Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
File: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft (raw, json)
Hash identifier: wzLUTg0FpY6yVgotJdZyH5RXZpTl9vj+K6vHdBgP5eE=
Subject key identifier: 52:F7:1E:2D:A3:56:D4:B1:28:CE:5C:14:F7:45:95:C8:9F:97:43:8E
Authority key identifier: 35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
Certificate issuer: /CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Certificate serial: 01A089B1245DEDA41606A61BDAB6DC7FB965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 05:01:22 +0000
Manifest this update: Thu 10 Sep 2026 05:01:22 +0000
Manifest next update: Fri 11 Sep 2026 05:01:22 +0000
Files and hashes: 1: FEFxaV6JKNIg7q55qcKCrfCq-z4.roa (hash: b7JfyrsOhBHQzoGqHArOuD+GUoiR1U1SMxRpiIKCIn8=)
2: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl (hash: 6CyiezG4xFDJqh+kw8nX7QSlUYHLXotrEwesbcogwbg=)
3: baFyB991hO6zmvEFA-bUR-SSeO0.roa (hash: HCQWZRB071vWE048uQIisBvoukGqn9JR/elQALPMrxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:b1:24:5d:ed:a4:16:06:a6:1b:da:b6:dc:7f:b9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Validity
Not Before: Sep 10 05:01:22 2026 GMT
Not After : Sep 11 05:01:22 2026 GMT
Subject: CN=52f71e2da356d4b128ce5c14f74595c89f97438e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fc:c0:43:7d:22:25:2f:e2:80:48:22:04:6e:
2f:a2:99:c7:df:d2:c7:09:53:9b:b6:57:a4:10:c7:
b6:46:b3:bd:b3:6f:89:ba:6c:d0:c2:59:c5:2b:f4:
1b:9e:f1:43:8f:94:8a:29:54:18:b8:50:f9:30:c9:
33:f5:1d:ef:2c:ed:bc:37:51:d8:98:91:1f:fd:25:
da:bc:01:e2:fc:7d:3a:40:88:ab:e5:9f:09:c8:ed:
2e:c8:43:3f:fc:ff:49:9b:77:0d:54:6e:8c:f6:50:
47:c0:dc:9c:40:47:2c:f8:33:d5:d0:a9:06:c8:9e:
5f:5c:16:94:ec:a5:d9:0c:d8:04:88:98:c1:aa:31:
fb:63:72:f4:f0:0d:ff:5a:95:70:87:e1:7c:ca:27:
97:0d:b4:17:f3:a9:d3:82:93:f1:e7:c8:4b:6e:d4:
c9:03:7b:50:f4:1d:2d:43:c9:82:65:b7:89:57:4b:
4a:d0:a2:4f:62:b4:30:fa:a0:42:9a:b5:21:b7:09:
90:a6:1e:e3:27:d7:3d:8d:b1:dd:1f:62:ef:22:3c:
54:92:b0:a7:1e:d4:25:d1:dc:90:87:cf:d7:08:e5:
8e:88:e5:dc:00:6c:39:9b:d5:a7:c1:ac:b7:82:49:
45:46:f7:66:41:7d:44:e5:8d:b7:61:9f:a4:cc:33:
ed:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F7:1E:2D:A3:56:D4:B1:28:CE:5C:14:F7:45:95:C8:9F:97:43:8E
X509v3 Authority Key Identifier:
keyid:35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ca:59:c5:1e:0e:4e:1d:ec:8b:92:7e:d2:02:46:b6:fe:cf:
fa:9f:bd:21:51:c6:bb:8d:ac:31:3c:a1:e7:6e:f4:22:f3:6a:
83:3e:66:2d:32:b4:bb:d2:77:3a:74:24:eb:eb:fc:49:87:f0:
0d:f5:11:c1:d9:99:a1:90:2c:78:d4:83:49:2d:cf:77:2d:d9:
ad:12:9b:bb:ea:78:2a:37:11:47:d0:5f:ee:df:c2:fa:e8:e9:
00:a6:b4:a2:50:9b:18:1f:24:f7:77:f9:71:a3:37:53:6a:ef:
59:dd:70:de:fc:af:df:ca:45:1a:97:aa:f9:ac:77:67:e0:ef:
cc:a2:8c:50:0a:09:e4:50:82:29:fd:e9:c8:18:cf:fd:67:36:
6c:01:da:fe:fd:37:6e:25:bb:31:f3:0b:2d:a2:f2:0a:94:04:
85:40:05:65:95:01:cd:39:7d:4c:e0:4e:66:b7:f4:39:cd:7a:
a1:08:cd:d1:c3:d1:1b:83:55:c6:92:4d:49:61:6f:bd:28:7d:
63:6c:b1:50:35:0e:07:b0:a6:42:8c:bf:b4:81:7a:fd:f8:6b:
c7:73:21:41:ba:79:bf:21:76:2b:6a:5b:6e:84:44:de:01:27:
50:02:76:99:34:66:f1:e1:d2:3e:2f:5e:64:5d:41:6f:8b:f5:
47:5b:3b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:02:56 2026 by rpki-client