be:55:56:ff:92:37:e9:9b:84:14:
0b:21:2d:f6:8f:9a:b6:8e:2f:de:8a:fe:b6:8c:16:
be:d0:6d:62:80:0b:db:d9:73:3d:ac:37:f4:37:da:
b7:c4:f4:d4:0b:fb:26:3e:51:09:fb:e5:54:71:7b:
7b:20:42:c6:a3:81:f4:c8:86:72:6d:b3:59:50:46:
fa:62:e7:b1:1d:c4:06:62:b5:80:fa:12:90:86:ec:
eb:7b:b4:03:22:d2:21:50:40:c4:a0:b3:a4:3d:83:
c7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AC:B1:41:A6:7D:CF:CA:6C:68:F6:96:59:69:5A:22:50:4B:5D:2F
X509v3 Authority Key Identifier:
keyid:34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c5:c5:04:3a:35:16:bb:b3:9c:1c:bc:46:3a:db:2d:f9:f7:
43:fb:bc:0d:14:fc:ee:a8:66:2b:22:e2:94:81:af:8a:b4:59:
20:65:49:ef:46:7f:95:2a:73:f7:d1:50:9c:75:67:13:f7:ea:
5f:13:53:7b:36:cc:45:9b:d4:be:64:b9:f4:86:95:da:75:26:
eb:26:67:ae:94:61:95:a4:b1:29:ba:c7:20:c1:21:e4:fb:7b:
d3:65:f7:b6:10:03:80:ba:3a:35:30:e7:3a:d5:6b:d7:8d:bd:
98:95:d6:29:76:de:77:2d:50:df:d7:bb:a7:2b:4b:43:51:a2:
30:e7:f9:bd:86:34:42:58:52:d1:07:ac:e5:62:7c:e7:77:22:
b2:5d:19:ee:18:fa:58:3b:0c:36:e2:fb:5b:90:b0:c9:55:f2:
2b:ac:fc:b5:75:01:2b:19:04:e3:95:b3:e1:c7:e7:24:b7:83:
9a:53:43:d0:05:54:1a:f4:c0:51:03:dc:57:de:c2:9f:88:64:
b1:ed:60:8f:08:c4:9d:0f:3d:e0:39:a6:50:4d:e6:76:45:3c:
c7:58:06:98:71:12:08:2f:24:8a:19:4b:a0:27:03:c8:5d:21:
56:7c:84:4e:8d:af:b2:28:1b:5c:b3:1d:90:78:f8:19:3a:a2:
70:24:14:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 01:26:04 2026 by rpki-client