Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft
File: NpHSlQFF3OrADAyk61NtkoZ7ONM.mft (raw, json)
Hash identifier: BCaH60miUZlB6to4Yyk0cjOe+i/IkNVIDJWFhfTTkjU=
Subject key identifier: EC:A3:CA:7B:45:4C:3A:DE:64:46:BD:68:50:DB:7A:39:90:26:84:5A
Authority key identifier: 36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3
Certificate issuer: /CN=3691d2950145dceac00c0ca4eb536d92867b38d3
Certificate serial: 01A0DA5FD032775FD30E442A2A2F0F7153CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft
Manifest number: 10C9
Signing time: Fri 25 Sep 2026 21:01:47 +0000
Manifest this update: Fri 25 Sep 2026 21:01:47 +0000
Manifest next update: Sat 26 Sep 2026 21:01:47 +0000
Files and hashes: 1: 2PyuqrcS4OQKpzci0LGo9D6zLpQ.roa (hash: OGKUjswmzZjw4KdgNAE5t9KQez9FN3RvuvNNE8jf0ts=)
2: 2UOn5hLyRStz2AaXDff3yHdPj5Y.roa (hash: 5kRNvsBj9U69NfOc0jPJOLMDekNIrXIH85Fd7k/Y9GQ=)
3: A4q_5E9jFy5Ar2Wg8v_2745bS6c.roa (hash: IHENNPcSzn1yvUUV7LXB3IN3vMVZdPk+iq6MU9Z6PDg=)
4: A5joThCp_ods84BUeatCS9R7x7M.roa (hash: d0PvJQ6McgWcnLnjBFFvDUhNjMI/+cW8CIB7AngUPR8=)
5: Fo1ny7DTXP76w1PX26szVPdpKCo.roa (hash: V6HN3sYUhwyOEcWr4ACY8KukJRinqBdcwgZewm2AbG0=)
6: NpHSlQFF3OrADAyk61NtkoZ7ONM.crl (hash: vy6Rq4KGv747rRsJLt3iXsR9k0yeoLo53jf5tee5Z4E=)
7: Rr6U5hMFIJUMJALKvJAfpxGd9w4.asa (hash: OT/sjXvBHxLLw/3pukR0Kd/JABUR4lO1BFz9o2P4dzQ=)
8: zQGExbN8DTCCuFmXtuWo8eVTwQg.roa (hash: 1ZA8dUZPVA6w/KLwhKYVFXj1NZnomrC7+BPeOgJZCsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:d0:32:77:5f:d3:0e:44:2a:2a:2f:0f:71:53:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3691d2950145dceac00c0ca4eb536d92867b38d3
Validity
Not Before: Sep 25 21:01:47 2026 GMT
Not After : Sep 26 21:01:47 2026 GMT
Subject: CN=eca3ca7b454c3ade6446bd6850db7a399026845a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:20:12:c4:57:76:99:12:0b:89:05:da:ac:6c:
27:58:96:58:4b:0a:28:3f:27:ae:a0:98:be:68:2e:
5b:4b:5f:78:e2:41:7d:54:54:3f:ae:72:70:e2:db:
a9:c3:ee:29:c9:43:25:95:aa:7c:67:f6:3c:07:50:
2d:5b:91:ff:9f:cc:d7:27:da:92:23:55:e3:0c:3e:
b4:44:62:5e:14:fb:94:00:d5:da:bf:ad:04:2a:79:
9e:85:e4:9f:c3:58:b2:ea:0b:f4:c1:fd:05:66:d0:
45:ce:f7:2a:0f:6f:42:74:f3:2f:96:ef:3c:52:8f:
4f:23:ed:52:f6:3d:26:61:85:1d:3f:41:7c:a4:93:
86:97:40:79:44:b9:ea:1c:22:c7:85:dc:32:74:ad:
51:3f:0d:c8:0c:8e:42:eb:fd:85:06:15:be:d1:75:
c3:66:36:49:09:80:31:f0:44:0d:e7:34:5b:7a:a9:
85:ea:f5:f2:aa:df:da:1b:3b:80:eb:19:95:3d:27:
7d:2a:11:f9:dc:e8:02:29:2d:b6:3d:da:e3:58:c1:
26:9b:06:c7:b6:f6:65:8e:57:3e:70:79:75:a9:91:
e3:4f:cb:be:29:bc:0a:9f:0b:ea:21:9b:a5:19:57:
2b:37:4e:42:aa:c8:99:d5:78:fb:1b:eb:1b:e6:39:
49:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A3:CA:7B:45:4C:3A:DE:64:46:BD:68:50:DB:7A:39:90:26:84:5A
X509v3 Authority Key Identifier:
keyid:36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c6:35:85:e2:33:ba:55:c8:a1:29:ae:c1:6b:33:d4:1d:8b:
f3:43:a0:70:8c:61:97:06:3a:df:3e:6f:c8:70:a6:0c:0e:89:
02:56:1f:58:c3:90:fc:dc:f7:5f:9e:fb:b6:a7:0e:51:92:52:
7e:52:6c:23:28:57:76:3a:b4:db:04:6b:4d:2e:89:21:9d:a0:
24:ff:36:56:a9:f5:42:9f:cd:4f:be:49:e8:6f:ff:d3:ce:3b:
b8:39:a8:69:3e:7a:b0:02:6d:c2:22:f7:bc:54:1b:cf:b6:51:
32:8a:e6:b0:59:b9:0d:4e:fa:40:72:b4:15:e1:a3:2e:b2:b0:
68:56:09:cc:a3:f9:44:ab:09:7a:77:f3:12:c0:f7:d9:16:9d:
4b:5d:08:60:3e:38:1c:ec:18:a6:53:05:7e:b0:e7:9b:e1:6c:
50:7d:0f:9a:78:c7:24:4b:0c:5b:0a:43:f5:48:e7:5e:3b:e4:
03:9c:3b:93:7f:ae:c1:9d:60:3c:5f:da:16:db:00:33:19:0f:
ad:28:d9:76:4f:c6:04:b3:9e:84:4a:df:72:56:be:50:0a:e6:
01:8d:d9:25:f6:8e:cd:b1:e1:ec:a4:be:03:a4:f1:d2:7f:1a:
d3:31:46:83:e9:19:28:63:ea:f1:1b:97:4c:89:89:65:ee:63:
4c:be:e6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:40:43 2026 by rpki-client