Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
File: NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft (raw, json)
Hash identifier: Ayy5QSHrfhdHRf7vu4x25lzNq/uM8Q1Y6dompSnhz/I=
Subject key identifier: 27:60:9C:BF:4B:05:AE:75:55:7D:3C:21:B7:91:8E:22:AD:24:6C:AD
Authority key identifier: 34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
Certificate issuer: /CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Certificate serial: 019D9A74FAA0F151C012C8E86E93C1093A5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 08:00:50 +0000
Manifest this update: Fri 17 Apr 2026 08:00:50 +0000
Manifest next update: Sat 18 Apr 2026 08:00:50 +0000
Files and hashes: 1: NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl (hash: hCr38YIJnGDklaQt44rWKKiDw/kJTLBd2/ftwvxyF5Q=)
2: u9-8FtTHX-Iha_x3C5q4_edNJaM.roa (hash: BJecwIh123OLgBTMSQtQt7fraFVyOfqi7zQMkz1z9tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:fa:a0:f1:51:c0:12:c8:e8:6e:93:c1:09:3a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Validity
Not Before: Apr 17 08:00:50 2026 GMT
Not After : Apr 18 08:00:50 2026 GMT
Subject: CN=27609cbf4b05ae75557d3c21b7918e22ad246cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e9:d0:0c:15:72:1b:b4:85:01:f7:6d:e2:ee:
69:af:f0:03:db:ea:75:89:32:1f:d9:fe:02:f7:3b:
95:c5:85:37:4a:f5:16:be:dd:71:80:43:43:1e:6c:
be:26:23:7a:f6:1c:3e:5d:a3:48:4e:96:0e:58:31:
6e:fd:32:82:ea:9e:97:e6:64:4f:50:77:a0:69:1a:
7a:37:38:a2:f7:a7:3d:0e:96:0e:64:21:5e:f9:1a:
02:d6:7a:2a:47:91:a7:10:9e:3b:eb:f8:97:b7:d9:
57:da:6e:6a:62:0e:c5:16:18:74:30:32:c6:59:bf:
ba:7c:e5:4f:b3:e0:f3:1b:6a:6c:3a:f9:05:04:a6:
53:43:59:52:83:cd:d7:c2:21:13:ab:eb:99:01:eb:
e3:97:4e:01:e7:04:e5:b3:39:7d:e4:ab:02:d5:3d:
a5:ac:41:a8:4f:8f:ef:ad:f5:ef:84:56:ad:ad:7b:
83:41:f3:f6:eb:5a:e5:05:4e:85:48:a2:f2:6b:d4:
3a:fe:29:38:48:c8:8f:8a:2f:4e:62:83:79:0c:bc:
28:57:70:08:49:e0:ee:3a:83:b8:50:0c:5e:cc:49:
e5:b8:75:dd:51:00:5a:8e:f9:42:b1:78:70:86:d2:
e7:f3:85:9a:a1:bb:07:33:79:16:52:41:08:81:1b:
01:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:60:9C:BF:4B:05:AE:75:55:7D:3C:21:B7:91:8E:22:AD:24:6C:AD
X509v3 Authority Key Identifier:
keyid:34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:db:22:59:41:f7:92:18:05:cd:35:8f:5e:61:db:f9:0f:3e:
e2:8b:fd:4c:e0:6a:e2:35:ef:fe:f7:09:2d:1d:16:91:b2:5e:
85:00:62:77:6b:13:e5:fe:a3:37:38:9b:e9:51:06:4d:81:54:
09:09:47:bb:59:e6:df:db:01:3e:ef:ba:07:85:a6:ab:3f:d5:
01:13:1f:f3:fa:c8:4c:aa:c3:c9:21:cf:c5:b5:37:9c:1c:09:
da:b2:8c:d7:cd:7e:65:f4:5a:04:7d:7e:bb:e4:14:3f:64:0c:
76:1c:64:a9:2e:03:a5:d2:49:80:a3:53:04:c6:65:ff:37:cd:
f4:f5:8e:c8:ce:48:45:e2:ab:93:36:2c:6a:2f:f3:e9:80:97:
6f:9f:7b:b0:0c:8d:73:04:39:0e:e6:a2:ce:6a:18:94:86:ae:
47:6b:5f:54:97:8a:d1:a0:24:4f:8a:31:be:0d:05:08:14:35:
16:28:d5:19:c4:01:2a:4a:37:c3:b5:7d:f1:7f:bb:ea:b7:bd:
e6:51:b5:44:1b:8c:e6:b5:b9:72:48:42:3d:11:0a:5f:c2:f4:
a2:5a:54:56:90:e7:17:37:34:a6:59:1a:39:79:5b:19:fc:cc:
6d:c2:13:7d:9b:20:56:cf:ca:99:6b:33:c0:07:81:bf:97:89:
70:de:e3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:57:54 2026 by rpki-client