Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
File: NPwYIZBVFuYYMg6eRxoTsqqslv8.mft (raw, json)
Hash identifier: D9zaJgdPdSWujHW216eskw/bQh+eI7q9yzi38XT6XcA=
Subject key identifier: D1:00:1A:09:1A:6A:5B:60:F3:2A:F3:67:03:FA:DA:A1:9A:2B:72:9B
Authority key identifier: 34:FC:18:21:90:55:16:E6:18:32:0E:9E:47:1A:13:B2:AA:AC:96:FF
Certificate issuer: /CN=34fc1821905516e618320e9e471a13b2aaac96ff
Certificate serial: 019DA30A9330134EA1CD8BCD4BCF638EDDB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
Manifest number: 18C6
Signing time: Sun 19 Apr 2026 00:01:12 +0000
Manifest this update: Sun 19 Apr 2026 00:01:12 +0000
Manifest next update: Mon 20 Apr 2026 00:01:12 +0000
Files and hashes: 1: FT4kAT6lWQN00FHh3OTXw40E65E.roa (hash: GFS78DgVCOqhb0Wz+qsE+LrfZ/kjwcDR1Tvaz5iQcCc=)
2: NPwYIZBVFuYYMg6eRxoTsqqslv8.crl (hash: MnOlEP4sUsQF/vv/qTiwctruZ/PA5C+d0oAOZiMMmaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:93:30:13:4e:a1:cd:8b:cd:4b:cf:63:8e:dd:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34fc1821905516e618320e9e471a13b2aaac96ff
Validity
Not Before: Apr 19 00:01:12 2026 GMT
Not After : Apr 20 00:01:12 2026 GMT
Subject: CN=d1001a091a6a5b60f32af36703fadaa19a2b729b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a3:eb:1f:3f:78:12:72:9c:f2:9e:96:e6:b4:
32:50:0c:5e:53:fa:6d:e7:ff:83:2b:3a:13:27:03:
53:5d:92:41:01:6f:26:80:26:03:c7:b6:92:11:09:
2e:6d:2d:e6:b2:59:fa:fb:c1:ee:78:78:48:f4:b2:
82:0b:be:21:38:2a:fd:2a:8e:85:e1:cd:71:1e:36:
cb:ef:c6:28:42:4f:75:f5:04:0c:48:fb:48:19:96:
62:c9:b0:f8:0f:7d:67:e0:8f:7c:41:a0:ea:b3:9c:
6a:ac:ba:79:4c:c6:fa:03:a6:cf:f2:73:d2:e8:0a:
b8:72:cd:c6:96:57:7e:d4:6d:e2:ab:4b:bb:0a:c3:
1c:69:7e:53:b4:f4:97:39:1f:39:2d:5c:a9:46:dd:
4d:0d:89:bb:24:85:1b:96:59:68:3d:a2:5d:98:32:
56:fb:73:73:e7:51:c6:79:62:14:3a:92:f6:2d:9a:
78:58:86:b4:07:7a:8a:70:32:7e:39:7c:d7:35:21:
ba:2c:78:c7:1a:13:e4:17:04:e4:dc:47:88:56:f1:
23:0e:b4:5d:73:dd:2d:49:63:d3:ef:b8:53:12:42:
40:77:63:49:aa:4c:20:45:e2:51:5e:7d:0d:68:72:
6f:68:56:e1:a2:a9:72:f8:90:15:0d:d6:70:7a:37:
d8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:00:1A:09:1A:6A:5B:60:F3:2A:F3:67:03:FA:DA:A1:9A:2B:72:9B
X509v3 Authority Key Identifier:
keyid:34:FC:18:21:90:55:16:E6:18:32:0E:9E:47:1A:13:B2:AA:AC:96:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:d4:e0:c8:8d:6f:6c:28:02:f1:c0:c9:b8:c8:97:0b:e7:bd:
68:02:6e:88:57:9c:da:82:4f:1a:68:cc:f3:25:1b:c7:63:33:
ab:68:9a:ed:52:09:c1:ae:b7:3b:5f:81:aa:0b:98:2d:d9:f4:
11:84:ad:ac:ec:56:a8:c7:f9:a1:b8:4e:6d:87:c0:99:b8:7b:
01:91:30:56:7e:69:51:0c:36:f0:49:9f:57:56:66:55:5b:b5:
80:77:46:42:54:56:89:a4:02:52:35:58:ed:4b:a0:fe:a8:d9:
2a:ad:ab:8c:de:8e:fe:0b:69:b2:0e:25:29:cd:fa:25:98:c6:
cb:e8:c0:98:5a:9e:97:29:12:11:35:7c:1e:e0:a2:ed:5f:bb:
50:a2:35:13:f6:91:93:14:76:10:7a:e3:6d:46:8c:08:3c:d6:
9b:42:34:be:e6:12:01:44:f8:ef:e1:72:10:e4:44:81:ac:02:
91:c2:4d:23:6c:1c:df:0e:ce:74:7d:ad:76:e1:ed:42:24:e3:
0e:e6:cf:99:ac:d9:74:31:ca:ef:bc:f2:9d:9d:b2:7b:54:fb:
18:3f:5d:5b:f0:81:a8:54:f6:36:ed:01:07:9a:78:9d:f3:e5:
08:92:e9:db:56:56:f9:48:db:d5:b3:9b:b7:21:d9:87:63:9f:
78:a0:18:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jCpMwE06hzYvNS89jjt23MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZmMxODIxOTA1NTE2ZTYxODMyMGU5ZTQ3MWExM2IyYWFh
Yzk2ZmYwHhcNMjYwNDE5MDAwMTEyWhcNMjYwNDIwMDAwMTEyWjAzMTEwLwYDVQQD
EyhkMTAwMWEwOTFhNmE1YjYwZjMyYWYzNjcwM2ZhZGFhMTlhMmI3MjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraPrHz94EnKc8p6W5rQyUAxeU/pt
5/+DKzoTJwNTXZJBAW8mgCYDx7aSEQkubS3msln6+8HueHhI9LKCC74hOCr9Ko6F
4c1xHjbL78YoQk919QQMSPtIGZZiybD4D31n4I98QaDqs5xqrLp5TMb6A6bP8nPS
6Aq4cs3Glld+1G3iq0u7CsMcaX5TtPSXOR85LVypRt1NDYm7JIUbllloPaJdmDJW
+3Nz51HGeWIUOpL2LZp4WIa0B3qKcDJ+OXzXNSG6LHjHGhPkFwTk3EeIVvEjDrRd
c90tSWPT77hTEkJAd2NJqkwgReJRXn0NaHJvaFbhoqly+JAVDdZwejfYfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEAGgkaaltg8yrzZwP62qGaK3KbMB8GA1UdIwQY
MBaAFDT8GCGQVRbmGDIOnkcaE7KqrJb/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlB3WUlaQlZGdVlZTWc2ZVJ4b1RzcXFzbHY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84NGI1NzUtNTU2My00ZjFiLTg2NWEt
ODE1ZWVhMzNiMzViLzEvTlB3WUlaQlZGdVlZTWc2ZVJ4b1RzcXFzbHY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84NGI1NzUtNTU2My00ZjFiLTg2NWEtODE1ZWVhMzNiMzVi
LzEvTlB3WUlaQlZGdVlZTWc2ZVJ4b1RzcXFzbHY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw9TgyI1v
bCgC8cDJuMiXC+e9aAJuiFec2oJPGmjM8yUbx2Mzq2ia7VIJwa63O1+BqguYLdn0
EYStrOxWqMf5obhObYfAmbh7AZEwVn5pUQw28EmfV1ZmVVu1gHdGQlRWiaQCUjVY
7Uug/qjZKq2rjN6O/gtpsg4lKc36JZjGy+jAmFqelykSETV8HuCi7V+7UKI1E/aR
kxR2EHrjbUaMCDzWm0I0vuYSAUT47+FyEOREgawCkcJNI2wc3w7OdH2tduHtQiTj
DubPmazZdDHK77zynZ2ye1T7GD9dW/CBqFT2Nu0BB5p4nfPlCJLp21ZW+Ujb1bOb
tyHZh2OfeKAY/w==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:32:44 2026 by rpki-client