Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
File: NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft (raw, json)
Hash identifier: y2O3B8XowPENY7aDacdqbuNkpDrNX09HmrhFs3piHMQ=
Subject key identifier: 23:1C:D6:E4:DD:D4:BC:C4:55:6A:08:D2:92:BE:DA:C6:17:01:13:43
Authority key identifier: 36:D3:F5:9B:5F:8A:8F:D6:6F:1D:13:A2:D0:F9:1D:C2:2B:F8:A1:CA
Certificate issuer: /CN=36d3f59b5f8a8fd66f1d13a2d0f91dc22bf8a1ca
Certificate serial: 01A16A5A66C52E1AA9EFE8C25F4F4A7187C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
Manifest number: 01E2
Signing time: Fri 23 Oct 2026 20:01:11 +0000
Manifest this update: Fri 23 Oct 2026 20:01:11 +0000
Manifest next update: Sat 24 Oct 2026 20:01:11 +0000
Files and hashes: 1: K21rZ8iSPzRD0y2-8XH6DYAR720.asa (hash: WdKRw8QVqYDS6afPeC1sTisyLqYHDRhDINFD62xXAtQ=)
2: NtP1m1-Kj9ZvHROi0Pkdwiv4oco.crl (hash: GnwyYED6Ng+zqtUYn7FG6xlhmIC5UBlmAi37hFyvzPM=)
3: VHyFqWR0a0N6Jb-SqSv3sKoAF5Y.roa (hash: ewx9Epnewi0OtJiwgx7sgDatpdquBPwdoRqY8DXtLIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:5a:66:c5:2e:1a:a9:ef:e8:c2:5f:4f:4a:71:87:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d3f59b5f8a8fd66f1d13a2d0f91dc22bf8a1ca
Validity
Not Before: Oct 23 20:01:11 2026 GMT
Not After : Oct 24 20:01:11 2026 GMT
Subject: CN=231cd6e4ddd4bcc4556a08d292bedac617011343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6a:c3:a7:fb:77:2b:74:a1:65:b4:74:82:18:
c4:06:4a:2a:a3:bd:2c:06:1b:65:2a:9d:41:24:c3:
58:2b:92:25:af:cb:3a:c5:a8:b3:10:67:f5:92:31:
37:4a:d6:c5:62:0d:11:80:04:41:eb:12:c9:64:53:
a5:d1:2d:a2:90:e0:2b:36:e7:56:f6:88:ff:50:1a:
0f:5a:36:85:38:00:32:48:23:66:38:36:b7:8b:64:
9d:bc:df:44:80:3d:3e:26:e2:d4:ee:07:75:bd:6a:
c9:e9:3d:95:4d:67:f1:1d:5f:e9:a1:8f:5e:2e:69:
c4:0c:7a:32:9e:a2:40:06:0c:e6:b8:68:77:d2:0a:
55:e5:52:bb:3f:60:8b:e0:cd:2e:d2:83:1c:1a:da:
87:57:cf:fa:d6:84:3d:01:92:83:0f:d9:c4:9f:c7:
86:a6:ef:14:6d:7e:07:5c:be:98:b3:a1:e5:8e:1a:
3c:18:13:83:2b:3f:9e:d8:2b:5a:86:c5:1b:77:63:
65:0e:04:4f:5b:49:2c:7f:b8:69:e3:ad:0e:af:26:
f9:f2:e9:a6:76:aa:83:25:cb:2c:8f:5d:dd:f5:d3:
d2:7a:a8:f2:9d:cf:1b:52:56:db:b3:bf:e7:b4:1e:
f9:ae:b8:7a:f3:19:e0:ba:62:c5:de:ed:23:8f:c7:
c1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1C:D6:E4:DD:D4:BC:C4:55:6A:08:D2:92:BE:DA:C6:17:01:13:43
X509v3 Authority Key Identifier:
keyid:36:D3:F5:9B:5F:8A:8F:D6:6F:1D:13:A2:D0:F9:1D:C2:2B:F8:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c4:fc:e9:70:a2:9c:35:40:ef:14:8e:0e:c4:34:cb:14:ff:
63:a5:c4:ea:c9:2f:14:d3:99:92:8f:e2:5d:be:e6:06:21:a2:
c0:a7:93:77:25:2e:f5:22:02:2d:9c:e4:aa:45:2f:b6:8f:64:
36:a8:d9:af:34:fd:35:d3:cb:db:5b:82:88:5d:29:f7:3a:49:
e2:4e:53:0a:3a:b5:45:dd:1d:5c:ea:a6:bd:de:bf:5e:44:1a:
2a:e7:be:f4:40:08:9d:3d:ed:50:12:8f:0d:b3:24:56:08:6e:
0a:31:08:a0:2f:3e:87:07:fa:47:5b:4d:1f:e2:ae:a1:8b:2f:
a0:d6:bf:eb:f2:56:81:4e:d1:ae:4e:8a:6c:b9:a9:e5:ad:61:
3f:c4:14:90:33:f7:2c:04:70:64:47:f3:b9:d4:69:5e:c2:29:
2d:a9:8f:ad:af:66:db:d7:67:85:8e:9a:7a:aa:9a:fa:63:c4:
5e:ee:72:80:74:6b:df:8a:a8:47:a2:07:3c:f6:f0:ea:11:12:
f6:13:e0:0c:a6:e9:74:b2:e4:b2:1a:08:31:89:f9:69:37:c9:
de:ac:d5:1c:8c:5e:af:3b:f1:54:a6:63:c2:76:01:d3:70:4f:
a2:7b:95:9f:4a:6b:71:d5:3b:d2:ed:68:cf:71:cf:69:2d:4e:
d2:bf:5e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 03:12:17 2026 by rpki-client