Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
File: NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft (raw, json)
Hash identifier: WADC2JuZmz5Z0DMu2/MvObnTmVJyxGsg7WG8lVrfn0U=
Subject key identifier: 2C:38:05:7F:03:15:A9:83:02:AC:73:31:94:F7:AB:28:EA:75:26:2D
Authority key identifier: 36:D3:F5:9B:5F:8A:8F:D6:6F:1D:13:A2:D0:F9:1D:C2:2B:F8:A1:CA
Certificate issuer: /CN=36d3f59b5f8a8fd66f1d13a2d0f91dc22bf8a1ca
Certificate serial: 01A172138E09B67AAB17646883849AB262E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
Manifest number: 01E6
Signing time: Sun 25 Oct 2026 08:00:46 +0000
Manifest this update: Sun 25 Oct 2026 08:00:46 +0000
Manifest next update: Mon 26 Oct 2026 08:00:46 +0000
Files and hashes: 1: K21rZ8iSPzRD0y2-8XH6DYAR720.asa (hash: WdKRw8QVqYDS6afPeC1sTisyLqYHDRhDINFD62xXAtQ=)
2: NtP1m1-Kj9ZvHROi0Pkdwiv4oco.crl (hash: 8lWi+999TS4F43BEcw2HX/5lT+8P6IM86C3pBNTa7Fo=)
3: VHyFqWR0a0N6Jb-SqSv3sKoAF5Y.roa (hash: ewx9Epnewi0OtJiwgx7sgDatpdquBPwdoRqY8DXtLIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:13:8e:09:b6:7a:ab:17:64:68:83:84:9a:b2:62:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d3f59b5f8a8fd66f1d13a2d0f91dc22bf8a1ca
Validity
Not Before: Oct 25 08:00:46 2026 GMT
Not After : Oct 26 08:00:46 2026 GMT
Subject: CN=2c38057f0315a98302ac733194f7ab28ea75262d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:1f:c3:5c:27:68:36:e4:87:35:e9:fe:ce:
bf:34:2f:94:79:29:2a:5a:36:57:9a:0b:06:45:e9:
54:72:09:5f:75:be:6f:a7:34:87:a1:25:2c:db:86:
3a:3c:0b:e9:fd:4d:bb:50:d1:bf:8c:a0:fe:23:38:
e6:5e:f1:63:c5:8b:c7:8b:0e:e2:3f:95:ee:2b:3a:
83:10:1f:9b:26:09:7b:7c:0c:5b:37:9c:9c:39:12:
d2:95:76:9e:40:93:f5:04:ed:ed:0b:38:fd:6b:55:
88:8a:73:d4:5b:a9:f9:ab:86:b7:57:f8:86:71:0a:
78:f3:13:8a:04:f1:68:02:c2:aa:bf:5d:72:b1:72:
e7:8c:b6:5c:6a:f5:85:5f:e2:15:ae:4b:a6:fb:76:
6f:6d:e4:06:22:1d:42:5e:cf:01:2d:2a:c6:f0:4d:
8e:d2:e0:59:80:02:9b:53:3a:29:35:9b:63:da:86:
91:01:8a:3c:32:4b:78:cb:ef:63:d8:44:2c:5b:ce:
a8:60:1b:b6:29:9b:5c:7b:fd:98:a8:7a:4b:c7:3b:
a5:27:ac:96:73:a2:7b:69:49:35:3f:31:4a:a2:3c:
6e:eb:89:f7:28:6a:bb:32:1a:7e:46:d0:93:1f:e8:
14:58:0b:43:fc:f7:bc:cb:e1:d1:1d:c8:1c:85:e3:
df:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:38:05:7F:03:15:A9:83:02:AC:73:31:94:F7:AB:28:EA:75:26:2D
X509v3 Authority Key Identifier:
keyid:36:D3:F5:9B:5F:8A:8F:D6:6F:1D:13:A2:D0:F9:1D:C2:2B:F8:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e4:d3:32:bb:da:d7:bc:dc:73:14:a7:99:af:b2:50:d9:9b:
85:6b:f7:29:f9:81:3e:15:23:89:ba:a0:ed:42:71:34:1e:c0:
5a:1f:4e:8a:20:7f:91:43:7d:28:42:77:86:86:fa:07:0b:50:
5f:bb:49:1b:c7:33:57:c3:88:71:1b:b8:35:3d:69:19:91:20:
41:66:7a:b8:ee:eb:d0:cc:ab:d3:f7:bb:fd:db:a6:0d:4c:04:
f9:69:b8:50:f7:98:60:d1:36:2d:4c:95:02:c5:95:49:30:f7:
0d:ce:34:be:17:57:fa:72:b4:e3:22:32:45:9d:cb:c4:e4:e6:
8a:73:e6:ba:6b:c1:ca:33:7e:ba:da:93:49:c9:a3:2b:ba:50:
24:4a:53:b2:76:98:d9:8e:98:c1:17:8d:c7:2c:9c:44:6b:bb:
1c:c9:ba:26:e1:7e:b7:b2:77:d5:3b:31:06:96:c9:fd:ea:ff:
d8:52:28:20:c8:58:69:d9:8f:f7:f1:d7:4c:71:14:ae:b3:eb:
96:b7:a6:fe:7c:21:fe:19:67:a7:92:8a:03:97:dd:ea:c5:bb:
03:e9:6f:2f:7b:e2:b7:b1:f9:52:7b:0d:36:7a:9b:52:78:ae:
e4:c4:b0:4c:62:a5:7c:ec:6e:43:80:ad:7e:fa:29:5d:64:28:
fa:b7:61:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:25:47 2026 by rpki-client