Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
File: NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft (raw, json)
Hash identifier: OIyy4N62Sel0RZgnfTqwOEko95XD7gLGZOrDUDkSRFo=
Subject key identifier: 84:5F:2F:26:BF:9A:E3:AC:E5:26:5C:64:4F:73:A2:23:88:BD:2A:E3
Authority key identifier: 34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
Certificate issuer: /CN=34f78361a077b0d789135ccd68b1261db138f950
Certificate serial: 019D9998FBC8227AC990308141FA73C53F60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
Manifest number: 12BD
Signing time: Fri 17 Apr 2026 04:00:33 +0000
Manifest this update: Fri 17 Apr 2026 04:00:33 +0000
Manifest next update: Sat 18 Apr 2026 04:00:33 +0000
Files and hashes: 1: 8d-0n5QXgWSBRoTXLSmO5ePVF_Q.roa (hash: 4bi8HBY89WSg/0IezYkrsaa7KDMO+ZPuMjHVuXQc5nM=)
2: NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl (hash: 0zy10AGBuGkZ0viiUSWDujjCVgWV2/3mwgzh6AlYiGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:fb:c8:22:7a:c9:90:30:81:41:fa:73:c5:3f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f78361a077b0d789135ccd68b1261db138f950
Validity
Not Before: Apr 17 04:00:33 2026 GMT
Not After : Apr 18 04:00:33 2026 GMT
Subject: CN=845f2f26bf9ae3ace5265c644f73a22388bd2ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:64:b2:1e:0d:0e:08:c5:c3:3a:8f:b1:d0:c6:
c3:bf:96:cf:36:55:aa:81:db:ac:aa:47:24:dc:af:
97:67:2f:3d:28:82:04:04:e7:fa:c2:0b:ea:cb:84:
62:70:a7:00:b4:bd:93:b3:a8:a2:b0:75:e4:4d:59:
a7:ee:f6:0c:8a:f4:59:7b:d5:f7:50:63:ef:c5:8f:
73:9e:21:60:21:dc:c0:1d:eb:c8:fa:d1:79:26:27:
35:a3:30:3e:ed:69:d7:b7:a2:93:18:e6:f8:58:46:
e2:c7:b4:8e:c7:0c:87:87:56:8b:7a:ef:51:e2:1d:
b9:1f:6d:c5:0c:bd:97:35:aa:c9:9a:ce:8d:8b:78:
c1:03:7c:4d:e4:18:ee:bb:42:e0:a9:bf:94:45:91:
65:99:a9:9f:a1:20:a8:37:33:b1:30:41:63:54:58:
3f:3d:a9:df:94:75:a3:7f:0b:d6:32:c6:e3:c5:45:
cd:9f:d0:2a:10:51:2b:ed:2e:1e:36:89:c8:3f:e6:
32:e1:54:79:03:a3:39:b3:d0:e7:64:bb:b3:b3:f6:
78:c5:71:e1:66:a2:fb:05:92:92:91:94:38:69:94:
da:a7:e0:c7:f2:02:b3:73:84:88:b0:78:6c:69:fd:
af:2b:eb:97:62:71:6b:2c:cc:04:6d:b1:44:6d:a2:
ce:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5F:2F:26:BF:9A:E3:AC:E5:26:5C:64:4F:73:A2:23:88:BD:2A:E3
X509v3 Authority Key Identifier:
keyid:34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:0a:f3:ef:a7:8f:fd:1a:3a:f4:79:a0:45:10:fa:3d:04:89:
af:f1:a7:ea:99:84:7c:39:e4:a0:61:4d:e6:00:d9:0c:db:75:
c4:de:c8:2b:ea:75:44:c5:c7:42:be:96:a5:df:39:e6:75:e8:
eb:dd:ad:6c:d4:24:87:e9:4b:44:75:c0:9e:b9:a3:b6:d0:67:
c1:25:7d:93:dc:20:28:35:5c:bf:82:64:86:9d:e2:74:31:19:
d4:37:63:a7:fe:58:c1:74:ba:fc:d2:e7:b7:7e:7b:2a:b0:88:
28:c6:69:fe:43:c1:97:11:28:64:05:15:b4:e9:61:dc:51:d5:
37:10:af:32:89:84:50:d8:d5:d8:b2:01:be:8e:98:cc:48:d0:
3c:45:1d:8d:a8:33:41:07:d5:cc:a7:3c:71:10:1a:f7:89:9d:
f1:5d:37:d1:e9:92:ed:d6:5f:0b:f1:dc:d6:35:3f:23:38:4b:
db:aa:a8:19:13:37:4f:2b:ab:e0:11:3c:78:db:47:d8:e0:24:
15:2c:ba:32:a5:c2:a0:8a:63:87:0f:2f:9b:15:68:61:1c:ce:
fe:74:36:d1:5f:b6:79:58:6c:7e:55:ec:3f:50:ed:65:4c:29:
71:50:90:74:b8:44:44:b8:30:85:52:7c:6c:55:c4:8e:c2:46:
3d:39:22:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:32:43 2026 by rpki-client