Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft
File: NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft (raw, json)
Hash identifier: PzdmEwlqDaE+Fdz1vGG60WTsK0Ug7tbFD/YOhdooU9Q=
Subject key identifier: E7:66:4F:7F:B3:41:41:52:00:3E:2C:3F:46:3F:53:DC:9A:EE:07:97
Authority key identifier: 34:F4:7B:73:EE:8F:BE:DD:25:F4:1B:3B:17:B2:BE:08:F5:BF:65:63
Certificate issuer: /CN=34f47b73ee8fbedd25f41b3b17b2be08f5bf6563
Certificate serial: 01A0D796867E354E8B7A23D32BC62BCABE70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft
Manifest number: 1A74
Signing time: Fri 25 Sep 2026 08:02:41 +0000
Manifest this update: Fri 25 Sep 2026 08:02:41 +0000
Manifest next update: Sat 26 Sep 2026 08:02:41 +0000
Files and hashes: 1: MRi2QUKiUYiuqZDbNN8AWi7khO4.roa (hash: NMGJJ7+SOJryUXuDS+WQnGKqDDO2i9Z6K8gWplB05UE=)
2: NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl (hash: 6mLyQ/Td9XctsSFwoBBhlyRxLFgARi33tyF+D7yAH1Q=)
3: zDNouUxa3WBuZGVPOGveYWb3T6I.roa (hash: dlBZu5xfm6bRA2HTdrEgFNefU2JSuyk/ZA0x+VgcU8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:86:7e:35:4e:8b:7a:23:d3:2b:c6:2b:ca:be:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f47b73ee8fbedd25f41b3b17b2be08f5bf6563
Validity
Not Before: Sep 25 08:02:41 2026 GMT
Not After : Sep 26 08:02:41 2026 GMT
Subject: CN=e7664f7fb3414152003e2c3f463f53dc9aee0797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e2:71:5a:33:47:55:d0:6a:30:24:b2:c5:e7:
49:e5:81:bd:80:1b:e4:a5:a1:d2:24:04:e6:43:73:
cb:fd:65:dd:02:56:4d:20:07:2a:cc:aa:d1:4d:b2:
7b:ca:4a:a9:41:11:32:4e:cb:c6:1b:61:35:a2:83:
c1:92:f3:9b:b1:9a:8f:7b:43:d8:ef:97:59:0e:0c:
ba:d2:72:d4:22:e0:d2:1e:3e:64:c5:af:6e:3e:03:
82:3a:df:66:16:0a:6f:53:aa:e7:6c:26:f3:a1:51:
a7:d0:49:21:ae:8a:e6:2c:c3:bb:f0:55:1a:db:7c:
fc:f9:3a:3a:59:c9:e3:f6:28:45:42:79:62:ad:f0:
37:d8:c4:cd:24:52:88:93:90:0a:55:bf:6c:86:11:
bd:ae:3b:2c:92:e7:45:de:9c:32:23:1b:56:2c:ce:
9f:c4:60:ad:f1:96:7d:a3:fa:1a:65:cc:12:77:a9:
09:3f:d2:8a:70:6e:ea:6c:8d:d6:2a:9a:6f:2a:11:
f1:8f:e2:23:92:e8:ee:f8:63:84:11:5e:cb:1c:3d:
43:42:1e:60:ce:74:ef:d4:b7:75:7f:9c:63:d5:dc:
e7:f5:a4:73:31:63:06:92:2a:ed:2d:a6:a7:f0:7c:
ca:0e:17:f4:55:5a:bd:e4:d1:81:36:e0:b1:a5:4b:
a7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:66:4F:7F:B3:41:41:52:00:3E:2C:3F:46:3F:53:DC:9A:EE:07:97
X509v3 Authority Key Identifier:
keyid:34:F4:7B:73:EE:8F:BE:DD:25:F4:1B:3B:17:B2:BE:08:F5:BF:65:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:62:63:74:43:fd:23:6a:df:a4:26:98:55:4f:b3:ba:fd:97:
ee:91:3b:8e:a9:71:50:c3:f7:5c:4b:22:5b:01:38:00:00:99:
55:e1:63:56:3b:f7:9d:2d:c8:df:cc:cf:69:1f:bd:f0:2f:58:
3d:f4:85:98:a9:ec:4a:d2:e3:1d:30:3e:e5:a3:34:54:74:76:
fe:b0:0b:37:d6:b1:69:e1:6a:7a:01:6c:3a:61:b3:65:89:1a:
c3:e5:0e:4d:f1:c6:17:5d:88:31:df:c9:17:22:51:40:a3:98:
3e:93:a7:b3:7a:3a:1f:dd:bd:76:6e:9d:30:34:78:26:b9:30:
e6:cc:67:d8:56:c5:13:8b:3a:f5:f9:f1:f8:39:4b:1c:31:a0:
6f:f9:e9:50:8c:a5:12:ce:71:52:0d:20:6d:f0:fb:e2:23:83:
6b:25:b9:da:aa:15:05:79:b5:29:25:61:18:93:7a:1a:6e:44:
02:c4:5d:c0:fb:bf:db:22:cf:9f:c6:90:87:74:9d:20:3c:06:
ee:6f:99:0a:23:00:56:c9:d7:b3:2d:c8:b3:7a:61:09:1a:9e:
a0:2a:50:a8:5e:d6:9b:6b:0e:b4:cb:21:47:95:74:29:56:24:
0d:22:24:57:32:6d:ff:b5:94:3d:65:df:8f:6c:74:24:44:a5:
6b:f0:b0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:45:05 2026 by rpki-client