Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
File: NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft (raw, json)
Hash identifier: Vam5rDuoXxDHTHZZwBzZpD88GFptfeDqQBtqzGKttkw=
Subject key identifier: 24:D8:11:02:97:5E:4C:8D:2F:1C:C3:4C:72:BB:4E:0F:45:09:3F:82
Authority key identifier: 36:D3:F5:9B:5F:8A:8F:D6:6F:1D:13:A2:D0:F9:1D:C2:2B:F8:A1:CA
Certificate issuer: /CN=36d3f59b5f8a8fd66f1d13a2d0f91dc22bf8a1ca
Certificate serial: 019F11C07E92FB718F61BDB8056CC81B0801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
Manifest number: AB
Signing time: Mon 29 Jun 2026 05:00:55 +0000
Manifest this update: Mon 29 Jun 2026 05:00:55 +0000
Manifest next update: Tue 30 Jun 2026 05:00:55 +0000
Files and hashes: 1: K21rZ8iSPzRD0y2-8XH6DYAR720.asa (hash: WdKRw8QVqYDS6afPeC1sTisyLqYHDRhDINFD62xXAtQ=)
2: NtP1m1-Kj9ZvHROi0Pkdwiv4oco.crl (hash: Liq7EbMWPacsqBMKCxLUpOWX6mu/KzrlEUz4MZhB4gY=)
3: VHyFqWR0a0N6Jb-SqSv3sKoAF5Y.roa (hash: ewx9Epnewi0OtJiwgx7sgDatpdquBPwdoRqY8DXtLIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:c0:7e:92:fb:71:8f:61:bd:b8:05:6c:c8:1b:08:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d3f59b5f8a8fd66f1d13a2d0f91dc22bf8a1ca
Validity
Not Before: Jun 29 05:00:55 2026 GMT
Not After : Jun 30 05:00:55 2026 GMT
Subject: CN=24d81102975e4c8d2f1cc34c72bb4e0f45093f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:34:b1:53:3c:14:08:f8:c2:8b:43:6d:02:8c:
fc:e6:f5:ba:c0:af:9f:01:2d:6f:78:3e:fb:39:8c:
3a:4f:5c:df:d5:03:ba:61:65:e7:c5:49:fa:40:f8:
2b:6d:ea:78:27:a7:88:7b:c5:27:1a:ed:12:53:ec:
12:15:4e:51:87:2f:9c:70:96:9c:05:03:43:5a:11:
f1:8e:58:50:32:0a:71:8d:23:20:33:2a:4e:df:5f:
7c:b6:eb:f9:8e:b3:83:1b:84:c9:a7:82:35:be:b9:
58:c5:c0:0c:a8:0e:90:97:df:ad:e7:95:9a:9b:59:
fd:ca:fe:73:3a:5a:cc:b7:6c:4f:0b:88:74:c9:94:
47:ab:10:04:41:9b:1b:c1:04:04:4f:f1:da:1b:ea:
a4:bb:c8:23:c6:46:54:56:df:1e:41:27:65:94:73:
fd:6c:1d:54:cf:ba:1b:65:1c:a2:cd:45:77:c1:27:
bf:59:4d:6f:4f:2e:c6:a7:0c:82:6f:1c:4b:25:c4:
ed:d7:03:c1:5d:32:4b:f9:65:d0:8b:d5:f4:f9:e6:
77:2a:4d:c1:a5:51:61:cb:64:06:d5:20:bd:5d:42:
9c:39:c2:57:b0:e2:24:a1:e6:ba:51:d1:ab:a5:03:
30:8d:c6:cc:cf:13:ff:41:0a:45:0f:0b:13:30:64:
a2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D8:11:02:97:5E:4C:8D:2F:1C:C3:4C:72:BB:4E:0F:45:09:3F:82
X509v3 Authority Key Identifier:
keyid:36:D3:F5:9B:5F:8A:8F:D6:6F:1D:13:A2:D0:F9:1D:C2:2B:F8:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:16:8c:8f:45:38:3a:ea:b1:49:8b:22:22:8d:6b:11:1f:2a:
f6:ba:10:27:66:e5:15:14:0c:34:bd:fc:41:e9:4c:98:ab:75:
18:36:63:75:94:82:bb:5d:73:a1:b1:5d:84:3b:59:4c:6a:da:
f2:50:d0:b4:5b:fb:e4:28:12:25:c7:24:8b:dc:57:fb:4d:8b:
6a:22:b7:57:20:1b:02:36:82:1f:42:a0:7d:a6:dd:15:fe:d1:
5e:8c:b0:51:49:6e:8b:07:69:34:6b:9c:d4:ff:13:dd:39:95:
57:e9:f3:2c:04:c0:6f:1b:03:01:7e:ae:2e:69:f3:01:16:3c:
38:66:de:e0:64:a4:bb:e2:35:9e:f8:b3:81:7a:aa:87:31:94:
d8:13:7e:7b:28:64:3b:2b:23:b6:79:e0:9a:b5:3f:5c:77:5f:
20:55:41:60:cc:2f:da:d1:4a:59:45:68:b8:07:47:e2:ad:9a:
44:16:c5:ad:b4:fe:1e:d2:29:d8:ed:d1:60:54:5b:49:b7:c4:
35:37:62:bb:f2:19:3a:96:e4:1b:eb:ff:a8:4c:1a:f4:f0:a2:
52:09:ec:11:b0:84:d7:87:84:d0:86:de:ae:df:48:1d:0b:a0:
31:9d:99:72:62:70:74:51:9b:a3:8b:29:58:3c:00:97:2b:aa:
8b:89:c9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:38:17 2026 by rpki-client