Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
File: nPYI_632AAge6SIpjksq6Wr_SOg.mft (raw, json)
Hash identifier: bDp3YVun7PIRSWr6+UEsWQ/LfxzT28ukSC31UHOZtrY=
Subject key identifier: 98:A0:13:8D:BC:8D:C8:5E:97:80:30:86:BF:24:10:3D:13:0E:79:3D
Authority key identifier: 9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
Certificate issuer: /CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Certificate serial: 019CABD950A8EE1C93848CEC7674F5633BB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 00:01:11 +0000
Manifest this update: Mon 02 Mar 2026 00:01:11 +0000
Manifest next update: Tue 03 Mar 2026 00:01:11 +0000
Files and hashes: 1: nPYI_632AAge6SIpjksq6Wr_SOg.crl (hash: iUaGgNij8nxYX+M66ucLqE7tGcfhRkYl8WQs5+aPt5A=)
2: vLirgPar5c0l-_w2MTo6mnE8j2o.roa (hash: aEBCV68tz4z6OeR59pAV8N/3RKw1Sou9vg9NQB/F55k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:50:a8:ee:1c:93:84:8c:ec:76:74:f5:63:3b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Validity
Not Before: Mar 2 00:01:11 2026 GMT
Not After : Mar 3 00:01:11 2026 GMT
Subject: CN=98a0138dbc8dc85e97803086bf24103d130e793d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a6:9a:d3:51:72:c2:14:ee:23:68:04:93:9b:
96:40:c8:37:a2:e8:75:1e:d6:75:de:51:ed:6f:93:
3c:bf:dc:d7:e3:30:59:82:5c:d8:f0:33:60:f3:65:
d8:75:ae:1a:da:0a:43:3b:60:13:d0:10:1b:07:fd:
57:57:04:61:3c:1b:29:9e:12:b9:9e:03:fd:9a:ae:
d9:2f:99:2b:ba:1f:d9:32:a1:d1:75:98:21:7d:86:
7b:6c:0a:83:23:60:86:a4:a1:d6:0e:18:ac:f8:11:
ba:ce:60:d6:8e:30:99:e5:af:2c:6d:27:5f:e4:49:
7a:ea:7d:5e:be:53:3f:29:84:d7:8c:4b:ef:78:d0:
47:0d:3a:a8:1f:f9:db:77:3d:33:73:9f:d9:da:d5:
a3:4f:ed:31:31:5d:da:af:be:99:d7:5c:1d:4e:7a:
3f:14:8c:0b:9b:a6:82:b9:d0:a5:e7:49:8d:4f:39:
99:4f:f0:49:4f:0d:9f:a9:53:af:1c:11:a1:fe:80:
fc:30:2f:91:fe:63:10:68:fc:da:30:3d:d5:1a:53:
cc:9c:f4:78:45:07:fc:ae:54:59:12:e0:c7:39:77:
ba:b5:cb:53:bb:bd:ad:33:0d:6e:20:42:07:4b:99:
40:64:19:a2:7f:9b:ad:88:6a:59:51:1c:b2:02:2f:
15:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A0:13:8D:BC:8D:C8:5E:97:80:30:86:BF:24:10:3D:13:0E:79:3D
X509v3 Authority Key Identifier:
keyid:9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:60:13:1d:c0:a0:39:2f:2e:3c:af:57:e3:85:40:b7:3c:fe:
9b:8f:ef:60:2d:4a:c8:5a:21:7d:5f:1f:2c:8e:be:d7:2e:03:
6d:86:e2:95:51:b0:fa:93:7f:b6:e0:b4:7e:99:c2:6c:ef:d1:
b5:b0:a0:18:de:63:97:42:20:06:b7:59:44:c4:0b:cb:0a:0a:
b5:65:26:3f:e0:aa:94:31:16:f0:40:ba:ec:04:6e:d8:52:97:
b3:a1:dd:c3:9a:51:d0:32:40:1f:eb:19:ff:e7:36:89:b2:86:
68:7f:29:ec:17:b4:06:d0:64:43:84:30:80:1d:05:0d:11:aa:
b1:c9:9a:9d:8a:8e:1c:5e:34:bc:e9:f8:75:aa:ac:2f:08:dd:
86:d3:c3:f6:4d:fa:e9:2e:59:a2:12:28:c9:6e:1c:87:be:4f:
fc:5d:c1:b0:f7:d8:e6:7d:9b:1a:04:77:d9:01:8b:3b:65:c5:
3a:23:e6:46:8e:81:21:75:cf:7b:42:6a:ad:c6:f2:3f:51:fc:
4b:ba:3d:37:aa:07:05:c5:02:a2:12:84:8b:ee:d8:e0:de:0d:
a4:54:c3:10:87:cf:b7:06:88:6d:97:41:70:ea:f8:25:bc:09:
89:3d:f9:19:ff:14:98:5e:67:c1:6c:82:69:d1:c5:f6:7f:cd:
44:f9:2e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:18:15 2026 by rpki-client