Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
File: npTVvz231nNNzxvmItX97i_sO48.mft (raw, json)
Hash identifier: SJ3AgO07lNWj0LmyHbPPDDrl1LQe/pLwU0kn8z1IhX8=
Subject key identifier: D0:5D:9A:E6:50:F0:5E:C8:98:1E:5F:EF:8E:8B:4E:65:90:8C:12:57
Authority key identifier: 9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F
Certificate issuer: /CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f
Certificate serial: 019D284E435679AF448DCB916188CE7D634D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
Manifest number: 0945
Signing time: Thu 26 Mar 2026 04:01:50 +0000
Manifest this update: Thu 26 Mar 2026 04:01:50 +0000
Manifest next update: Fri 27 Mar 2026 04:01:50 +0000
Files and hashes: 1: npTVvz231nNNzxvmItX97i_sO48.crl (hash: CcNTDw9CqgQms+9hbv2vC7SFODnwCIt7tTwtwfoClNg=)
2: zcxoOaYQZVz0kyNkbAvoL7_cGOo.roa (hash: cbQCnBDpdRHmtA6XlyYrBSpV92ISXXC3TjEjSfaVLUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:43:56:79:af:44:8d:cb:91:61:88:ce:7d:63:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f
Validity
Not Before: Mar 26 04:01:50 2026 GMT
Not After : Mar 27 04:01:50 2026 GMT
Subject: CN=d05d9ae650f05ec8981e5fef8e8b4e65908c1257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:df:00:ec:bf:45:e5:f4:55:de:74:7f:ca:ee:
79:97:b7:20:4c:91:a1:3c:7e:23:fa:fd:36:53:79:
a5:14:3d:30:11:c5:04:8f:9d:ad:d5:87:2d:85:c6:
7e:c7:b9:ae:4f:12:8b:8c:7c:d8:0a:1b:24:4a:67:
b8:eb:74:f3:4c:ea:2c:ab:18:a5:bf:81:11:ae:33:
db:d5:76:9b:90:8f:55:9a:20:15:a2:00:6c:fc:1f:
47:41:ed:fe:f4:38:85:41:bc:64:35:5d:80:f3:3f:
fc:87:96:b3:43:d5:d1:ee:db:ec:e3:5f:7f:83:e2:
0b:03:6e:98:81:75:17:95:4f:c1:e2:a8:e6:9d:da:
7f:04:16:a3:d6:1e:77:87:32:6b:15:1c:86:f7:33:
9e:24:b7:55:e7:8d:ed:8d:b1:fd:20:96:e5:47:0d:
3a:af:65:f8:c0:f0:32:83:9a:92:35:04:84:cf:b4:
a1:0e:ef:92:80:54:c0:bb:4c:6a:15:e1:31:0a:80:
cf:a6:ce:0a:f0:38:6f:1e:a6:94:1b:cc:97:3b:0a:
31:9a:8b:ff:ab:10:30:90:fa:d1:5f:c3:77:9d:ce:
0f:88:82:95:bc:b6:8b:52:f0:37:61:4c:ae:b8:71:
b6:37:6d:26:ce:77:02:63:7c:fe:c1:d1:11:60:8b:
4f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5D:9A:E6:50:F0:5E:C8:98:1E:5F:EF:8E:8B:4E:65:90:8C:12:57
X509v3 Authority Key Identifier:
keyid:9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e8:df:81:95:50:18:6d:84:98:04:08:f2:53:fd:f8:68:6c:
ab:71:df:78:fd:47:50:eb:06:c1:68:96:38:00:20:75:4b:50:
f5:42:aa:44:f5:5c:44:72:b3:05:f9:07:41:95:28:3e:d4:f9:
ce:8c:e8:cc:8a:09:ff:c4:35:76:be:59:b9:8c:2c:37:34:84:
9b:5a:29:df:fc:fe:1b:3d:81:76:c9:ee:73:f2:be:0a:78:93:
26:e7:46:89:d6:4c:58:c3:a2:60:b0:f0:5b:69:8c:81:38:19:
68:39:b4:38:14:81:70:dc:bf:72:41:d7:9d:67:cb:1e:0f:7c:
c8:c7:ef:54:aa:73:76:7a:0c:4d:eb:08:67:7b:92:fa:f1:92:
d9:48:34:eb:24:f4:d2:e0:7d:8d:62:a4:85:29:02:0b:37:48:
93:b8:66:9e:ad:0b:92:74:e6:68:10:9f:81:38:c1:69:75:47:
3a:56:48:71:44:e1:05:4a:6b:e1:12:d2:bf:eb:7e:6c:93:67:
a4:b5:2d:32:69:fb:39:46:39:cd:1c:e0:de:6f:16:cb:88:83:
80:63:20:1d:5b:57:e0:ab:a9:b4:52:6e:f1:b3:58:48:78:d7:
05:0f:e9:55:7c:2b:7a:50:3f:9d:a4:d8:d5:67:f6:5b:5b:22:
67:e1:f6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:08:54 2026 by rpki-client