Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
File: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft (raw, json)
Hash identifier: T+KRlt+GBLTGS3PQEOox8R7HRBYVZz4awrd2L4XW4Ug=
Subject key identifier: 70:EC:F0:AA:3E:1A:5E:92:C0:9D:73:3A:FE:70:A4:3F:12:6A:72:F7
Authority key identifier: 35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
Certificate issuer: /CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Certificate serial: 01A18A8995B41D08E8C268DD316B1F8AB864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
Manifest number: 1ACE
Signing time: Fri 30 Oct 2026 02:00:34 +0000
Manifest this update: Fri 30 Oct 2026 02:00:34 +0000
Manifest next update: Sat 31 Oct 2026 02:00:34 +0000
Files and hashes: 1: FEFxaV6JKNIg7q55qcKCrfCq-z4.roa (hash: b7JfyrsOhBHQzoGqHArOuD+GUoiR1U1SMxRpiIKCIn8=)
2: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl (hash: q7T/xIvUdEHrC8mdUlaW0egmFRPm+oyuWwGkcx2CdD8=)
3: baFyB991hO6zmvEFA-bUR-SSeO0.roa (hash: HCQWZRB071vWE048uQIisBvoukGqn9JR/elQALPMrxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8a:89:95:b4:1d:08:e8:c2:68:dd:31:6b:1f:8a:b8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Validity
Not Before: Oct 30 02:00:34 2026 GMT
Not After : Oct 31 02:00:34 2026 GMT
Subject: CN=70ecf0aa3e1a5e92c09d733afe70a43f126a72f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:64:ba:31:18:ac:f3:fa:ff:df:36:b7:32:fe:
f4:14:6f:ec:1e:01:ef:c7:e8:cf:ff:c2:a3:51:b8:
91:74:62:c2:44:7f:a4:4f:60:f7:26:22:ec:1b:e5:
36:d1:9a:5a:12:32:3c:29:1b:83:14:f5:8f:85:15:
5f:f3:a8:92:0a:0c:76:a1:fe:c5:f6:f1:b2:4d:75:
a7:49:8a:70:a1:c0:0b:75:26:fa:52:07:71:90:cd:
7c:86:33:6a:f7:69:e7:14:61:1a:3c:91:9a:18:c5:
b6:56:b1:b6:4f:0b:e1:15:a2:30:97:5b:87:0b:a1:
74:ee:38:ff:4d:1c:be:27:fb:da:b2:7b:7c:f3:38:
f4:db:9d:3c:a4:08:b2:b7:e9:28:ae:9d:2c:7a:ce:
69:3d:31:0e:6a:fe:8b:e2:5f:a3:1f:16:2d:69:1e:
bd:0b:f6:63:f3:e7:57:3f:1e:c2:05:ce:30:46:51:
e5:a6:e3:10:f4:4a:14:dc:08:89:b6:78:77:62:8f:
74:ed:31:49:a9:c6:4d:b2:e9:2e:6a:93:c4:08:72:
85:e2:4d:57:9b:e7:d0:0f:b7:57:39:be:e6:c3:07:
a4:10:d1:1b:5c:b3:7b:2f:30:a2:12:f0:39:9a:e8:
c1:2d:5a:d6:89:b7:44:c4:86:7a:b0:f0:9d:4f:0f:
5d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EC:F0:AA:3E:1A:5E:92:C0:9D:73:3A:FE:70:A4:3F:12:6A:72:F7
X509v3 Authority Key Identifier:
keyid:35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:fd:24:60:37:2c:6d:ee:f9:d8:fa:ad:59:33:5a:81:43:e1:
ec:d7:2c:88:a5:96:9f:80:ce:2a:33:22:8c:63:41:6a:b6:39:
a2:37:4b:ad:4d:a0:79:a8:fc:4a:d5:ba:b7:24:67:27:21:ff:
62:9a:21:67:72:f7:7c:5a:0e:de:15:48:43:63:9c:51:e1:a5:
30:60:60:e2:e3:df:fe:41:aa:6f:69:5d:8a:68:be:73:07:7e:
78:7e:4b:34:5e:5a:63:e2:1b:61:f9:8b:2f:e5:ed:51:52:04:
da:e6:cd:3a:9c:0f:2a:3c:55:60:ed:ca:21:e3:1d:99:26:17:
12:f2:fe:15:bb:c3:87:4d:6b:73:c2:78:5d:9b:db:1a:0d:0a:
d9:a5:fc:e4:0e:7d:fa:14:4e:47:b0:ac:86:ec:85:c3:b6:9c:
65:2f:cd:de:72:7a:fd:4f:65:4d:0a:36:fb:05:25:fe:b0:89:
c4:96:34:a1:7c:18:db:3c:05:65:a3:45:db:15:a1:4c:61:8b:
e4:30:b1:de:d3:4d:cf:ff:3e:8f:8c:2c:e1:c8:9c:b9:06:63:
7b:21:a3:6e:51:d9:79:a7:c1:43:44:e9:42:13:69:42:c3:88:
28:b5:15:48:5e:9c:43:81:8e:1a:22:a7:3c:99:5f:75:08:4c:
d3:8a:2b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:23:43 2026 by rpki-client