Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
File: NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft (raw, json)
Hash identifier: SpLCyBvgKWPr+z6QVGd2x/sDX4Q8TQw0m9mLdjXmyHg=
Subject key identifier: 5D:6A:F6:D8:12:04:11:8E:EF:F9:CE:C8:7E:73:7F:6C:11:A3:0F:90
Authority key identifier: 34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
Certificate issuer: /CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Certificate serial: 019D28841E83C764094E4F955134015FAFE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 05:00:40 +0000
Manifest this update: Thu 26 Mar 2026 05:00:40 +0000
Manifest next update: Fri 27 Mar 2026 05:00:40 +0000
Files and hashes: 1: NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl (hash: JkVN2qsnTQ1lA6GflMgDu3YrKyCon93zkqJW6Kzwg9Y=)
2: u9-8FtTHX-Iha_x3C5q4_edNJaM.roa (hash: BJecwIh123OLgBTMSQtQt7fraFVyOfqi7zQMkz1z9tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:1e:83:c7:64:09:4e:4f:95:51:34:01:5f:af:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Validity
Not Before: Mar 26 05:00:40 2026 GMT
Not After : Mar 27 05:00:40 2026 GMT
Subject: CN=5d6af6d81204118eeff9cec87e737f6c11a30f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:aa:b9:7c:f3:72:ad:7e:b2:e9:db:11:47:3f:
d7:53:0e:96:58:7f:75:29:a5:ba:d5:a2:be:ca:b0:
d1:a4:3d:a0:83:8c:c1:61:a8:a5:26:6c:9a:6d:75:
61:1b:71:9c:de:f7:09:c0:4c:b4:6a:4d:b6:e8:ce:
82:fc:6b:01:70:7e:c3:9a:f6:00:31:f6:06:d8:e6:
cf:6b:d2:2b:06:5e:67:9b:48:c8:51:21:7d:b1:f3:
5d:98:ea:79:db:ac:13:20:4f:32:ca:96:22:1b:52:
35:05:67:66:13:f8:cf:da:de:f8:0b:72:46:de:fe:
3a:db:1e:cc:10:af:2c:00:3f:d5:b4:50:40:b5:1b:
db:70:71:e3:3c:91:d0:b4:21:59:36:75:ca:bd:e1:
d8:21:7f:d3:20:a9:c5:59:c6:bb:c4:08:85:4b:07:
3d:58:f2:d1:7f:55:38:83:ca:a7:4c:c2:99:04:e0:
22:5b:e3:17:b5:c2:bb:0f:cb:7e:ba:c2:ec:5e:04:
4e:67:4b:1b:88:a9:06:01:b2:2a:07:12:cb:fb:2d:
cd:1c:a4:a6:32:54:17:4d:9e:36:e4:93:fc:2d:b0:
2e:09:e8:e7:e4:b7:a8:64:ba:74:e1:61:00:e0:e4:
42:56:e8:59:95:a5:ce:22:0d:15:b8:8a:59:e0:fa:
5a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6A:F6:D8:12:04:11:8E:EF:F9:CE:C8:7E:73:7F:6C:11:A3:0F:90
X509v3 Authority Key Identifier:
keyid:34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:38:27:c5:26:2f:01:4e:81:bb:70:5f:70:2e:8c:cf:8f:52:
2d:42:d1:ab:01:9f:2f:cc:76:bc:59:6d:6f:28:4d:13:a1:59:
b4:0a:08:dd:ac:31:38:07:50:fe:3e:ce:69:7c:87:2d:81:b1:
56:3d:c5:57:ba:db:94:e8:53:bf:7e:38:70:b0:1c:39:18:8d:
4b:1e:80:18:20:51:50:df:34:bc:da:58:b5:49:1a:2a:00:1a:
c2:8e:5f:8f:bf:74:96:36:38:ce:f8:a7:76:f7:ea:bf:a6:64:
b7:7e:2e:0e:60:b6:21:f4:08:ea:29:86:8f:4d:6d:c8:7a:cc:
f8:a2:7f:67:83:9e:1e:dc:6e:4c:39:7d:c3:1c:7a:7f:13:f9:
40:75:1b:dd:6b:fd:a7:a6:6e:12:bb:59:21:32:59:1b:0c:44:
35:28:10:5e:56:f6:13:fd:c3:2c:2f:20:2a:5c:7f:60:3c:32:
0e:45:6a:b3:6b:70:df:37:a0:7a:c3:b7:b7:c7:22:26:a4:d5:
72:5b:25:07:d6:bb:65:8d:24:5a:c1:4c:a6:d9:0f:6a:33:57:
4c:f9:2d:a3:8f:bd:38:d3:70:36:c5:bc:d1:e4:98:b7:56:61:
72:e5:5c:8d:47:3e:14:86:3c:93:45:80:97:ae:69:dc:8a:ed:
41:31:e0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:16:04 2026 by rpki-client