Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
File: nPYI_632AAge6SIpjksq6Wr_SOg.mft (raw, json)
Hash identifier: LHOWe9bITxehmM/V0PLiof6OHpby8Ed5LH+VPh+DTTE=
Subject key identifier: 1A:BE:C9:80:1E:54:16:AE:04:2C:26:E7:8E:C1:8B:48:9D:64:CA:11
Authority key identifier: 9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
Certificate issuer: /CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Certificate serial: 019D9B515E8691AFAFBD3B5011899CFA897D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 12:01:34 +0000
Manifest this update: Fri 17 Apr 2026 12:01:34 +0000
Manifest next update: Sat 18 Apr 2026 12:01:34 +0000
Files and hashes: 1: nPYI_632AAge6SIpjksq6Wr_SOg.crl (hash: WRfRPcGZmMC6UFKg3/XjM1vlp9SwtOAkNvQ4stfiq00=)
2: vLirgPar5c0l-_w2MTo6mnE8j2o.roa (hash: aEBCV68tz4z6OeR59pAV8N/3RKw1Sou9vg9NQB/F55k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:5e:86:91:af:af:bd:3b:50:11:89:9c:fa:89:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Validity
Not Before: Apr 17 12:01:34 2026 GMT
Not After : Apr 18 12:01:34 2026 GMT
Subject: CN=1abec9801e5416ae042c26e78ec18b489d64ca11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7d:8b:64:4b:a0:b4:be:bf:39:b8:29:c0:35:
b6:7d:ab:4e:b9:b1:ec:5d:fe:08:44:17:4c:75:40:
7d:66:11:0a:84:c9:2e:29:f8:81:49:cd:d5:71:a9:
12:17:80:c5:de:bf:08:2f:26:09:4e:67:b1:4a:83:
f8:1b:1b:e8:54:e2:5c:c9:27:60:d5:d8:8f:bc:71:
58:b1:fc:e9:c1:76:c4:b6:93:c6:48:16:22:f7:f3:
af:77:d6:17:e1:62:d1:22:d1:08:78:93:7d:6f:2e:
a6:8c:a6:e0:fe:ab:71:c7:61:0e:9f:2f:0c:dc:40:
cb:10:da:bb:0e:dc:29:59:bb:db:87:2c:6e:89:0f:
9b:74:ad:36:de:3e:d2:b4:cc:56:7c:e7:95:cd:0c:
14:18:2d:5e:3e:2c:41:27:b2:b4:49:ee:12:44:23:
6e:eb:0c:14:99:1d:0e:37:73:97:74:56:70:2d:97:
75:29:60:68:65:03:52:4d:10:2d:f6:c0:6e:e0:64:
2b:88:fd:da:1a:db:56:e2:a0:51:9c:13:e5:23:22:
47:4b:06:e6:3d:ba:35:25:a9:dd:7a:9f:62:aa:7c:
2a:a1:11:70:52:36:21:60:25:ac:4c:91:dd:39:bc:
0b:12:b0:f1:58:d8:6e:ba:78:68:ee:8f:a0:b3:0c:
d9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BE:C9:80:1E:54:16:AE:04:2C:26:E7:8E:C1:8B:48:9D:64:CA:11
X509v3 Authority Key Identifier:
keyid:9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:18:75:c6:a6:cd:36:44:d8:97:4b:0c:43:7c:0e:c8:da:9a:
80:2e:e6:27:64:7d:6e:be:ff:e1:a3:45:66:af:cc:33:7a:c7:
e4:5e:9f:cf:b3:e4:35:0c:3e:3e:a1:53:1e:71:a2:d7:f1:31:
10:93:6a:24:05:3b:29:e8:b7:31:f3:da:45:3c:e8:04:76:01:
c4:a8:b1:68:cd:98:9d:a5:80:96:a1:1a:ed:f3:a3:46:c8:a4:
80:3b:c6:a0:b8:aa:cb:a0:6c:8d:49:39:62:6a:03:eb:3a:17:
a3:d2:78:22:74:90:47:35:4c:55:a7:8e:b1:3f:98:46:1c:28:
6b:83:9e:b7:dc:20:4d:3b:01:ae:70:5e:95:31:a6:93:64:d6:
19:9c:7d:c4:af:b0:dd:ca:2c:6f:53:11:81:63:c9:17:86:68:
9d:54:ca:8f:d1:cf:58:0d:08:38:f2:fd:78:93:9e:df:2b:91:
71:93:f9:c4:aa:1b:f3:0e:87:1c:8e:02:09:61:c6:ae:9e:d8:
70:12:d4:bf:33:84:d6:cb:b8:35:ac:ad:36:8e:f1:68:2e:d3:
08:a0:11:13:51:8b:21:b3:c6:a6:be:a2:a2:c7:e7:8c:99:2f:
f2:ec:9f:d1:25:38:b9:f5:ca:ad:08:f2:04:c1:b6:30:05:92:
33:fb:61:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:51:31 2026 by rpki-client