Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
File: ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft (raw, json)
Hash identifier: LU9H+0XehlhD2sffv3aCEZszFGRpo6ZWCHOyUNp6KRk=
Subject key identifier: 84:B5:90:24:E2:04:9C:48:A5:E4:6A:D9:06:1C:E5:68:83:B0:99:E9
Authority key identifier: 9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
Certificate issuer: /CN=9ed0c4ff4a90073288b97674694142721f5b8435
Certificate serial: 019CFBABE8B7C9FD2B15BAEFEBDBF59D52B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
Manifest number: 134E
Signing time: Tue 17 Mar 2026 12:01:13 +0000
Manifest this update: Tue 17 Mar 2026 12:01:13 +0000
Manifest next update: Wed 18 Mar 2026 12:01:13 +0000
Files and hashes: 1: mRwQ4FZ4qs3-KkP76bFaXtLs11U.roa (hash: d2Arbpcg/AGTRi9adeSZYOX/MBudha1YOQCfUnmj+l8=)
2: ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl (hash: ImSyLRCwX+aowd6sTjAGe6sZ8Z52yR+W2Mf+SYlNPdk=)
3: yZW2mE5zLO01eM0W6hRtG-uljlk.roa (hash: RagjUFsbMgoncBiop+dDC5tIWu14Ngw7xbU4GHUKDw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fb:ab:e8:b7:c9:fd:2b:15:ba:ef:eb:db:f5:9d:52:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed0c4ff4a90073288b97674694142721f5b8435
Validity
Not Before: Mar 17 12:01:13 2026 GMT
Not After : Mar 18 12:01:13 2026 GMT
Subject: CN=84b59024e2049c48a5e46ad9061ce56883b099e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5b:67:a6:bf:6e:85:9f:9d:fe:dd:8c:7c:39:
bc:ee:a2:ae:95:1f:28:87:58:68:9c:ba:c5:a8:ad:
ab:d4:b8:07:be:04:64:6f:7b:ec:d6:b3:9d:56:25:
1b:e2:03:d5:01:1c:09:2a:6d:8e:72:cd:d4:4c:4e:
70:57:68:3f:1f:8c:c6:0c:5a:c2:37:ff:8d:5b:1f:
26:e3:67:ef:d6:32:5f:d9:05:ab:a2:02:f5:d1:01:
39:4a:2a:42:8e:3b:78:e0:dc:f6:b8:43:10:f5:4c:
11:38:6c:35:ac:fb:6a:f3:cc:0e:77:ff:91:58:9d:
e3:53:b1:1a:d6:96:fa:56:f1:23:39:b7:ff:08:3e:
57:b2:8b:79:50:d5:a8:f8:14:34:6c:63:3b:54:19:
97:f3:39:61:53:c7:7e:18:b3:2c:07:07:fa:55:67:
53:9f:8d:3c:01:9f:55:75:92:c1:08:ee:1e:25:98:
62:b4:63:c3:6a:9c:b7:10:16:dc:99:be:ac:b0:cc:
11:04:28:bb:03:77:75:4c:d9:97:1d:9c:ce:84:9a:
69:0f:5f:fb:2f:93:7b:08:2e:3d:d0:7e:6d:0c:79:
ec:94:c1:53:b4:db:27:21:03:b1:d0:ac:56:46:d8:
e6:43:27:d0:4b:db:44:80:82:78:f3:07:84:4b:31:
c7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B5:90:24:E2:04:9C:48:A5:E4:6A:D9:06:1C:E5:68:83:B0:99:E9
X509v3 Authority Key Identifier:
keyid:9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:89:0d:55:d2:83:97:c3:4c:29:78:2d:9f:81:9d:ea:32:af:
e4:0c:2e:72:10:c8:26:34:d1:49:7d:62:85:0e:19:ff:ac:f2:
25:82:f3:87:b2:ce:ed:7d:a2:08:7f:9d:e6:e9:6f:ce:26:73:
27:3c:5b:ca:0d:6c:3d:2c:15:55:a3:47:5d:2c:b0:0e:b4:8d:
2f:b7:1c:34:0d:91:65:9a:4e:36:1d:52:47:6e:24:9f:3a:2f:
13:d0:87:e4:8e:d7:52:8c:77:f6:f3:7d:9e:13:89:05:53:6c:
13:82:22:46:47:1c:23:d5:97:f0:26:f9:5e:08:8e:14:fc:58:
87:a8:e3:34:7c:aa:b7:a9:97:f8:0a:54:84:45:f4:3e:7d:2f:
5c:2c:cb:f9:2d:17:03:aa:cb:70:54:6d:a4:37:7d:a4:0a:7d:
68:1e:af:72:a1:67:a2:8e:fa:b0:4f:4b:ad:7e:a1:b3:0c:0a:
26:3b:6b:f6:bd:d9:91:a8:eb:01:c3:bb:b7:aa:ed:fb:9e:ea:
72:fd:5b:c3:34:d0:11:89:49:8d:1e:68:66:35:a5:14:cc:c7:
a9:07:7e:dc:44:2d:1f:3c:24:97:8f:51:81:cc:bc:b8:bf:5a:
3c:e8:df:8b:ce:f6:7e:7b:6d:3a:6b:b2:29:bf:67:ae:3b:06:
20:f6:9b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 14:59:06 2026 by rpki-client