Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
File: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft (raw, json)
Hash identifier: gl4bYfUoy3dm0l+vWcc5pdRsRTASN2McZBiSEH92cEk=
Subject key identifier: 03:C6:79:F6:D9:AD:87:2D:89:13:18:06:41:98:EE:44:90:85:36:37
Authority key identifier: 35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
Certificate issuer: /CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Certificate serial: 019F9E1602DDF5445CE88DDD410FD6D6A185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
Manifest number: 19CF
Signing time: Sun 26 Jul 2026 11:01:10 +0000
Manifest this update: Sun 26 Jul 2026 11:01:10 +0000
Manifest next update: Mon 27 Jul 2026 11:01:10 +0000
Files and hashes: 1: FEFxaV6JKNIg7q55qcKCrfCq-z4.roa (hash: b7JfyrsOhBHQzoGqHArOuD+GUoiR1U1SMxRpiIKCIn8=)
2: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl (hash: ms4Qx+MyydKWnXOJcPFqr5G3OsvqrQ0vmGoqjOlRo9s=)
3: baFyB991hO6zmvEFA-bUR-SSeO0.roa (hash: HCQWZRB071vWE048uQIisBvoukGqn9JR/elQALPMrxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:16:02:dd:f5:44:5c:e8:8d:dd:41:0f:d6:d6:a1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Validity
Not Before: Jul 26 11:01:10 2026 GMT
Not After : Jul 27 11:01:10 2026 GMT
Subject: CN=03c679f6d9ad872d891318064198ee4490853637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4d:93:62:7e:c3:31:45:76:88:3c:22:df:12:
d9:e8:6a:b5:65:7f:4e:6e:0d:97:c2:2d:77:c9:ed:
b2:42:1d:b2:5c:f4:cb:2e:55:d8:74:57:7b:2a:9f:
89:a4:25:cb:6a:67:10:04:12:bf:29:5d:a1:0c:f7:
ae:e8:45:ef:84:86:70:40:d7:9d:77:4c:c7:c8:b7:
3b:6e:bc:77:b0:4f:ae:09:41:b6:0d:a4:43:7e:ce:
3e:b7:71:34:0b:a9:af:a1:f0:02:06:dd:84:3d:6e:
e1:f5:9a:43:89:cf:0e:1d:42:0c:dd:2e:3b:33:32:
8b:22:e2:8a:21:b4:a3:0e:7f:9f:c5:60:b1:d8:93:
cc:88:27:04:a7:cd:cd:c7:9f:59:51:ed:24:89:68:
ea:34:8e:74:23:3b:5f:b0:b5:91:b9:14:3b:4b:e1:
f5:13:83:23:63:91:70:07:0d:7d:20:86:82:7d:86:
af:73:70:7a:bc:ee:d1:08:c7:dc:aa:08:5f:20:da:
17:cc:48:a1:42:85:a8:28:1f:9f:12:ed:dc:71:2a:
a0:d9:3b:87:95:c3:29:8c:c6:ca:34:b9:3e:c1:79:
ad:7d:18:7e:89:70:95:9a:05:9b:98:f9:df:fe:c1:
8e:94:76:b3:f6:b7:33:fe:0e:05:50:19:ff:5c:96:
82:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C6:79:F6:D9:AD:87:2D:89:13:18:06:41:98:EE:44:90:85:36:37
X509v3 Authority Key Identifier:
keyid:35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c5:9c:5c:c7:6c:55:70:8d:ec:fb:58:b1:b8:01:72:28:9c:
c9:f5:3a:67:9e:a4:9f:49:d0:a2:20:2d:ca:0e:01:34:c1:a8:
36:cb:0d:55:e0:da:66:d6:0d:99:5b:1a:bb:14:5f:bc:dc:29:
fc:92:6d:6e:cf:2a:96:c3:7c:4b:e7:ae:e8:01:7e:58:8b:f4:
dd:b4:7f:13:94:c1:54:7e:f9:42:47:a0:9f:eb:06:a3:27:97:
f8:d4:42:86:6a:5f:9a:4c:a0:5c:98:56:9d:5a:14:5e:bf:ea:
b9:41:08:a5:b0:4c:e8:6a:60:1f:04:29:b6:4b:ee:08:59:dc:
c9:40:d5:dd:93:2c:e9:4c:f7:bb:a1:3c:95:71:a9:77:a9:8d:
d3:0b:8f:28:cd:63:48:79:3d:d2:f6:57:e1:f8:06:bc:20:54:
18:42:4a:69:61:75:18:9e:5a:d7:a3:03:46:60:e8:a5:dc:98:
fa:82:fe:26:95:9e:1b:8c:7e:74:6c:e9:ca:2e:4b:6f:4b:15:
da:b0:6a:af:74:44:33:16:69:7b:14:16:33:21:6e:b0:b3:db:
f8:4a:7e:45:47:33:38:b3:66:1d:fa:87:c3:c2:cc:1d:00:49:
36:8d:2d:b7:10:0a:40:dc:75:06:1a:85:7b:79:14:f7:55:9d:
38:54:b1:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+eFgLd9URc6I3dQQ/W1qGFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1M2UzZjI4ZTY0N2U5MmFjOGE3MTBjMzA1YzJlMjFiNjIz
ZWRjMWMwHhcNMjYwNzI2MTEwMTEwWhcNMjYwNzI3MTEwMTEwWjAzMTEwLwYDVQQD
EygwM2M2NzlmNmQ5YWQ4NzJkODkxMzE4MDY0MTk4ZWU0NDkwODUzNjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnE2TYn7DMUV2iDwi3xLZ6Gq1ZX9O
bg2Xwi13ye2yQh2yXPTLLlXYdFd7Kp+JpCXLamcQBBK/KV2hDPeu6EXvhIZwQNed
d0zHyLc7brx3sE+uCUG2DaRDfs4+t3E0C6mvofACBt2EPW7h9ZpDic8OHUIM3S47
MzKLIuKKIbSjDn+fxWCx2JPMiCcEp83Nx59ZUe0kiWjqNI50IztfsLWRuRQ7S+H1
E4MjY5FwBw19IIaCfYavc3B6vO7RCMfcqghfINoXzEihQoWoKB+fEu3ccSqg2TuH
lcMpjMbKNLk+wXmtfRh+iXCVmgWbmPnf/sGOlHaz9rcz/g4FUBn/XJaCuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPGefbZrYctiRMYBkGY7kSQhTY3MB8GA1UdIwQY
MBaAFDU+PyjmR+kqyKcQwwXC4htiPtwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83Njc5MzMtNGE3My00YjJmLWFjODQt
ZGFjYTI2ZGU2ZjdiLzEvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83Njc5MzMtNGE3My00YjJmLWFjODQtZGFjYTI2ZGU2Zjdi
LzEvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMWcXMds
VXCN7PtYsbgBciicyfU6Z56kn0nQoiAtyg4BNMGoNssNVeDaZtYNmVsauxRfvNwp
/JJtbs8qlsN8S+eu6AF+WIv03bR/E5TBVH75Qkegn+sGoyeX+NRChmpfmkygXJhW
nVoUXr/quUEIpbBM6GpgHwQptkvuCFncyUDV3ZMs6Uz3u6E8lXGpd6mN0wuPKM1j
SHk90vZX4fgGvCBUGEJKaWF1GJ5a16MDRmDopdyY+oL+JpWeG4x+dGzpyi5Lb0sV
2rBqr3REMxZpexQWMyFusLPb+Ep+RUczOLNmHfqHw8LMHQBJNo0ttxAKQNx1BhqF
e3kU91WdOFSxwQ==
-----END CERTIFICATE-----
Generated at Sun Jul 26 20:33:21 2026 by rpki-client