Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
File: NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft (raw, json)
Hash identifier: //Qog6KB34RKXKkQYVRn+EHpTShRVrWcm/5I33pv8/s=
Subject key identifier: 29:08:A1:A7:7C:DC:FC:5D:21:94:A2:CA:6D:FE:6C:38:A4:46:D1:9E
Authority key identifier: 34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
Certificate issuer: /CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Certificate serial: 019CAEDA007D2164E067533A50A4584C9E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 14:00:48 +0000
Manifest this update: Mon 02 Mar 2026 14:00:48 +0000
Manifest next update: Tue 03 Mar 2026 14:00:48 +0000
Files and hashes: 1: NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl (hash: FzSVh715XcmgkCMvNqTHZ87PbAEj3iEXDbrTGQqj6wc=)
2: u9-8FtTHX-Iha_x3C5q4_edNJaM.roa (hash: BJecwIh123OLgBTMSQtQt7fraFVyOfqi7zQMkz1z9tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:00:7d:21:64:e0:67:53:3a:50:a4:58:4c:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Validity
Not Before: Mar 2 14:00:48 2026 GMT
Not After : Mar 3 14:00:48 2026 GMT
Subject: CN=2908a1a77cdcfc5d2194a2ca6dfe6c38a446d19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e5:d7:26:2d:88:8a:be:6b:5e:bf:20:ef:ad:
e4:3a:5c:e7:a6:12:7b:64:6c:ad:2c:8e:91:d0:e7:
8b:3e:fa:b2:74:fc:c5:98:32:4d:4f:18:72:7a:a9:
38:34:da:db:fa:0d:88:b0:40:02:8f:70:b2:4b:e8:
fb:5c:73:62:cb:e9:f8:ba:36:a1:b7:04:7a:3e:15:
9a:f1:af:8c:a8:59:bc:b9:57:d4:55:98:5e:c9:d9:
a5:ee:3d:d7:23:15:58:92:75:e0:d0:43:04:43:f5:
1f:e5:b6:6e:33:f7:3e:0b:1d:b8:06:dd:e3:31:6e:
ad:3a:49:10:78:11:87:d1:3b:68:54:4a:54:4a:b5:
1c:e8:88:08:81:c2:b0:ae:77:06:7c:84:b2:81:ef:
b2:c4:3e:f0:fe:24:97:32:ab:27:2a:24:4c:b8:a2:
e0:38:94:16:ee:59:71:09:49:00:1a:38:1a:63:d9:
43:f4:7a:5e:19:0d:45:a3:10:71:a4:0f:b5:0e:c9:
81:25:c5:9d:7f:f0:ed:91:fd:63:62:2d:be:bb:4c:
f2:c4:63:93:da:bd:66:d8:79:e2:f0:5a:89:5e:8e:
82:2e:1f:5a:4c:f3:7b:15:b1:cf:6b:2d:45:fb:85:
66:6c:54:28:9b:d9:95:7f:46:1e:c5:f7:4e:ec:6f:
3f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:08:A1:A7:7C:DC:FC:5D:21:94:A2:CA:6D:FE:6C:38:A4:46:D1:9E
X509v3 Authority Key Identifier:
keyid:34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:94:ed:2a:df:21:81:e1:a5:fc:e4:1d:36:38:b9:4f:2e:00:
7d:14:65:52:1d:10:96:26:06:e2:cc:b5:77:ef:a5:4e:de:08:
d9:8b:d7:de:c8:7d:23:bf:0b:c2:fa:4d:6f:43:33:7b:96:2d:
ca:61:11:53:27:5a:1f:7f:90:23:a2:60:69:61:38:f7:f1:3d:
44:64:c4:9c:be:c2:63:6f:f8:e7:d3:49:6e:85:4d:5e:c9:88:
e9:54:17:80:6b:1e:b5:5f:86:4f:7e:fd:5e:be:10:3d:b5:94:
a5:ee:48:2d:86:4c:e4:c3:6e:d3:1e:5f:6a:b8:11:27:18:c4:
f7:38:ee:4d:a8:ca:16:0f:b8:f7:6a:7b:14:a0:f2:04:bf:64:
94:1c:f6:b6:e2:b4:23:1a:09:05:c1:63:84:30:e4:b6:0c:37:
76:bd:1d:80:cb:d0:cb:83:ba:2d:5c:84:67:a5:cb:0f:45:b1:
1a:da:12:26:82:fe:62:45:86:7c:10:ba:a7:9a:e4:50:e7:63:
4e:cd:39:48:59:55:6f:41:28:59:5c:93:30:37:24:10:63:65:
10:27:bd:b7:38:ad:9a:38:3d:f8:0c:e2:7b:b3:9f:a4:ad:b1:
91:36:8a:fd:34:0e:34:22:b9:de:8c:6d:e0:d6:6c:bf:75:a3:
56:e6:40:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:10:28 2026 by rpki-client