Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
File: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft (raw, json)
Hash identifier: ExWRDLgeuJYZ8uGVGQ8bV16sCbKYn4DFt6uQ+3/eoFc=
Subject key identifier: FF:6B:54:70:9E:38:A2:C3:CA:51:E0:2C:EC:DD:BC:4B:25:D4:59:6A
Authority key identifier: 35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
Certificate issuer: /CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Certificate serial: 01A184BECC3863CB836437C0B828C90E1D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
Manifest number: 1ACB
Signing time: Wed 28 Oct 2026 23:00:58 +0000
Manifest this update: Wed 28 Oct 2026 23:00:58 +0000
Manifest next update: Thu 29 Oct 2026 23:00:58 +0000
Files and hashes: 1: FEFxaV6JKNIg7q55qcKCrfCq-z4.roa (hash: b7JfyrsOhBHQzoGqHArOuD+GUoiR1U1SMxRpiIKCIn8=)
2: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl (hash: /piZxhVbQmbBNsvyzCs7EqpnHHn0OEu3Utfab/BmO74=)
3: baFyB991hO6zmvEFA-bUR-SSeO0.roa (hash: HCQWZRB071vWE048uQIisBvoukGqn9JR/elQALPMrxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:be:cc:38:63:cb:83:64:37:c0:b8:28:c9:0e:1d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Validity
Not Before: Oct 28 23:00:58 2026 GMT
Not After : Oct 29 23:00:58 2026 GMT
Subject: CN=ff6b54709e38a2c3ca51e02cecddbc4b25d4596a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:d9:57:0f:49:4a:63:92:e1:c3:58:b6:49:94:
29:bb:62:91:db:98:f0:e0:4d:20:f8:7e:cd:ad:aa:
1f:53:9a:3b:84:c0:c3:c0:84:1b:c5:f5:0e:25:0a:
21:30:d4:87:63:25:78:63:44:24:71:53:d3:77:27:
02:5b:f9:1f:48:28:f6:ef:1e:bd:86:cf:28:05:cf:
b2:dc:63:53:57:6d:c3:40:73:02:36:30:c5:d2:35:
e5:96:99:cc:13:2d:16:ad:cd:a9:4e:6e:4a:6e:88:
40:fb:cd:7b:0c:25:0a:60:9f:02:d4:d0:a5:7f:d2:
b4:59:73:74:35:c6:c3:e1:cf:fc:20:8d:ef:b7:4f:
a2:28:1f:ea:9c:9a:cf:9d:81:0b:6e:cf:05:71:28:
42:53:72:32:f7:05:6c:48:5d:56:cd:b3:e3:ae:b8:
d4:ff:b9:45:85:a1:67:8a:56:1e:a9:64:df:7b:c3:
e0:a4:66:cf:dc:58:6b:8c:d0:de:ce:7f:9c:36:b8:
95:84:62:1a:c5:ca:dc:cf:62:d6:f3:88:fd:01:e5:
9b:50:b2:e3:9d:78:c3:0a:57:d9:31:01:fb:2b:98:
1f:5c:e1:02:88:65:32:12:66:65:b6:ba:0d:8e:88:
31:9e:9d:c9:af:0f:12:63:fa:bd:90:19:45:41:95:
b0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6B:54:70:9E:38:A2:C3:CA:51:E0:2C:EC:DD:BC:4B:25:D4:59:6A
X509v3 Authority Key Identifier:
keyid:35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ff:bd:e9:bc:78:dd:3d:16:c7:71:cc:c0:0e:89:97:59:27:
dc:7c:ac:70:8f:15:b1:cb:84:af:34:c8:96:27:fc:8e:2a:22:
d8:ab:00:f4:9b:b6:dc:f1:fe:95:d7:ec:81:a2:0a:c4:e2:ba:
ca:6e:1e:c2:a2:4d:50:51:b4:0e:67:66:94:cf:90:7c:d1:f0:
e8:24:8b:e5:8b:cc:57:89:13:f9:e3:37:d9:42:3b:97:5c:e3:
c2:40:8f:74:75:02:60:c5:09:a8:49:21:2c:47:34:61:7f:df:
69:56:0e:7c:40:ef:b2:73:bd:c5:eb:5d:a5:4b:dd:14:4c:42:
a3:d7:cf:d0:d5:a9:13:ec:30:93:14:e3:09:d8:fa:aa:da:4f:
bc:c1:25:ac:5f:ba:84:8b:c8:be:13:b8:eb:76:4e:85:4c:c6:
19:c3:69:4b:a8:0d:63:bc:5d:22:2a:f3:38:31:83:f1:1c:e3:
c9:91:af:ac:ab:df:8e:96:53:8d:f3:23:dc:7d:89:ba:44:13:
05:5e:3f:c5:f1:65:23:9c:f1:40:ad:3c:d4:f8:54:53:12:b1:
28:a2:e1:90:56:e5:4f:d9:2f:c0:09:b7:70:a0:62:61:06:83:
a8:9d:ca:75:ca:d6:1a:1d:70:4c:1e:49:b8:4d:82:f0:67:87:
e5:73:3c:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGEvsw4Y8uDZDfAuCjJDh0VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1M2UzZjI4ZTY0N2U5MmFjOGE3MTBjMzA1YzJlMjFiNjIz
ZWRjMWMwHhcNMjYxMDI4MjMwMDU4WhcNMjYxMDI5MjMwMDU4WjAzMTEwLwYDVQQD
EyhmZjZiNTQ3MDllMzhhMmMzY2E1MWUwMmNlY2RkYmM0YjI1ZDQ1OTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+tlXD0lKY5Lhw1i2SZQpu2KR25jw
4E0g+H7NraofU5o7hMDDwIQbxfUOJQohMNSHYyV4Y0QkcVPTdycCW/kfSCj27x69
hs8oBc+y3GNTV23DQHMCNjDF0jXllpnMEy0Wrc2pTm5KbohA+817DCUKYJ8C1NCl
f9K0WXN0NcbD4c/8II3vt0+iKB/qnJrPnYELbs8FcShCU3Iy9wVsSF1WzbPjrrjU
/7lFhaFnilYeqWTfe8PgpGbP3FhrjNDezn+cNriVhGIaxcrcz2LW84j9AeWbULLj
nXjDClfZMQH7K5gfXOECiGUyEmZltroNjogxnp3Jrw8SY/q9kBlFQZWwiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9rVHCeOKLDylHgLOzdvEsl1FlqMB8GA1UdIwQY
MBaAFDU+PyjmR+kqyKcQwwXC4htiPtwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83Njc5MzMtNGE3My00YjJmLWFjODQt
ZGFjYTI2ZGU2ZjdiLzEvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83Njc5MzMtNGE3My00YjJmLWFjODQtZGFjYTI2ZGU2Zjdi
LzEvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/+96bx4
3T0Wx3HMwA6Jl1kn3HyscI8VscuErzTIlif8jioi2KsA9Ju23PH+ldfsgaIKxOK6
ym4ewqJNUFG0DmdmlM+QfNHw6CSL5YvMV4kT+eM32UI7l1zjwkCPdHUCYMUJqEkh
LEc0YX/faVYOfEDvsnO9xetdpUvdFExCo9fP0NWpE+wwkxTjCdj6qtpPvMElrF+6
hIvIvhO463ZOhUzGGcNpS6gNY7xdIirzODGD8RzjyZGvrKvfjpZTjfMj3H2JukQT
BV4/xfFlI5zxQK081PhUUxKxKKLhkFblT9kvwAm3cKBiYQaDqJ3KdcrWGh1wTB5J
uE2C8GeH5XM8Fg==
-----END CERTIFICATE-----
Generated at Thu Oct 29 05:47:44 2026 by rpki-client