Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
File: NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft (raw, json)
Hash identifier: 3j3t96kczaPGU9cprVANoUcUr7zpdqbLwlqfwaA93nQ=
Subject key identifier: 45:65:48:7D:1C:D1:30:35:8D:6D:B6:68:2C:34:0D:D1:26:13:F6:C1
Authority key identifier: 34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
Certificate issuer: /CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Certificate serial: 01A12DD73B386D05E34FCB4D9FB8CC086D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
Manifest number: 1A9D
Signing time: Mon 12 Oct 2026 02:00:42 +0000
Manifest this update: Mon 12 Oct 2026 02:00:42 +0000
Manifest next update: Tue 13 Oct 2026 02:00:42 +0000
Files and hashes: 1: NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl (hash: TSAEgjtO/qf3wwODuHlhRGDvhlz67M770+qGrX52xkA=)
2: u9-8FtTHX-Iha_x3C5q4_edNJaM.roa (hash: BJecwIh123OLgBTMSQtQt7fraFVyOfqi7zQMkz1z9tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:d7:3b:38:6d:05:e3:4f:cb:4d:9f:b8:cc:08:6d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Validity
Not Before: Oct 12 02:00:42 2026 GMT
Not After : Oct 13 02:00:42 2026 GMT
Subject: CN=4565487d1cd130358d6db6682c340dd12613f6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:de:2f:63:55:65:be:ac:bb:3e:e8:dc:28:a6:
51:ed:76:3b:82:08:b9:aa:76:71:50:c5:41:ee:d9:
23:25:43:06:8f:40:f9:f9:56:51:66:01:ad:a6:4d:
11:fb:73:0e:ba:f6:ee:66:3d:56:bc:a5:c8:a0:a1:
49:27:a3:21:0b:c3:da:ff:c4:1a:75:f1:4e:2e:ed:
1b:6c:a1:12:7d:a0:85:c8:06:57:76:b2:72:89:be:
e0:3a:51:15:e5:2e:ba:03:10:67:6e:7f:c8:0d:fb:
7e:4e:13:aa:9e:86:66:76:37:23:fe:70:36:0c:bb:
81:77:10:bd:ff:2f:75:94:47:c0:2a:31:cf:46:9a:
5d:61:25:f9:ce:e6:1b:c9:d8:e2:f3:50:9d:c2:fb:
fc:e5:da:1d:86:96:22:9f:ab:87:44:f2:77:17:84:
bb:8d:b2:78:f1:8f:ea:f5:74:3d:4f:0e:84:d8:3b:
53:58:df:11:a8:c2:55:24:a9:f1:eb:b4:df:e4:d6:
8b:9d:27:64:63:eb:12:e2:84:87:cf:c8:e4:9a:36:
b4:f9:24:c1:c8:64:27:60:15:80:0f:28:4f:23:0a:
7d:8e:68:c3:ba:6f:95:64:38:77:2b:44:12:9e:7d:
41:25:6d:b6:a1:f9:84:a5:db:72:e8:33:5c:fd:7b:
e9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:65:48:7D:1C:D1:30:35:8D:6D:B6:68:2C:34:0D:D1:26:13:F6:C1
X509v3 Authority Key Identifier:
keyid:34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:7f:1c:e5:2e:f4:06:77:24:af:3b:1a:fb:80:eb:22:ff:e0:
99:af:3e:7d:31:9d:cd:1e:ef:ec:1d:1d:ab:1e:2c:bf:0b:e5:
99:7b:4b:f8:54:73:32:1e:77:00:21:b6:57:49:02:ad:41:42:
7e:f5:34:58:cc:79:63:4f:e0:63:b3:41:b2:08:41:3a:d0:dd:
f1:b1:97:4f:87:de:cc:c9:a6:30:33:69:fb:d8:a6:9a:77:8b:
94:7b:b2:49:37:6d:8a:7e:b5:c1:fa:3c:de:bd:af:e8:85:62:
e0:f5:b2:3b:f0:b8:40:eb:e6:fa:f0:5f:78:97:23:c8:4d:35:
44:21:31:fd:55:78:dc:72:d3:c3:6d:c8:71:5d:78:f5:ec:ef:
a1:0d:80:54:93:02:bd:1f:07:c6:cd:48:6b:77:3f:a7:b3:bc:
7f:f9:a9:1f:3d:67:45:00:ff:59:31:bf:1d:26:da:39:53:e7:
f7:99:d4:a0:95:71:b2:56:43:1f:f8:31:83:66:1f:39:51:7d:
6e:2c:2b:7f:ac:ec:61:e6:ad:44:8f:bb:68:38:75:a7:40:bc:
eb:8f:95:91:fc:9e:93:6f:05:a7:56:60:d8:72:e6:0e:c6:84:
d2:c1:e1:22:02:91:f3:47:01:75:74:8e:72:41:f6:b2:07:70:
6c:a3:c7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 09:52:53 2026 by rpki-client