Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
File: NPdSlbuVtVRThE8y1uOVCdO-zkU.mft (raw, json)
Hash identifier: tUuzFw5SGHz743ptkBaWkvca8f5HveHzwzGynEC6kPQ=
Subject key identifier: 79:C9:6F:81:A0:83:29:F8:80:CE:A7:E8:F5:0B:7B:69:39:80:83:6D
Authority key identifier: 34:F7:52:95:BB:95:B5:54:53:84:4F:32:D6:E3:95:09:D3:BE:CE:45
Certificate issuer: /CN=34f75295bb95b55453844f32d6e39509d3bece45
Certificate serial: 01A0CDB68E9E7D9C6B29827237764069ED0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
Manifest number: 04E0
Signing time: Wed 23 Sep 2026 10:01:28 +0000
Manifest this update: Wed 23 Sep 2026 10:01:28 +0000
Manifest next update: Thu 24 Sep 2026 10:01:28 +0000
Files and hashes: 1: NPdSlbuVtVRThE8y1uOVCdO-zkU.crl (hash: TtNRtojF9UgsqvKCgDD+1g3Xix86MrR/tITxlwXjQak=)
2: U7LuUPl-UaS1Nz7kE-Ov6c0Y3U4.asa (hash: 4pjiq26J/GEImFtYQjL5TuBS9mjmJQu5GgR6+/ZZjEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b6:8e:9e:7d:9c:6b:29:82:72:37:76:40:69:ed:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f75295bb95b55453844f32d6e39509d3bece45
Validity
Not Before: Sep 23 10:01:28 2026 GMT
Not After : Sep 24 10:01:28 2026 GMT
Subject: CN=79c96f81a08329f880cea7e8f50b7b693980836d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:30:06:ae:58:2f:9a:e0:26:e6:1b:d1:d3:93:
61:19:54:36:4c:97:10:e0:53:84:95:0b:b4:e6:80:
aa:eb:75:79:0d:da:b6:a6:78:9b:9a:f2:5f:8c:bc:
54:00:c0:40:cc:74:d7:a7:c2:ef:7e:8d:72:1c:63:
9d:b1:76:32:55:ea:9c:9a:2c:ae:1f:ca:ce:bf:ab:
b7:74:bb:65:e4:72:34:fc:66:78:2d:d8:c6:48:fa:
b1:89:c2:9c:90:d1:4d:11:bd:58:9d:28:c6:48:0e:
7d:cb:a7:13:5e:43:ac:2f:03:f5:78:18:8a:44:0a:
b7:1a:94:2c:9d:65:95:9b:29:42:0e:25:32:13:24:
37:fb:76:b9:b9:34:82:06:3c:84:7f:78:05:eb:3f:
89:59:86:72:fc:11:3a:d1:76:a2:50:7f:81:37:25:
a2:02:84:d0:c0:22:3d:fc:56:be:38:78:b4:ac:96:
b0:c3:22:fa:48:00:14:db:f9:de:4f:7c:16:37:c7:
63:1a:aa:50:c1:26:a3:8d:f6:c7:b6:96:46:1d:54:
13:31:85:91:f4:56:4d:62:6c:9b:3b:4b:e0:aa:bd:
ce:4f:fa:80:75:b5:f9:17:b6:b3:16:af:d1:bb:1f:
55:a4:25:0d:4d:d9:bb:9f:41:88:72:4e:6d:39:54:
45:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C9:6F:81:A0:83:29:F8:80:CE:A7:E8:F5:0B:7B:69:39:80:83:6D
X509v3 Authority Key Identifier:
keyid:34:F7:52:95:BB:95:B5:54:53:84:4F:32:D6:E3:95:09:D3:BE:CE:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fd:f9:77:4a:8c:6d:60:e1:89:cb:cf:9c:9c:d2:2b:9d:31:
fd:be:0a:ad:0d:fd:e4:2a:f3:0e:4d:7b:c5:1d:24:a9:cf:a5:
7d:32:20:af:78:0a:ee:b9:72:6d:33:1d:1a:7e:a7:27:e5:66:
c4:07:35:df:39:ed:91:4d:5d:2f:b8:0e:f4:ea:21:ca:c7:be:
7e:39:82:cb:8b:c1:c9:d8:5a:eb:31:47:19:fd:da:a9:33:85:
b5:ca:08:9c:7b:d6:43:99:4a:d4:07:0c:e6:83:5b:c1:ec:97:
8e:8b:77:df:06:d8:55:a8:53:7a:eb:9f:82:c2:62:7a:06:c9:
a8:d5:ab:48:e6:02:7b:a2:c2:a6:33:26:54:b5:6e:44:ad:51:
28:a6:9b:a7:19:e5:d8:d2:41:cf:02:ff:c2:9a:e7:0d:1e:fc:
47:79:62:53:5f:39:a6:08:23:57:47:55:09:3d:9d:f2:9a:d7:
54:f9:81:a6:19:c9:a0:cc:f7:d3:83:bb:e1:79:2b:2e:3c:a1:
3d:80:cd:59:34:a2:5d:45:43:d3:39:b5:6c:24:ce:b8:46:61:
96:ea:fe:a7:2a:a2:9b:e2:aa:a6:8b:9b:22:0f:96:0e:ac:3a:
f6:7a:b8:85:8f:e4:ea:4d:e1:4f:d9:d3:2a:4d:ce:15:33:ec:
e7:18:ad:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNto6efZxrKYJyN3ZAae0OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0Zjc1Mjk1YmI5NWI1NTQ1Mzg0NGYzMmQ2ZTM5NTA5ZDNi
ZWNlNDUwHhcNMjYwOTIzMTAwMTI4WhcNMjYwOTI0MTAwMTI4WjAzMTEwLwYDVQQD
Eyg3OWM5NmY4MWEwODMyOWY4ODBjZWE3ZThmNTBiN2I2OTM5ODA4MzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzAGrlgvmuAm5hvR05NhGVQ2TJcQ
4FOElQu05oCq63V5Ddq2pnibmvJfjLxUAMBAzHTXp8Lvfo1yHGOdsXYyVeqcmiyu
H8rOv6u3dLtl5HI0/GZ4LdjGSPqxicKckNFNEb1YnSjGSA59y6cTXkOsLwP1eBiK
RAq3GpQsnWWVmylCDiUyEyQ3+3a5uTSCBjyEf3gF6z+JWYZy/BE60XaiUH+BNyWi
AoTQwCI9/Fa+OHi0rJawwyL6SAAU2/neT3wWN8djGqpQwSajjfbHtpZGHVQTMYWR
9FZNYmybO0vgqr3OT/qAdbX5F7azFq/Rux9VpCUNTdm7n0GIck5tOVRFTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnJb4Gggyn4gM6n6PULe2k5gINtMB8GA1UdIwQY
MBaAFDT3UpW7lbVUU4RPMtbjlQnTvs5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlBkU2xidVZ0VlJUaEU4eTF1T1ZDZE8temtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85ZGMzZTAtOGRlMC00OTRiLThmZjUt
ZDk1ZTVhNjNhNDhlLzEvTlBkU2xidVZ0VlJUaEU4eTF1T1ZDZE8temtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85ZGMzZTAtOGRlMC00OTRiLThmZjUtZDk1ZTVhNjNhNDhl
LzEvTlBkU2xidVZ0VlJUaEU4eTF1T1ZDZE8temtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhv35d0qM
bWDhicvPnJzSK50x/b4KrQ395CrzDk17xR0kqc+lfTIgr3gK7rlybTMdGn6nJ+Vm
xAc13zntkU1dL7gO9Oohyse+fjmCy4vBydha6zFHGf3aqTOFtcoInHvWQ5lK1AcM
5oNbweyXjot33wbYVahTeuufgsJiegbJqNWrSOYCe6LCpjMmVLVuRK1RKKabpxnl
2NJBzwL/wprnDR78R3liU185pggjV0dVCT2d8prXVPmBphnJoMz304O74XkrLjyh
PYDNWTSiXUVD0zm1bCTOuEZhlur+pyqim+KqpoubIg+WDqw69nq4hY/k6k3hT9nT
Kk3OFTPs5xitmw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 16:59:48 2026 by rpki-client