Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
File: NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft (raw, json)
Hash identifier: oj4KZgd6gq35Q2OArOVJKCkafnPv1Wlr9wVIw83wP84=
Subject key identifier: A5:AB:12:22:C9:31:9D:50:B3:A4:D1:C1:31:07:9F:3D:E5:32:2F:C6
Authority key identifier: 34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
Certificate issuer: /CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Certificate serial: 01A0D64BB5B674C92ED5B8A29CE97CF90ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
Manifest number: 17D9
Signing time: Fri 25 Sep 2026 02:01:20 +0000
Manifest this update: Fri 25 Sep 2026 02:01:20 +0000
Manifest next update: Sat 26 Sep 2026 02:01:20 +0000
Files and hashes: 1: 5FGHLdK72qHzzMVR761PYkr0_B8.roa (hash: UFVl1rQ+AMtmM2jj8l8YxQbgnT/lIb1Y+3O5KmViWAw=)
2: AaFb4BxfuUv5NeajfZzyZ_pKzC8.roa (hash: nTI1O9abgRlXav6e6wF4qbfd1OvGtpWjUhjV79Bt2Cg=)
3: NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl (hash: SDBZPx30ySVqis/A9GsqbJZCVeyafDmR7EHdW8Dt+1E=)
4: wTpGtpvYbgK_vun8v_p94uvYUWw.roa (hash: MlwFMoA+ixOAYhXtfytpmcxvQgdxjqKkv8yoqTSG6+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4b:b5:b6:74:c9:2e:d5:b8:a2:9c:e9:7c:f9:0e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Validity
Not Before: Sep 25 02:01:20 2026 GMT
Not After : Sep 26 02:01:20 2026 GMT
Subject: CN=a5ab1222c9319d50b3a4d1c131079f3de5322fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3c:31:e8:62:23:15:53:bf:0f:21:5e:03:75:
ac:53:ee:af:e9:a3:06:c9:66:fb:65:0a:a4:a2:37:
4a:44:0b:52:e7:6d:01:a4:b5:09:b7:4c:3e:82:7a:
bb:f3:12:6e:58:98:43:56:6b:d1:c0:08:93:3b:ef:
b0:4a:a9:07:6a:e5:99:8d:3e:28:f4:b4:11:89:7d:
5f:e8:d2:51:f7:fb:62:75:f7:fa:67:ac:78:1e:84:
93:b1:cf:ca:6a:91:bb:63:3c:ec:48:87:9c:60:c4:
43:02:ba:8f:a2:ce:26:83:e7:71:18:7e:3b:e5:dd:
90:11:c2:e0:2c:1d:c0:31:4a:8f:fd:6e:3d:aa:8f:
ac:20:eb:49:c5:dd:18:3b:dd:a5:20:cb:30:dd:cf:
2b:76:0d:c8:2b:1d:9b:0b:b1:e9:a1:3b:95:a8:9e:
69:73:da:7b:4f:a8:33:70:17:35:bd:15:4a:f9:c7:
10:67:18:8b:38:5e:b2:3d:fa:94:16:69:60:b0:2e:
b4:f5:63:bf:15:0a:13:aa:11:e1:fd:33:68:7f:1c:
93:67:85:46:c4:72:93:c6:36:4a:76:c1:01:07:6c:
4a:a6:e6:ee:19:9f:e2:02:f8:83:93:33:33:68:2d:
d9:d0:85:e1:0f:52:18:25:19:49:4f:60:ce:dc:f5:
15:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AB:12:22:C9:31:9D:50:B3:A4:D1:C1:31:07:9F:3D:E5:32:2F:C6
X509v3 Authority Key Identifier:
keyid:34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:f3:00:b3:a0:e5:e4:95:9d:1a:fe:5d:a7:0f:ea:e7:f6:0e:
03:8e:7e:f4:f2:56:68:16:9e:b0:64:0f:bd:be:40:8f:5e:30:
ea:61:d7:eb:1a:ef:c9:ae:98:e0:29:d3:1f:12:73:e1:ab:26:
48:12:d1:f0:30:e4:f1:4e:4f:82:e0:82:a6:1a:ae:c4:c4:d6:
b3:4d:48:93:50:2d:0d:da:6e:17:e6:2e:67:1c:62:99:d8:23:
e0:d9:8b:17:15:f0:e7:11:a6:2e:66:fa:42:d4:77:4a:a2:f5:
65:ec:30:51:f8:e5:43:45:43:26:f0:9c:05:04:bf:70:7c:b3:
13:e7:b0:26:4f:ff:5a:f3:02:88:bc:14:bf:24:9d:6e:f2:69:
b7:dd:38:61:3d:dd:6b:6c:48:eb:72:20:5b:41:e9:71:b6:cf:
4c:a6:b7:b8:bc:69:37:4f:a4:38:8d:fe:d8:ea:04:94:49:0c:
80:dc:d3:3b:c7:5d:32:43:c2:8f:6b:cc:97:3a:c6:4d:01:7a:
10:a6:eb:49:d4:35:cb:3c:ec:23:9a:53:4f:b5:9f:7c:14:a5:
60:dd:79:c9:74:ee:3a:73:64:f5:4e:45:5c:3c:7d:39:66:eb:
1c:c0:69:e4:9a:26:5b:43:ac:29:48:30:12:a8:81:28:55:7a:
ab:56:2c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:44:45 2026 by rpki-client