Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
File: NPwYIZBVFuYYMg6eRxoTsqqslv8.mft (raw, json)
Hash identifier: FDAbfoh5gyN4jXHqPW463UHnJtIVniz0/QXVunAoKM0=
Subject key identifier: C0:A2:2D:DA:22:51:1E:1D:91:70:AD:63:AE:2A:9B:62:ED:74:B9:BE
Authority key identifier: 34:FC:18:21:90:55:16:E6:18:32:0E:9E:47:1A:13:B2:AA:AC:96:FF
Certificate issuer: /CN=34fc1821905516e618320e9e471a13b2aaac96ff
Certificate serial: 019D2960FACD8302846E86F24B9190BFA118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 09:01:54 +0000
Manifest this update: Thu 26 Mar 2026 09:01:54 +0000
Manifest next update: Fri 27 Mar 2026 09:01:54 +0000
Files and hashes: 1: FT4kAT6lWQN00FHh3OTXw40E65E.roa (hash: GFS78DgVCOqhb0Wz+qsE+LrfZ/kjwcDR1Tvaz5iQcCc=)
2: NPwYIZBVFuYYMg6eRxoTsqqslv8.crl (hash: I8zTTC+GT2vG6yL5dQsdAjj+agZAbD2o0sBKX4nFGIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:fa:cd:83:02:84:6e:86:f2:4b:91:90:bf:a1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34fc1821905516e618320e9e471a13b2aaac96ff
Validity
Not Before: Mar 26 09:01:54 2026 GMT
Not After : Mar 27 09:01:54 2026 GMT
Subject: CN=c0a22dda22511e1d9170ad63ae2a9b62ed74b9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c4:10:44:c5:88:de:73:0d:12:42:20:f3:c9:
cd:d9:2c:10:3a:a3:7b:27:b4:29:03:9b:c4:da:b2:
1e:e2:f6:94:d5:b9:d2:31:d4:11:a8:ce:7b:96:f9:
09:62:6b:8a:0a:d3:ad:3c:f7:c6:f1:98:1b:a3:d6:
73:ab:68:06:c8:23:1e:95:9c:ff:e1:17:17:e8:4b:
85:c7:c5:3f:07:c5:67:aa:8f:e4:35:d4:1c:74:89:
a0:9d:fa:56:00:71:22:5e:37:a1:f0:b4:c8:19:b1:
26:aa:ae:08:cd:c2:b3:9c:ea:b1:e0:e3:7b:f1:01:
8e:c1:41:4d:06:27:ca:ff:7e:33:68:3f:14:85:fa:
39:a8:d3:25:a0:54:af:04:7f:96:94:ac:4c:a3:f0:
17:2c:0e:97:9d:76:e6:93:a5:83:99:7c:ac:2f:6e:
3d:b1:09:76:f9:ac:52:0b:17:96:fc:13:20:cd:12:
a9:44:5f:2e:32:91:2a:73:0f:9d:ed:2c:85:92:74:
97:5d:ba:2c:29:b7:ef:0c:56:41:02:fa:60:28:ac:
c1:99:1a:f2:ac:18:89:1c:5d:76:59:a7:db:20:6a:
b6:9c:b6:09:37:f6:3b:5e:27:17:a4:87:0d:7c:a9:
67:e9:a8:6d:14:15:34:0b:52:2f:a7:58:2a:3d:75:
2e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A2:2D:DA:22:51:1E:1D:91:70:AD:63:AE:2A:9B:62:ED:74:B9:BE
X509v3 Authority Key Identifier:
keyid:34:FC:18:21:90:55:16:E6:18:32:0E:9E:47:1A:13:B2:AA:AC:96:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:09:92:65:6c:35:b5:36:5b:7b:fe:ee:65:72:7f:23:23:c3:
4a:bc:4d:99:3d:30:4b:07:05:35:31:90:90:ee:e6:b1:a9:f4:
ba:79:2f:85:a8:31:f4:8b:42:ae:4f:76:a8:8c:86:43:37:c7:
08:c6:65:98:a6:33:51:5f:a9:55:9f:ab:06:38:29:ed:96:44:
cb:d6:08:84:a7:9c:d9:10:b1:6d:2a:b0:05:57:69:e2:c1:ad:
91:f8:64:3b:48:da:45:a6:5e:81:8c:5a:6b:98:be:8d:5c:87:
01:ef:92:a2:c6:cc:97:20:6a:db:9c:b2:3d:3e:0f:05:b5:f7:
1f:0a:69:7c:40:48:47:4f:14:6f:f0:1e:75:c6:57:51:1a:8a:
8f:ac:aa:d5:80:69:e6:1a:37:04:3f:a4:9c:3c:78:13:a7:cb:
45:aa:b9:f4:98:67:0a:68:95:64:53:92:3e:3a:8a:33:04:60:
70:34:dd:9c:07:20:cc:37:89:45:ba:09:e0:a8:49:ac:38:b5:
fe:9c:c9:30:45:ea:f4:9b:49:a6:86:05:df:b8:f1:2d:3a:fa:
1a:f6:bd:a0:00:62:73:bf:a7:81:f2:6f:f5:6e:39:fb:38:ac:
2b:e3:39:00:34:b8:0e:60:64:32:bd:bf:a4:22:9e:a4:ed:37:
eb:11:b8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:42 2026 by rpki-client