Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.mft
File: NTPUOQNczcXww50bP7FhlbVV_KM.mft (raw, json)
Hash identifier: 3dDs/YLTCAw8zfhkgHPvXVFsb3URsvsYj15rD36uELI=
Subject key identifier: 7B:1A:70:B8:A0:79:DB:A5:DA:D4:7F:CE:E3:2D:03:CF:FE:F1:59:1A
Authority key identifier: 35:33:D4:39:03:5C:CD:C5:F0:C3:9D:1B:3F:B1:61:95:B5:55:FC:A3
Certificate issuer: /CN=3533d439035ccdc5f0c39d1b3fb16195b555fca3
Certificate serial: 019F84FB0DDC9FD4C26DCD27C39C2E146A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NTPUOQNczcXww50bP7FhlbVV_KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.mft
Manifest number: 0EB6
Signing time: Tue 21 Jul 2026 14:01:13 +0000
Manifest this update: Tue 21 Jul 2026 14:01:13 +0000
Manifest next update: Wed 22 Jul 2026 14:01:13 +0000
Files and hashes: 1: GkloadKipNGLxGdn49lnbZG57SQ.roa (hash: HQ8BBGVI4OetCOmU12/iTT2SoIrhzR4vqVTSloeX4A8=)
2: NTPUOQNczcXww50bP7FhlbVV_KM.crl (hash: AXucCzpytGt7QrWYxzsJbYGtxiENkZEmH6JlG9KuN9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NTPUOQNczcXww50bP7FhlbVV_KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:fb:0d:dc:9f:d4:c2:6d:cd:27:c3:9c:2e:14:6a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3533d439035ccdc5f0c39d1b3fb16195b555fca3
Validity
Not Before: Jul 21 14:01:13 2026 GMT
Not After : Jul 22 14:01:13 2026 GMT
Subject: CN=7b1a70b8a079dba5dad47fcee32d03cffef1591a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5a:d9:5e:76:ef:a2:5e:d7:45:f1:be:4c:07:
3b:46:b9:b7:69:82:ec:9e:db:90:f8:32:f5:6e:1d:
cc:c9:e0:4a:a2:85:8d:ae:17:7d:1d:24:f1:d4:9f:
99:15:66:d5:b8:6e:8d:00:db:35:1f:20:4f:f6:84:
0c:55:6c:49:b1:4e:28:2e:52:e3:39:33:46:c8:44:
19:26:93:c7:54:b5:41:bf:2e:3c:33:9f:4a:9f:af:
f3:1a:2c:19:8d:9e:b1:d8:ba:76:30:d0:18:a8:91:
e5:5b:60:9e:32:e1:4a:b8:e7:e5:02:bf:ca:bf:71:
2e:07:e8:af:a5:f0:91:82:e6:65:05:4e:55:7c:57:
0c:3a:88:95:3f:c1:0c:c9:cd:f1:ae:0f:bc:ed:cc:
d4:9e:7a:4f:77:60:40:46:3c:4a:ca:94:29:d1:f5:
f3:f5:ef:f2:fd:9b:48:a1:12:db:02:ae:71:d4:37:
b0:c1:76:95:b9:46:38:8d:77:ff:ee:d6:9c:ac:1e:
ed:e8:cc:20:49:cb:ab:6c:dd:29:bb:35:5b:15:4d:
44:60:25:6d:ca:cd:38:bc:b9:7f:76:77:90:db:d1:
88:f4:ab:37:74:c6:f7:5d:be:b0:6d:d1:1d:7f:4a:
80:76:fd:65:4b:de:90:76:01:6f:f8:64:5c:b6:f2:
c6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1A:70:B8:A0:79:DB:A5:DA:D4:7F:CE:E3:2D:03:CF:FE:F1:59:1A
X509v3 Authority Key Identifier:
keyid:35:33:D4:39:03:5C:CD:C5:F0:C3:9D:1B:3F:B1:61:95:B5:55:FC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTPUOQNczcXww50bP7FhlbVV_KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:51:d9:25:69:2a:05:1c:7e:12:7a:81:51:e2:82:d1:f4:11:
75:47:1c:93:d0:dc:8f:d5:39:74:fb:6a:96:b4:e8:0e:a6:91:
e5:7b:13:cd:6f:46:b0:9f:d1:f6:62:e7:b9:68:da:ed:00:ce:
2c:de:40:06:05:83:b4:d9:5a:36:33:59:02:ad:8d:f5:da:d7:
1d:15:d1:9b:28:64:9b:1a:b3:a6:0a:34:d0:2b:a5:60:14:5e:
df:0b:78:57:a8:dc:59:e5:83:ad:13:fa:e1:9e:5d:5c:30:02:
e3:cf:50:ba:0b:f3:a6:78:df:be:4f:78:da:17:d0:86:d6:67:
6a:94:63:78:e4:7c:78:0e:8d:2a:55:a4:4b:d7:2f:dd:b0:fb:
f6:cc:89:1d:aa:5f:b5:f6:46:64:22:47:ff:7e:75:f7:a0:41:
56:7f:6f:f1:a3:0f:3d:8f:2e:72:91:e0:b7:9e:ed:c9:01:fc:
a9:10:76:07:79:02:6e:78:2b:e6:27:45:fe:da:a8:ce:87:60:
56:71:d6:db:2c:55:6c:f0:9d:7e:60:c9:e8:d5:1c:6d:71:e3:
c5:4e:dc:79:18:d1:5b:7f:a4:83:1c:41:36:22:2a:3c:15:eb:
cc:4d:9f:8c:cc:b5:87:22:ad:d8:4b:45:6c:51:18:c7:8b:2e:
2d:12:e9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:14:26 2026 by rpki-client