Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
File: NP8Aripv7u1qSYfLyRNGf9_vg-g.mft (raw, json)
Hash identifier: lfMF3bN87yEe/iJRZwdnl2GXE3Cs66wIw4ZqX8wn5uk=
Subject key identifier: E8:6D:E1:A1:0E:2F:99:82:3E:AD:BA:D3:C1:67:74:8B:85:13:5F:D3
Authority key identifier: 34:FF:00:AE:2A:6F:EE:ED:6A:49:87:CB:C9:13:46:7F:DF:EF:83:E8
Certificate issuer: /CN=34ff00ae2a6feeed6a4987cbc913467fdfef83e8
Certificate serial: 019CAA214448778C89792FAF8292FE04FA39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NP8Aripv7u1qSYfLyRNGf9_vg-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
Manifest number: 0A45
Signing time: Sun 01 Mar 2026 16:00:32 +0000
Manifest this update: Sun 01 Mar 2026 16:00:32 +0000
Manifest next update: Mon 02 Mar 2026 16:00:32 +0000
Files and hashes: 1: NP8Aripv7u1qSYfLyRNGf9_vg-g.crl (hash: 8SjdwRzIdScUJ5Z2YsdySExmGKEgCBFowc4FrnzR9SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NP8Aripv7u1qSYfLyRNGf9_vg-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:44:48:77:8c:89:79:2f:af:82:92:fe:04:fa:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34ff00ae2a6feeed6a4987cbc913467fdfef83e8
Validity
Not Before: Mar 1 16:00:32 2026 GMT
Not After : Mar 2 16:00:32 2026 GMT
Subject: CN=e86de1a10e2f99823eadbad3c167748b85135fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:da:58:9e:c8:cb:28:bc:eb:17:a6:5d:55:43:
7f:f4:90:4b:2c:c4:eb:8c:89:a4:38:33:31:bd:91:
bd:ee:28:95:4e:6f:5f:f1:d5:e3:20:19:49:94:63:
35:8e:3c:1a:b8:60:1f:2a:97:e7:e7:95:1c:b7:ac:
7b:bd:7c:d2:78:8c:10:bd:30:31:10:eb:b0:eb:5d:
d4:c8:cf:57:93:48:fe:02:cf:a3:36:df:6b:77:45:
96:42:69:2e:ac:ad:35:66:6a:07:f3:07:8d:6f:7f:
ca:ae:f5:08:14:90:b4:7d:af:ad:75:6b:e8:24:54:
ce:76:5a:76:60:38:53:7c:e0:f3:86:3a:19:f7:a6:
1c:c5:69:83:58:eb:bb:e4:0d:67:78:6a:ea:92:f8:
49:55:51:3f:38:3a:69:58:f4:25:7e:d2:e0:57:db:
f2:86:26:05:b0:42:c1:f7:78:63:c7:fb:a2:ee:6b:
7f:e4:6a:da:7c:cd:13:eb:2e:20:74:dd:0b:45:c1:
e6:72:cc:7f:2a:f1:52:6e:16:df:8e:18:3a:91:fd:
44:17:f4:cc:b1:4f:1b:6e:21:51:48:be:1f:92:dc:
8d:ec:5f:3c:2f:e0:49:37:22:a6:0f:38:49:61:5a:
c5:c4:f2:f3:2b:90:d7:d0:28:95:cb:0c:3f:8c:13:
0e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6D:E1:A1:0E:2F:99:82:3E:AD:BA:D3:C1:67:74:8B:85:13:5F:D3
X509v3 Authority Key Identifier:
keyid:34:FF:00:AE:2A:6F:EE:ED:6A:49:87:CB:C9:13:46:7F:DF:EF:83:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP8Aripv7u1qSYfLyRNGf9_vg-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a8:4b:5c:50:ad:b3:e8:e3:b9:ca:e2:4c:7b:fc:36:5c:15:
61:7a:f9:f5:f0:cd:1f:35:f2:67:c1:2c:d0:22:44:b0:3f:5e:
46:47:23:d9:f0:70:3d:60:a8:3e:8e:1a:89:a6:8d:99:60:49:
2f:a5:fe:de:f9:21:f6:6e:41:13:cd:c0:69:ce:9b:0f:8d:fb:
c1:b5:58:49:6e:de:a8:9a:0a:69:80:e5:29:a4:17:3f:b3:80:
9c:61:9c:0b:4e:b9:91:1d:d1:f7:09:57:e0:9f:ec:d2:fe:a1:
3a:18:93:e9:3e:d4:e3:26:ae:af:ac:13:7d:a5:3d:3f:30:a8:
04:20:06:95:f8:f7:dd:65:a9:ce:e3:59:64:e3:61:4e:e7:cc:
95:e7:1f:23:d7:13:0d:a7:81:3c:6a:05:3f:75:97:ad:b9:52:
37:85:88:8b:84:ea:19:ee:63:be:f2:85:8b:76:a5:ff:5b:f4:
81:6c:a0:84:89:30:b0:9b:ec:58:72:4f:c1:d1:89:4b:3e:0f:
7d:cc:72:19:af:f6:55:75:a4:ac:51:73:e0:d4:59:be:08:5d:
a1:85:24:a4:32:ac:3a:24:d7:15:c1:7d:c3:ce:79:f9:70:d0:
a6:2c:70:11:88:2a:ac:bd:ee:b9:c2:cd:84:a2:d4:6f:54:e8:
c1:aa:1a:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIURId4yJeS+vgpL+BPo5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZmYwMGFlMmE2ZmVlZWQ2YTQ5ODdjYmM5MTM0NjdmZGZl
ZjgzZTgwHhcNMjYwMzAxMTYwMDMyWhcNMjYwMzAyMTYwMDMyWjAzMTEwLwYDVQQD
EyhlODZkZTFhMTBlMmY5OTgyM2VhZGJhZDNjMTY3NzQ4Yjg1MTM1ZmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtpYnsjLKLzrF6ZdVUN/9JBLLMTr
jImkODMxvZG97iiVTm9f8dXjIBlJlGM1jjwauGAfKpfn55Uct6x7vXzSeIwQvTAx
EOuw613UyM9Xk0j+As+jNt9rd0WWQmkurK01ZmoH8weNb3/KrvUIFJC0fa+tdWvo
JFTOdlp2YDhTfODzhjoZ96YcxWmDWOu75A1neGrqkvhJVVE/ODppWPQlftLgV9vy
hiYFsELB93hjx/ui7mt/5GrafM0T6y4gdN0LRcHmcsx/KvFSbhbfjhg6kf1EF/TM
sU8bbiFRSL4fktyN7F88L+BJNyKmDzhJYVrFxPLzK5DX0CiVyww/jBMOcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOht4aEOL5mCPq2608FndIuFE1/TMB8GA1UdIwQY
MBaAFDT/AK4qb+7takmHy8kTRn/f74PoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlA4QXJpcHY3dTFxU1lmTHlSTkdmOV92Zy1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mNDM0ZTMtY2E4OS00YTZkLWEyYWUt
OGIzZTQwMDYzODU4LzEvTlA4QXJpcHY3dTFxU1lmTHlSTkdmOV92Zy1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mNDM0ZTMtY2E4OS00YTZkLWEyYWUtOGIzZTQwMDYzODU4
LzEvTlA4QXJpcHY3dTFxU1lmTHlSTkdmOV92Zy1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6hLXFCt
s+jjucriTHv8NlwVYXr59fDNHzXyZ8Es0CJEsD9eRkcj2fBwPWCoPo4aiaaNmWBJ
L6X+3vkh9m5BE83Aac6bD437wbVYSW7eqJoKaYDlKaQXP7OAnGGcC065kR3R9wlX
4J/s0v6hOhiT6T7U4yaur6wTfaU9PzCoBCAGlfj33WWpzuNZZONhTufMlecfI9cT
DaeBPGoFP3WXrblSN4WIi4TqGe5jvvKFi3al/1v0gWyghIkwsJvsWHJPwdGJSz4P
fcxyGa/2VXWkrFFz4NRZvghdoYUkpDKsOiTXFcF9w855+XDQpixwEYgqrL3uucLN
hKLUb1TowaoaVQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:06 2026 by rpki-client