Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
File: NPdSlbuVtVRThE8y1uOVCdO-zkU.mft (raw, json)
Hash identifier: 0jKMvlhUNbV+RM1FZhwCHt4eE0oEt5aNG9+bTt7bqO4=
Subject key identifier: 37:8C:2C:95:75:D2:57:7E:03:58:56:CA:90:E3:07:7B:40:AB:FA:FF
Authority key identifier: 34:F7:52:95:BB:95:B5:54:53:84:4F:32:D6:E3:95:09:D3:BE:CE:45
Certificate issuer: /CN=34f75295bb95b55453844f32d6e39509d3bece45
Certificate serial: 01A0C5FCE73E6C6114570F062AD0D272FD5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
Manifest number: 04DC
Signing time: Mon 21 Sep 2026 22:01:20 +0000
Manifest this update: Mon 21 Sep 2026 22:01:20 +0000
Manifest next update: Tue 22 Sep 2026 22:01:20 +0000
Files and hashes: 1: NPdSlbuVtVRThE8y1uOVCdO-zkU.crl (hash: KqKsEcAm7Yk/ehkFgdtor8SiVPXzJ0eiIVeqpemfoe4=)
2: U7LuUPl-UaS1Nz7kE-Ov6c0Y3U4.asa (hash: 4pjiq26J/GEImFtYQjL5TuBS9mjmJQu5GgR6+/ZZjEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:e7:3e:6c:61:14:57:0f:06:2a:d0:d2:72:fd:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f75295bb95b55453844f32d6e39509d3bece45
Validity
Not Before: Sep 21 22:01:20 2026 GMT
Not After : Sep 22 22:01:20 2026 GMT
Subject: CN=378c2c9575d2577e035856ca90e3077b40abfaff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0d:33:6a:e2:95:66:ab:e9:2c:d0:d2:1f:f1:
57:35:8a:92:86:97:18:70:18:32:01:26:a9:dd:ad:
bc:6b:d7:58:b0:c2:d8:57:4d:22:01:20:7a:57:4b:
ff:1b:ec:26:18:e5:10:a3:07:f8:26:3f:8f:7c:99:
1c:e3:6d:e6:df:c1:63:71:4d:be:7c:f5:da:52:bb:
b4:e9:b4:97:e8:e7:7f:1c:9c:70:d2:69:5f:8a:d2:
37:f6:83:b3:15:dc:64:f9:fd:e9:75:b7:32:11:38:
94:07:bf:66:c4:a4:57:8b:6c:05:6c:ff:be:23:6c:
b3:c5:22:7f:73:43:39:a4:b5:76:19:45:dc:fb:53:
9a:b8:a9:b3:6c:d7:e1:39:f3:68:70:e4:18:0f:b6:
2d:49:48:7a:7b:34:8f:ff:52:08:31:8d:97:7f:57:
86:dc:0b:5f:b1:a6:de:86:d6:2b:b3:7d:4b:4f:92:
3b:10:07:8f:00:13:73:e4:17:9a:14:05:b6:30:4f:
86:d1:33:de:6e:71:f8:76:54:8d:06:7d:f9:aa:cc:
b0:df:81:75:47:be:d1:1e:27:47:54:6f:a4:23:f3:
c7:c6:63:64:c3:66:00:fc:44:37:85:27:9e:ef:5f:
90:66:7c:ab:ff:45:a1:e8:56:f4:40:db:7e:2f:aa:
db:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8C:2C:95:75:D2:57:7E:03:58:56:CA:90:E3:07:7B:40:AB:FA:FF
X509v3 Authority Key Identifier:
keyid:34:F7:52:95:BB:95:B5:54:53:84:4F:32:D6:E3:95:09:D3:BE:CE:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:45:9b:20:69:3b:d8:7e:78:ee:9f:60:a9:c5:76:42:b4:0b:
04:fc:15:5f:49:40:bb:5d:62:23:70:b6:05:b9:44:e1:dd:4b:
ed:8f:c1:0e:fc:fd:8c:df:39:b7:70:91:53:e2:c7:5c:f6:cf:
d7:4f:10:75:74:eb:5c:49:8e:bf:cb:8c:55:ca:9d:e7:bb:da:
14:ce:f7:32:c1:62:9a:a4:d3:ff:bb:92:0b:ef:d7:39:48:47:
b5:0f:f5:35:5d:71:48:fb:d2:00:84:db:fb:bb:93:b9:cd:c0:
99:87:7e:1c:bb:fc:b1:d2:27:ef:e1:be:de:4f:bb:9f:b6:51:
7a:19:99:01:f4:84:e2:52:81:fa:37:f8:84:5c:cc:f5:10:f3:
27:d1:37:ea:8f:e4:ff:c1:b2:e6:42:b3:89:9c:79:d6:f1:2a:
6f:f2:63:b2:1f:de:d5:8b:a1:2e:73:8a:40:cf:cd:84:7f:38:
90:cf:8d:0f:23:dc:3f:f6:75:a9:c6:d8:d9:d4:fb:a1:a7:a8:
34:72:8b:01:17:0c:06:3e:32:d2:ee:2c:5e:8b:07:29:52:29:
27:e0:84:75:7b:d6:12:ca:d3:bd:83:f8:19:45:e6:50:12:9d:
ce:e4:89:62:10:42:a5:79:2b:65:5d:b8:57:c4:29:32:c4:a5:
7e:04:58:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:14:00 2026 by rpki-client