Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
File: np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft (raw, json)
Hash identifier: N84V3zUiczKnyANArSrwV1yH/+M20A29PkMeslxPci8=
Subject key identifier: 8A:A2:0B:E9:49:4B:63:F2:6A:38:30:6A:F7:8E:05:8F:46:24:2A:D1
Authority key identifier: 9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
Certificate issuer: /CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Certificate serial: 019D2583357E79DC49CF38409E5F412C0A6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
Manifest number: 143C
Signing time: Wed 25 Mar 2026 15:00:48 +0000
Manifest this update: Wed 25 Mar 2026 15:00:48 +0000
Manifest next update: Thu 26 Mar 2026 15:00:48 +0000
Files and hashes: 1: 7rKcQQXxl0Wqi99lSzLSIA_PGiE.roa (hash: 6yLayhUVccwVTayfXedjC+AWPa6ZfJFk+hN+rmaMZyA=)
2: np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl (hash: LoK5LdOA/yCYQSlx+RCFaM5QLH1Tow7J9jvQitAkMMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:35:7e:79:dc:49:cf:38:40:9e:5f:41:2c:0a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Validity
Not Before: Mar 25 15:00:48 2026 GMT
Not After : Mar 26 15:00:48 2026 GMT
Subject: CN=8aa20be9494b63f26a38306af78e058f46242ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:64:d2:00:35:9b:a5:d4:26:4e:08:ec:38:24:
32:5d:56:38:e1:92:8e:ea:53:b8:e1:b9:0b:d5:91:
9e:84:77:36:e5:b5:d0:5e:6c:25:19:af:17:80:ea:
84:ed:ca:aa:8d:d7:85:95:e2:ad:f8:de:64:32:32:
cc:a9:ce:15:36:cd:0a:9d:fa:b5:e1:f7:85:e3:72:
d8:02:dc:85:dc:36:68:26:66:43:86:48:e9:d4:c3:
49:33:56:4a:8e:cf:c1:d8:ab:1c:4c:1b:ab:82:58:
5b:c7:c7:f4:82:07:02:69:70:16:69:69:e1:c3:43:
37:aa:37:84:dc:8e:aa:e0:62:7a:0c:eb:e8:ea:84:
10:0f:7c:02:ee:09:64:11:48:ea:c8:97:f8:ba:4a:
90:4f:6c:f9:56:64:1c:c5:dd:6b:95:b9:78:fc:2d:
d7:43:6b:4f:b2:61:52:0e:c2:3b:d0:b1:04:a0:da:
1c:7e:b0:40:0c:d8:3e:e8:b5:8c:91:c0:be:3f:58:
90:82:66:1e:96:f0:99:53:1c:45:70:80:92:77:83:
4a:63:dc:46:9b:36:5f:89:fa:d7:0d:05:a5:d5:54:
9c:af:26:41:c3:72:47:c0:1e:b6:de:53:c5:a6:90:
4b:83:16:e9:4b:e6:59:d6:33:8c:fe:c6:d8:ed:11:
95:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A2:0B:E9:49:4B:63:F2:6A:38:30:6A:F7:8E:05:8F:46:24:2A:D1
X509v3 Authority Key Identifier:
keyid:9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:55:1d:29:b0:75:78:ff:11:42:91:75:02:07:6d:c4:32:64:
b9:63:9f:a0:f6:2a:10:b5:54:ca:26:f7:3c:1c:31:b7:d0:09:
4d:97:de:62:ed:59:32:97:73:c2:2c:0f:27:c3:ba:00:54:8a:
f7:b0:f7:f3:9a:e1:49:73:aa:56:a3:3a:8b:ba:c1:f9:ea:1c:
c4:d9:cf:10:6d:f7:de:82:db:6d:a8:97:a4:d6:39:57:f8:9b:
00:4e:1a:61:eb:22:75:f2:98:57:56:41:5a:38:06:61:bd:f4:
3d:ae:34:93:ea:c8:b6:11:bd:87:4b:76:60:47:e2:3b:87:d9:
d8:b5:9b:e0:46:12:6f:23:32:ab:ab:56:4c:40:ca:b6:54:4f:
d7:84:a0:f8:d1:4d:9b:8f:ec:a4:8c:8f:61:7d:95:2d:45:db:
75:ff:96:b4:d1:6d:d4:80:54:59:6f:8c:56:79:c9:96:03:4e:
e0:c1:b6:80:36:75:f0:ff:bd:30:57:72:75:53:9c:12:76:3d:
ea:2d:43:94:c5:b3:cd:dc:78:1c:94:35:27:e1:bf:66:92:2c:
1a:d4:fa:c0:1f:4b:e1:39:45:c8:cf:b8:f0:9d:09:11:ea:9a:
9d:55:e5:5b:f4:f9:0b:7a:2f:9a:c9:f1:15:73:67:09:3d:0f:
48:b8:83:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:43:35 2026 by rpki-client