Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
File: npTVvz231nNNzxvmItX97i_sO48.mft (raw, json)
Hash identifier: ZN6/Hr2mK7yiZcQiIzJBArS91eVF/LOyTsMvnUEFHZY=
Subject key identifier: 41:12:57:53:DD:33:C9:C3:44:EF:8E:39:5A:63:5F:3F:F9:94:93:25
Authority key identifier: 9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F
Certificate issuer: /CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f
Certificate serial: 019F943737F2D9672606C305129799A33D53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
Manifest number: 0A86
Signing time: Fri 24 Jul 2026 13:01:14 +0000
Manifest this update: Fri 24 Jul 2026 13:01:14 +0000
Manifest next update: Sat 25 Jul 2026 13:01:14 +0000
Files and hashes: 1: npTVvz231nNNzxvmItX97i_sO48.crl (hash: 9yFE/AVJ3NoabdqvfW1a2Q+Ps31+x8K9mQ+jDUnaxw8=)
2: zcxoOaYQZVz0kyNkbAvoL7_cGOo.roa (hash: cbQCnBDpdRHmtA6XlyYrBSpV92ISXXC3TjEjSfaVLUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:37:f2:d9:67:26:06:c3:05:12:97:99:a3:3d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f
Validity
Not Before: Jul 24 13:01:14 2026 GMT
Not After : Jul 25 13:01:14 2026 GMT
Subject: CN=41125753dd33c9c344ef8e395a635f3ff9949325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2b:1b:0d:1b:f3:2e:36:e0:b5:95:1a:c4:d8:
7f:d7:15:95:0f:37:7a:bb:58:83:3a:c4:02:73:ea:
10:66:bc:ec:da:5a:bf:6b:a3:bd:86:22:b9:de:91:
5b:41:7c:42:ee:4b:6e:4f:3f:89:cd:61:f8:e7:63:
09:67:7e:41:9b:b8:34:b9:32:24:33:8a:20:69:b9:
a4:72:aa:b0:51:f8:4b:b4:93:e6:da:2e:92:02:e7:
03:2a:6c:f3:d2:c8:92:72:4d:19:5e:de:39:1c:fb:
e5:e5:1e:00:c6:75:64:da:2b:a8:f3:d3:8b:e7:b8:
f6:c4:33:84:0b:6d:24:d2:ff:3c:e0:fa:6b:8e:af:
5c:00:46:06:d9:ae:43:55:e9:7d:dc:51:3d:a2:79:
68:6b:46:f8:51:db:d9:7e:00:46:79:26:19:a9:5b:
7b:4f:81:e7:ef:18:14:94:7d:f6:e7:be:7d:ed:81:
d9:55:3b:9b:f7:ae:ef:ad:b1:ef:d6:68:2a:fd:a6:
41:0b:3a:02:02:78:bd:89:96:64:d6:6b:e5:28:3d:
8f:8c:12:25:3f:00:f9:50:3d:76:b3:ec:c6:d5:1c:
e6:c9:0b:f1:75:b2:43:8d:42:c1:31:a7:6b:3f:a7:
8c:10:01:66:c8:f6:af:f1:6c:7e:49:2f:1a:57:ec:
26:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:12:57:53:DD:33:C9:C3:44:EF:8E:39:5A:63:5F:3F:F9:94:93:25
X509v3 Authority Key Identifier:
keyid:9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:96:55:ac:33:8b:98:12:57:96:79:b2:4c:00:1e:17:51:a2:
51:e5:17:bb:06:b3:9a:cd:0b:71:01:50:fd:6b:e2:ce:34:fc:
f8:b0:32:e2:de:c8:b4:c0:37:5f:d9:2f:97:15:6c:20:0e:14:
e5:30:c4:40:e5:78:cd:30:b2:d1:dd:69:f8:8e:2a:53:78:71:
ff:06:21:f0:fc:f2:dc:2a:5b:d6:c0:02:1d:cf:8b:6d:0f:4e:
68:46:e0:d6:8e:94:da:20:eb:9d:6a:76:a2:44:6a:03:88:90:
5a:28:34:67:ed:97:48:63:0b:9e:fb:84:e1:01:f6:f5:99:86:
f1:f5:a4:9e:bb:ea:92:af:64:a7:63:8b:87:6b:34:e0:a2:c6:
7e:e4:8b:11:e2:2d:99:3e:87:3d:4d:e9:3c:e3:f3:51:81:db:
ae:2b:54:03:01:c2:f9:e1:db:8b:e7:bf:55:d1:b1:30:50:80:
96:72:4b:6c:d8:f8:5d:02:d6:f4:5e:2f:cc:e4:b7:db:e2:02:
a6:36:c0:09:9b:19:bf:c9:cb:11:7b:c7:e0:0d:2c:e0:33:bb:
62:2d:54:fb:77:84:e7:74:da:7b:33:76:7d:6d:cc:3d:b2:bc:
b5:bc:f7:03:ae:71:2f:80:97:c2:f1:c2:35:3b:d0:ea:e4:bf:
18:dc:6c:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UNzfy2WcmBsMFEpeZoz1TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTRkNWJmM2RiN2Q2NzM0ZGNmMWJlNjIyZDVmZGVlMmZl
YzNiOGYwHhcNMjYwNzI0MTMwMTE0WhcNMjYwNzI1MTMwMTE0WjAzMTEwLwYDVQQD
Eyg0MTEyNTc1M2RkMzNjOWMzNDRlZjhlMzk1YTYzNWYzZmY5OTQ5MzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSsbDRvzLjbgtZUaxNh/1xWVDzd6
u1iDOsQCc+oQZrzs2lq/a6O9hiK53pFbQXxC7ktuTz+JzWH452MJZ35Bm7g0uTIk
M4ogabmkcqqwUfhLtJPm2i6SAucDKmzz0siSck0ZXt45HPvl5R4AxnVk2iuo89OL
57j2xDOEC20k0v884Pprjq9cAEYG2a5DVel93FE9onloa0b4UdvZfgBGeSYZqVt7
T4Hn7xgUlH3257597YHZVTub967vrbHv1mgq/aZBCzoCAni9iZZk1mvlKD2PjBIl
PwD5UD12s+zG1RzmyQvxdbJDjULBMadrP6eMEAFmyPav8Wx+SS8aV+wmFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEESV1PdM8nDRO+OOVpjXz/5lJMlMB8GA1UdIwQY
MBaAFJ6U1b89t9ZzTc8b5iLV/e4v7DuPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBUVnZ6MjMxbk5Oenh2bUl0WDk3aV9zTzQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8xMzgzYWEtMTA4Yi00NmVmLWFjOWUt
OWNlZTIzYTYwNTY2LzEvbnBUVnZ6MjMxbk5Oenh2bUl0WDk3aV9zTzQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8xMzgzYWEtMTA4Yi00NmVmLWFjOWUtOWNlZTIzYTYwNTY2
LzEvbnBUVnZ6MjMxbk5Oenh2bUl0WDk3aV9zTzQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZZVrDOL
mBJXlnmyTAAeF1GiUeUXuwazms0LcQFQ/WvizjT8+LAy4t7ItMA3X9kvlxVsIA4U
5TDEQOV4zTCy0d1p+I4qU3hx/wYh8Pzy3Cpb1sACHc+LbQ9OaEbg1o6U2iDrnWp2
okRqA4iQWig0Z+2XSGMLnvuE4QH29ZmG8fWknrvqkq9kp2OLh2s04KLGfuSLEeIt
mT6HPU3pPOPzUYHbritUAwHC+eHbi+e/VdGxMFCAlnJLbNj4XQLW9F4vzOS32+IC
pjbACZsZv8nLEXvH4A0s4DO7Yi1U+3eE53TaezN2fW3MPbK8tbz3A65xL4CXwvHC
NTvQ6uS/GNxs5A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:08:02 2026 by rpki-client