Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft
File: NpHSlQFF3OrADAyk61NtkoZ7ONM.mft (raw, json)
Hash identifier: D1u9KfLSocUI7EsYGzZS0bi7Xziv5djoDYU5h6yfmqw=
Subject key identifier: E2:06:4F:1D:2B:33:CB:51:17:1F:18:8D:CC:0C:1D:E2:F5:67:2B:37
Authority key identifier: 36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3
Certificate issuer: /CN=3691d2950145dceac00c0ca4eb536d92867b38d3
Certificate serial: 019D2627EC25CAF15DADA786E9C7BE40A0B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft
Manifest number: 0EDC
Signing time: Wed 25 Mar 2026 18:00:43 +0000
Manifest this update: Wed 25 Mar 2026 18:00:43 +0000
Manifest next update: Thu 26 Mar 2026 18:00:43 +0000
Files and hashes: 1: 2PyuqrcS4OQKpzci0LGo9D6zLpQ.roa (hash: OGKUjswmzZjw4KdgNAE5t9KQez9FN3RvuvNNE8jf0ts=)
2: 2UOn5hLyRStz2AaXDff3yHdPj5Y.roa (hash: 5kRNvsBj9U69NfOc0jPJOLMDekNIrXIH85Fd7k/Y9GQ=)
3: Fo1ny7DTXP76w1PX26szVPdpKCo.roa (hash: V6HN3sYUhwyOEcWr4ACY8KukJRinqBdcwgZewm2AbG0=)
4: NpHSlQFF3OrADAyk61NtkoZ7ONM.crl (hash: tN9lIC0G8bZmkrq7CqUhlT50U4Lwc4eGiDYV3Lcqy88=)
5: oIAg7vuPHz6qJLpl6E1E3dWF3DA.roa (hash: u9VNSoGm7PJq+IpHQf2CQng/QjyehdC5G+RpHXRFXCY=)
6: tEjZ-uzo44NLPAS076hKMuReNzU.asa (hash: 48Hb8aEmbuJS71uhwJUr/NwsMXvw9LlHCMvZffWtx1o=)
7: zQGExbN8DTCCuFmXtuWo8eVTwQg.roa (hash: 1ZA8dUZPVA6w/KLwhKYVFXj1NZnomrC7+BPeOgJZCsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:ec:25:ca:f1:5d:ad:a7:86:e9:c7:be:40:a0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3691d2950145dceac00c0ca4eb536d92867b38d3
Validity
Not Before: Mar 25 18:00:43 2026 GMT
Not After : Mar 26 18:00:43 2026 GMT
Subject: CN=e2064f1d2b33cb51171f188dcc0c1de2f5672b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f3:b8:9d:aa:52:04:db:67:ce:47:6c:89:15:
5f:2c:21:00:c9:37:f4:13:14:06:36:bb:6c:f8:72:
a6:8e:5b:0e:90:6e:78:0d:7c:5c:c2:84:4b:66:cf:
1a:c9:3e:4b:f6:34:d3:5d:2c:97:bd:08:9a:c8:eb:
00:be:a8:56:4f:3a:0f:32:22:23:dc:7b:66:87:08:
5a:ca:c7:bf:b7:ce:a1:78:cd:11:e7:d8:48:1d:23:
8f:cb:90:90:7a:0f:c6:62:76:ac:85:45:93:8d:9c:
38:fb:b8:b5:8c:a8:ac:18:22:aa:23:20:bf:49:c3:
37:e8:c0:e1:09:11:4e:7c:e9:df:ab:e1:40:74:a5:
88:60:96:32:94:a7:41:28:25:30:2f:35:3a:8d:f9:
9c:1e:e8:01:e7:9f:aa:81:c5:0a:b4:3c:f9:12:c5:
ea:28:c1:eb:4e:bb:1b:72:1f:73:61:f4:28:89:20:
01:e5:bc:7f:ef:44:54:11:18:d5:1f:f9:67:b0:98:
1d:1e:86:af:8e:90:a7:60:74:f4:d8:45:59:bc:32:
15:0d:40:2c:30:86:b0:59:0c:83:ae:8c:69:df:b8:
be:08:fb:2f:ae:25:87:ec:a4:ee:f1:65:f6:9c:90:
89:7d:4c:c3:c2:f9:83:83:4e:2c:09:fc:a9:dc:63:
04:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:06:4F:1D:2B:33:CB:51:17:1F:18:8D:CC:0C:1D:E2:F5:67:2B:37
X509v3 Authority Key Identifier:
keyid:36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ff:3e:22:71:e9:24:38:92:e5:91:b6:36:b7:1e:86:1e:10:
46:93:11:6d:2e:e3:b3:7d:13:08:1f:60:9e:a8:90:01:8d:80:
8d:a7:ca:a6:9d:5c:51:4e:1a:fb:c8:7e:49:73:bd:41:9e:64:
13:d1:92:eb:ec:b7:a8:c7:0e:66:43:fe:97:e0:68:fe:53:2a:
f6:24:7f:0d:9e:83:ac:90:8c:3e:35:a2:dd:00:52:84:de:46:
40:a5:4b:8e:57:3f:75:b7:b5:f8:ab:ad:7f:9a:c2:9f:94:d8:
69:94:df:be:ee:16:3c:aa:8f:51:06:89:05:01:1a:de:15:c7:
84:98:36:b9:94:1c:b1:d0:76:ca:f9:1d:7c:39:eb:84:3d:7b:
b3:90:93:68:57:39:29:f6:d7:64:77:6f:b7:e8:d0:c4:c5:02:
c1:fe:04:7b:6f:5e:4a:44:7e:95:4e:71:34:6b:0c:8c:e6:9d:
37:37:c3:93:82:58:82:f0:ce:fe:88:7c:e5:d6:f6:cb:73:b0:
79:b7:3b:f2:8f:d6:60:30:7b:da:8d:64:15:e0:4a:29:81:4e:
da:56:6b:9e:a7:04:80:65:97:ad:e0:8e:8a:3a:14:af:b0:ea:
2a:56:e3:c1:67:d6:bf:8b:bb:72:bb:a0:79:48:06:61:31:5f:
20:bb:e7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:22:18 2026 by rpki-client