Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
File: NPdSlbuVtVRThE8y1uOVCdO-zkU.mft (raw, json)
Hash identifier: 6Nx1ZBzIyR3nlqw6/laNoYk7b1cskvN18XDY0ux55ag=
Subject key identifier: 5D:04:83:98:88:E1:0E:5D:98:69:7D:80:7D:EE:FE:C5:EE:7C:EE:4F
Authority key identifier: 34:F7:52:95:BB:95:B5:54:53:84:4F:32:D6:E3:95:09:D3:BE:CE:45
Certificate issuer: /CN=34f75295bb95b55453844f32d6e39509d3bece45
Certificate serial: 019D27045B47A780CE78E991FC37CFC13C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
Manifest number: 02FA
Signing time: Wed 25 Mar 2026 22:01:30 +0000
Manifest this update: Wed 25 Mar 2026 22:01:30 +0000
Manifest next update: Thu 26 Mar 2026 22:01:30 +0000
Files and hashes: 1: NPdSlbuVtVRThE8y1uOVCdO-zkU.crl (hash: PR/8+7hrBx7EQdVV8ackF78zAZj6K9LEhjOq50VFNIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:5b:47:a7:80:ce:78:e9:91:fc:37:cf:c1:3c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f75295bb95b55453844f32d6e39509d3bece45
Validity
Not Before: Mar 25 22:01:30 2026 GMT
Not After : Mar 26 22:01:30 2026 GMT
Subject: CN=5d04839888e10e5d98697d807deefec5ee7cee4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:db:f0:30:a7:ab:c8:11:8d:f7:a4:f5:1f:06:
06:dd:7a:c1:fe:e4:71:39:ca:59:80:1a:bc:8c:40:
10:95:9a:66:28:09:56:57:03:12:c2:02:c8:cd:b3:
ca:86:83:6e:ed:24:de:62:d6:41:76:b1:b0:78:b3:
f9:76:06:7f:67:48:39:0b:04:cc:97:61:05:3d:9b:
fc:40:7d:07:c2:f5:cb:5d:88:a5:64:da:a1:b2:a0:
ea:08:b1:ec:73:a6:ae:d9:8e:5d:38:e6:9d:46:04:
75:4c:b2:9a:28:2a:9f:28:52:dd:5d:02:7a:6d:23:
4d:4f:3b:6a:02:39:b8:85:ed:d7:0d:d3:45:bc:32:
ea:f7:43:22:76:f0:48:9c:72:35:32:81:2d:dc:c2:
b3:94:7e:2f:10:13:54:51:1c:02:3e:9b:05:17:94:
c9:0c:b9:2a:6c:a3:27:19:03:b4:73:57:16:f9:98:
88:10:c7:07:84:87:49:99:3a:e8:20:63:4d:12:eb:
30:6c:38:80:ee:51:90:1a:9a:88:8f:22:ac:41:e4:
22:42:3d:a4:9c:2a:39:47:7a:48:fd:45:91:e9:77:
39:bf:59:d6:3c:c6:1c:ec:8c:a9:4a:a4:aa:16:da:
68:12:f6:62:dc:69:ce:c5:fc:ad:f1:15:3f:a4:53:
36:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:04:83:98:88:E1:0E:5D:98:69:7D:80:7D:EE:FE:C5:EE:7C:EE:4F
X509v3 Authority Key Identifier:
keyid:34:F7:52:95:BB:95:B5:54:53:84:4F:32:D6:E3:95:09:D3:BE:CE:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:61:53:15:f8:b8:ac:ca:7d:9f:a4:a4:87:af:5a:dc:c8:00:
a9:be:e3:a5:cd:db:b1:eb:d3:71:12:94:29:ac:2a:16:85:15:
fb:64:d1:43:93:1f:73:6f:85:e8:b3:6c:e0:fd:69:d7:53:ae:
cf:2d:2c:75:dd:6e:40:82:e1:96:19:4e:5e:4d:7b:9e:df:c5:
97:73:a9:7a:10:57:6e:f5:dc:3f:6c:8c:82:b2:85:2b:74:e8:
06:9a:60:67:2b:02:f3:43:34:1a:3b:e1:7a:f5:0f:42:66:04:
fe:23:89:a1:98:3e:10:41:5c:7c:80:5c:71:4b:08:d0:7f:20:
52:c6:cc:fe:80:e2:34:c4:99:6f:54:61:89:7f:a2:54:bc:0f:
1b:5e:9d:20:a9:38:7e:13:7b:a4:ed:9e:5c:55:46:38:e8:5d:
82:35:81:f1:c1:4f:00:15:46:f5:d9:8a:d9:f0:dd:03:62:2f:
95:0a:18:2d:8b:52:1b:f3:68:56:0c:bb:72:bb:0c:3f:c1:32:
d5:b2:6e:2a:5c:02:a0:27:f6:33:b2:6a:44:74:e5:76:10:db:
3b:f2:30:8c:3d:18:c1:5a:2e:e8:ff:1f:50:38:ca:09:fa:6f:
9a:df:85:75:bb:a5:4c:a1:d8:0c:7c:b9:95:23:4b:8e:c6:a5:
14:61:98:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:01 2026 by rpki-client