Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
File: NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft (raw, json)
Hash identifier: dtKd58yQCHXd3wzQanU57DecdJJ/eGzn4bd82+Eo8Co=
Subject key identifier: EA:C0:28:EF:A8:20:2F:31:BA:4E:FD:7E:81:98:A6:37:2A:84:EF:AA
Authority key identifier: 34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
Certificate issuer: /CN=34f78361a077b0d789135ccd68b1261db138f950
Certificate serial: 019CAC0FD12241A96D59EBC10778ADE50CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
Manifest number: 1242
Signing time: Mon 02 Mar 2026 01:00:43 +0000
Manifest this update: Mon 02 Mar 2026 01:00:43 +0000
Manifest next update: Tue 03 Mar 2026 01:00:43 +0000
Files and hashes: 1: 8d-0n5QXgWSBRoTXLSmO5ePVF_Q.roa (hash: 4bi8HBY89WSg/0IezYkrsaa7KDMO+ZPuMjHVuXQc5nM=)
2: NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl (hash: uxZ9bwXK1yN5tpdaGbqkTI9m+UQ/pWt6Kzfmltp0zMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:d1:22:41:a9:6d:59:eb:c1:07:78:ad:e5:0c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f78361a077b0d789135ccd68b1261db138f950
Validity
Not Before: Mar 2 01:00:43 2026 GMT
Not After : Mar 3 01:00:43 2026 GMT
Subject: CN=eac028efa8202f31ba4efd7e8198a6372a84efaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:90:c1:74:fb:57:20:ab:f7:1f:19:0f:c3:82:
23:8c:d5:0d:79:8b:69:45:64:cf:e1:37:d6:97:9a:
96:2d:a8:f3:ce:07:e6:d5:e1:a8:71:68:75:50:8d:
a0:06:28:33:d8:17:db:b6:e5:19:26:dc:dc:64:89:
f2:b6:ad:3e:07:15:91:50:fe:c6:3b:b9:fb:f7:43:
84:ab:21:fd:a6:2e:c6:59:32:50:bc:3d:3c:1f:f0:
20:6a:53:e9:2c:69:47:c7:8d:f7:a1:b7:3a:51:2b:
12:e3:66:ce:40:ab:23:f0:5c:eb:d3:f1:8b:f7:3a:
e9:41:91:1a:dc:bf:b1:50:a4:51:e4:58:72:e1:a6:
7c:bf:a8:b0:6e:d1:0d:40:8a:44:7f:a0:38:61:ff:
f8:3f:69:b8:01:45:2c:b0:d6:20:49:d8:0d:2f:f2:
46:2a:f1:71:50:fe:68:89:15:d4:5e:80:e6:f6:be:
f6:f0:97:05:4b:9f:5e:79:48:d3:e4:5f:08:42:36:
37:19:8c:b9:96:f4:a8:fb:e9:42:9f:f6:ce:a2:d9:
20:af:a4:99:a3:64:06:6d:f3:87:a7:c0:10:5e:2c:
31:b6:fd:be:4e:4a:60:27:12:88:eb:d2:ce:3c:50:
c8:6e:60:8a:13:18:19:a1:36:f9:e1:aa:99:26:04:
5f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C0:28:EF:A8:20:2F:31:BA:4E:FD:7E:81:98:A6:37:2A:84:EF:AA
X509v3 Authority Key Identifier:
keyid:34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c6:66:1d:c0:67:8e:45:bf:40:f8:bd:bb:8a:94:2c:77:9f:
e3:44:3a:90:ab:61:be:e0:5e:ea:3c:9a:73:7c:0e:65:de:16:
d1:98:ed:45:17:52:03:20:76:24:7f:27:02:ad:ed:3f:85:9e:
82:4d:8a:f9:2e:23:55:22:d3:eb:ce:a6:bb:18:0c:26:a8:c9:
1d:b2:96:0b:68:b3:e2:90:68:36:77:f2:53:c3:6a:78:22:07:
da:d4:ce:5b:6a:43:d2:d7:77:eb:43:ae:c1:2c:60:5b:82:09:
9e:7c:7d:d1:37:b7:e8:22:59:a5:c8:bf:18:57:31:c5:bf:1c:
6f:dd:37:e2:0d:93:bb:ac:be:ea:bd:08:37:bd:e4:ef:ab:bf:
42:4d:92:2b:49:bb:66:48:07:7d:76:b5:29:30:63:3f:f7:3d:
45:90:d0:6d:76:dc:6c:91:7d:b6:db:04:6a:fa:58:56:2e:0b:
c6:53:0a:01:14:e0:23:a6:f1:46:d9:09:fd:3d:83:c7:97:fa:
5a:d6:f2:63:f1:6c:db:14:ea:14:98:e8:f7:1a:64:43:0b:65:
35:2a:8f:a3:df:b5:ca:3d:09:41:3a:3f:6c:d1:33:57:9d:9a:
4a:01:08:28:f6:ed:31:af:50:0a:ad:e6:f2:4b:ad:b6:0a:5e:
ca:8e:9e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:35:35 2026 by rpki-client