Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.mft
File: NTPUOQNczcXww50bP7FhlbVV_KM.mft (raw, json)
Hash identifier: PgH9+rcwclm62y3ENMZWkVIhWoGTPy+N/wswLtP2gv4=
Subject key identifier: BB:A1:B1:47:C9:DF:C0:DD:41:A5:E9:54:84:5E:60:A1:09:76:DB:56
Authority key identifier: 35:33:D4:39:03:5C:CD:C5:F0:C3:9D:1B:3F:B1:61:95:B5:55:FC:A3
Certificate issuer: /CN=3533d439035ccdc5f0c39d1b3fb16195b555fca3
Certificate serial: 01A0F5D76B04CFB9D9945C1C953E9EBBE5F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NTPUOQNczcXww50bP7FhlbVV_KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.mft
Manifest number: 0F76
Signing time: Thu 01 Oct 2026 05:02:10 +0000
Manifest this update: Thu 01 Oct 2026 05:02:10 +0000
Manifest next update: Fri 02 Oct 2026 05:02:10 +0000
Files and hashes: 1: GkloadKipNGLxGdn49lnbZG57SQ.roa (hash: HQ8BBGVI4OetCOmU12/iTT2SoIrhzR4vqVTSloeX4A8=)
2: HzSiQ5cWi49phHXsqUbKr7wK6UQ.asa (hash: HhV1R0DUoNL9mOEHeM2zMa8hWDwUyMsVfzVpdgupYCM=)
3: NTPUOQNczcXww50bP7FhlbVV_KM.crl (hash: ga5LFNz35I/Rk0vrGuRAXJBINr9tARKOFq+/X6qtrNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NTPUOQNczcXww50bP7FhlbVV_KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:d7:6b:04:cf:b9:d9:94:5c:1c:95:3e:9e:bb:e5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3533d439035ccdc5f0c39d1b3fb16195b555fca3
Validity
Not Before: Oct 1 05:02:10 2026 GMT
Not After : Oct 2 05:02:10 2026 GMT
Subject: CN=bba1b147c9dfc0dd41a5e954845e60a10976db56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:32:ad:5b:92:02:93:96:a1:43:d6:e7:2c:b6:
a7:02:44:c9:65:a7:c5:8b:2d:2d:38:ac:21:63:40:
85:50:c8:49:00:e2:2a:51:4e:36:cb:33:18:d4:38:
d4:6f:b0:95:35:30:83:a8:be:89:36:81:35:96:13:
1a:77:48:31:b0:53:c7:27:2a:f6:db:7b:7a:20:f0:
aa:86:f1:b2:61:b6:37:35:80:1a:96:31:db:f8:18:
f5:07:69:0e:0e:aa:cd:ae:9d:a7:ba:f2:a3:53:89:
6f:ca:37:a7:9f:d6:93:3b:aa:f2:19:c2:4e:38:07:
15:c2:b8:ae:77:a4:d2:1c:92:72:6c:ba:d8:4c:11:
4e:54:80:48:56:f4:5f:d7:69:be:50:89:16:85:24:
d8:99:b3:e3:f8:cb:e9:49:39:59:10:df:c7:00:18:
7f:0c:49:da:5c:59:55:9e:cf:0d:73:8c:17:1d:bf:
ff:37:ac:54:24:c2:a1:98:73:64:a3:1d:f5:39:4c:
5c:07:31:33:e8:c6:7f:79:4f:62:aa:a7:45:e3:e4:
79:26:4b:39:0d:d1:56:d7:0b:52:19:cd:d6:58:c5:
03:fc:8d:a2:62:ab:55:ca:ec:ac:de:b1:a2:92:e7:
91:0a:ff:9e:43:99:96:b0:a9:73:ce:4b:b4:4f:ec:
ff:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A1:B1:47:C9:DF:C0:DD:41:A5:E9:54:84:5E:60:A1:09:76:DB:56
X509v3 Authority Key Identifier:
keyid:35:33:D4:39:03:5C:CD:C5:F0:C3:9D:1B:3F:B1:61:95:B5:55:FC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTPUOQNczcXww50bP7FhlbVV_KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:3b:1a:dc:2e:4b:9d:8a:69:68:c9:e2:49:ee:90:eb:1c:10:
63:44:79:c5:02:6c:bd:02:8f:cb:f9:a1:31:79:8a:88:cf:29:
1f:2f:6f:fc:95:f5:24:81:c6:aa:74:e2:5a:9f:84:3d:23:f1:
af:53:bc:81:47:1e:56:49:ec:bd:62:65:0e:83:89:3b:40:93:
f9:ea:03:8c:dd:ab:a6:00:8e:9f:c2:88:12:5b:03:14:e8:24:
1b:56:67:17:79:2f:21:7b:e1:8b:33:f0:3c:f9:16:ee:8b:db:
69:58:bd:0b:28:a5:be:c3:d2:8d:89:4b:d6:f7:f5:3f:e5:38:
31:21:86:cf:6c:4c:fa:f6:eb:ca:a6:81:f8:13:ea:90:eb:83:
6c:67:07:07:9c:65:c8:70:da:e3:e4:c7:b5:09:fd:73:d5:3e:
92:96:ba:74:a5:8f:bf:6a:70:f3:6f:f2:62:e9:76:9b:47:10:
82:4c:ec:38:10:7b:0d:fb:e3:9b:bf:50:ae:c4:0c:5a:5b:87:
70:83:27:4d:5d:ab:a8:90:bb:61:4d:98:fa:e9:89:70:dd:2d:
bc:44:81:48:53:99:9d:7c:48:02:7d:33:cc:8f:04:96:98:8f:
ec:38:d3:6d:15:4d:b8:6d:f4:b3:99:d5:57:86:bc:bb:56:3d:
c5:f6:03:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 14:54:52 2026 by rpki-client