
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
File: NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft (raw, json)
Hash identifier: sjb86A5Mgs5T5PFTJ2i4jdiPZHZbPHWNF/+DAOBF/uc=
Subject key identifier: C2:2B:99:B2:2D:A6:55:75:F5:0B:BF:52:3A:30:11:FE:1E:D7:2C:20
Authority key identifier: 34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
Certificate issuer: /CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Certificate serial: 0199FB7CBEED7FA92ACF9AA6D504D7155E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 08:01:20 +0000
Manifest this update: Sun 19 Oct 2025 08:01:20 +0000
Manifest next update: Mon 20 Oct 2025 08:01:20 +0000
Files and hashes: 1: NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl (hash: UDYWg5f0DzMKCZDEb6kza3x8fLgjQATr0EFpstPY3Vk=)
2: n9slDOW816oCeV0oI8sGph9zEHY.roa (hash: qD/TRD91aBYWewYzdvChC8Edlu2GICT4uFezEduAc7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:be:ed:7f:a9:2a:cf:9a:a6:d5:04:d7:15:5e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Validity
Not Before: Oct 19 08:01:20 2025 GMT
Not After : Oct 20 08:01:20 2025 GMT
Subject: CN=c22b99b22da65575f50bbf523a3011fe1ed72c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:15:be:db:ae:e1:20:bd:6c:db:58:21:61:fd:
80:ce:47:87:ac:ed:45:12:ef:c0:a1:0c:46:b5:f8:
66:6e:d0:b8:fa:5c:41:16:cb:64:b3:9e:79:09:fa:
25:b7:a2:43:ab:c0:b0:27:aa:04:60:ac:9e:50:40:
2a:77:e3:94:38:b0:ab:61:91:2c:93:15:d6:6f:16:
25:68:d3:86:60:af:7d:3a:51:6b:aa:1d:e0:45:34:
70:eb:e1:db:60:da:28:42:d3:b7:a4:ff:fa:de:fe:
53:1c:70:62:93:2c:c2:06:06:0f:1a:c2:7a:4b:e9:
11:68:40:a0:a9:1c:aa:85:05:9e:04:4d:80:b9:e6:
48:d8:00:c7:f9:66:fe:26:d1:24:1a:10:fa:44:0e:
6b:a3:bb:d0:db:e9:a1:72:43:fc:00:70:74:38:44:
0d:d7:9c:20:a5:13:e5:5d:09:b8:59:6a:71:dc:c8:
86:c1:68:ab:9e:cf:39:d5:dc:5c:75:65:87:51:ea:
ce:fe:6e:0c:fa:76:2d:eb:6d:63:3e:1f:50:00:a7:
cb:93:9c:03:83:aa:79:18:9c:13:b4:39:2f:59:6e:
e1:f7:03:da:ef:fc:a2:44:85:e8:6c:14:ba:ef:00:
04:46:8b:16:d2:d7:3e:1a:fc:4d:5c:18:b8:bb:8e:
c2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2B:99:B2:2D:A6:55:75:F5:0B:BF:52:3A:30:11:FE:1E:D7:2C:20
X509v3 Authority Key Identifier:
keyid:34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:11:36:85:03:0b:4e:2f:3f:8f:20:f8:46:cc:0b:f6:2a:1f:
fd:41:b8:40:41:af:33:d7:b2:d4:b9:01:0a:5c:f9:84:03:67:
d2:ab:c8:b4:d4:b3:1c:f8:53:11:45:bd:e8:83:86:18:56:e3:
00:6f:90:35:4f:9f:0c:ae:7f:3f:0c:9b:ce:95:70:c6:af:2f:
5a:06:95:38:9e:76:56:53:73:16:a2:c9:36:ec:17:e4:36:3f:
b7:c7:68:54:48:a7:41:78:3a:a8:2b:26:be:e6:56:82:cf:c2:
a6:7f:ae:50:54:84:9a:81:e1:48:b5:8f:dc:91:89:d9:5c:ee:
eb:d9:dc:ae:c8:c2:7a:5e:7f:17:b2:dc:33:23:4f:04:09:b6:
c1:64:32:8f:56:aa:e0:4f:89:d2:a8:ee:76:08:04:9e:2e:93:
58:79:1d:83:38:19:c3:85:20:f9:0b:fb:05:33:27:2c:ad:d0:
aa:fc:bb:2c:a4:f9:81:c4:de:c7:0f:a3:90:20:03:fa:a3:93:
d5:dd:88:1b:eb:3d:eb:4e:ef:b3:ed:a3:1a:38:38:4f:94:2a:
d8:10:a4:46:01:a4:20:6f:56:2e:a5:3c:6b:e7:b0:61:a4:8d:
ce:ec:dc:27:5a:39:7b:67:3c:c0:c2:78:3f:9f:0f:d0:19:f0:
10:e6:c4:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fL7tf6kqz5qm1QTXFV5KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZjQ4MWE5ZGRjZmI0ODU5MWY3ODkzOGM0ZmNjN2I4YjY3
YzYzMDIwHhcNMjUxMDE5MDgwMTIwWhcNMjUxMDIwMDgwMTIwWjAzMTEwLwYDVQQD
EyhjMjJiOTliMjJkYTY1NTc1ZjUwYmJmNTIzYTMwMTFmZTFlZDcyYzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxW+267hIL1s21ghYf2AzkeHrO1F
Eu/AoQxGtfhmbtC4+lxBFstks555Cfolt6JDq8CwJ6oEYKyeUEAqd+OUOLCrYZEs
kxXWbxYlaNOGYK99OlFrqh3gRTRw6+HbYNooQtO3pP/63v5THHBikyzCBgYPGsJ6
S+kRaECgqRyqhQWeBE2AueZI2ADH+Wb+JtEkGhD6RA5ro7vQ2+mhckP8AHB0OEQN
15wgpRPlXQm4WWpx3MiGwWirns851dxcdWWHUerO/m4M+nYt621jPh9QAKfLk5wD
g6p5GJwTtDkvWW7h9wPa7/yiRIXobBS67wAERosW0tc+GvxNXBi4u47CPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIrmbItplV19Qu/UjowEf4e1ywgMB8GA1UdIwQY
MBaAFDT0gandz7SFkfeJOMT8x7i2fGMCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlBTQnFkM1B0SVdSOTRrNHhQekh1TFo4WXdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zYWQ5YzEtM2UwOS00MWFjLWFjY2Et
ZDExMzM5ZmU3ZGYwLzEvTlBTQnFkM1B0SVdSOTRrNHhQekh1TFo4WXdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8zYWQ5YzEtM2UwOS00MWFjLWFjY2EtZDExMzM5ZmU3ZGYw
LzEvTlBTQnFkM1B0SVdSOTRrNHhQekh1TFo4WXdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPRE2hQML
Ti8/jyD4RswL9iof/UG4QEGvM9ey1LkBClz5hANn0qvItNSzHPhTEUW96IOGGFbj
AG+QNU+fDK5/PwybzpVwxq8vWgaVOJ52VlNzFqLJNuwX5DY/t8doVEinQXg6qCsm
vuZWgs/Cpn+uUFSEmoHhSLWP3JGJ2Vzu69ncrsjCel5/F7LcMyNPBAm2wWQyj1aq
4E+J0qjudggEni6TWHkdgzgZw4Ug+Qv7BTMnLK3Qqvy7LKT5gcTexw+jkCAD+qOT
1d2IG+s9607vs+2jGjg4T5Qq2BCkRgGkIG9WLqU8a+ewYaSNzuzcJ1o5e2c8wMJ4
P58P0BnwEObEig==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:49 2025 by rpki-client