Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
File: NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft (raw, json)
Hash identifier: frwc3vAGD0xo46z15z5Z+/myAUj5i1t+MDqTOzQXVuw=
Subject key identifier: 90:33:24:04:EB:A4:FD:B5:45:5A:9C:75:13:92:E4:08:3C:5A:CD:D3
Authority key identifier: 36:D3:F5:9B:5F:8A:8F:D6:6F:1D:13:A2:D0:F9:1D:C2:2B:F8:A1:CA
Certificate issuer: /CN=36d3f59b5f8a8fd66f1d13a2d0f91dc22bf8a1ca
Certificate serial: 01A03F04EABD70E29182E6D7DD80A242C080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
Manifest number: 0147
Signing time: Wed 26 Aug 2026 17:01:21 +0000
Manifest this update: Wed 26 Aug 2026 17:01:21 +0000
Manifest next update: Thu 27 Aug 2026 17:01:21 +0000
Files and hashes: 1: K21rZ8iSPzRD0y2-8XH6DYAR720.asa (hash: WdKRw8QVqYDS6afPeC1sTisyLqYHDRhDINFD62xXAtQ=)
2: NtP1m1-Kj9ZvHROi0Pkdwiv4oco.crl (hash: EoWEN9NxmNjTh24sRxnlWh2PyiXzaPu37sas5+sZMB0=)
3: VHyFqWR0a0N6Jb-SqSv3sKoAF5Y.roa (hash: ewx9Epnewi0OtJiwgx7sgDatpdquBPwdoRqY8DXtLIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:04:ea:bd:70:e2:91:82:e6:d7:dd:80:a2:42:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d3f59b5f8a8fd66f1d13a2d0f91dc22bf8a1ca
Validity
Not Before: Aug 26 17:01:21 2026 GMT
Not After : Aug 27 17:01:21 2026 GMT
Subject: CN=90332404eba4fdb5455a9c751392e4083c5acdd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c3:db:01:6f:c4:fb:67:1a:8f:ab:72:5f:64:
04:b0:9b:79:ab:dc:8f:8c:af:b3:b1:32:64:9e:3d:
19:1a:b9:71:6c:0d:9d:41:44:a8:4e:0c:d6:62:ae:
4b:49:66:ae:a3:3b:db:3f:7c:f1:b9:96:e1:0e:50:
15:b5:ef:ae:60:dc:96:85:fc:14:44:8a:cb:a6:24:
8e:27:4d:7d:52:f0:00:6c:3d:5f:7b:64:b0:c9:0c:
9e:ba:2a:49:f6:1c:af:b7:de:b8:fd:5a:38:f8:be:
47:86:61:06:a0:ef:b6:8b:dc:e4:00:84:b5:58:7a:
00:ac:c0:b2:81:b9:fd:ea:cf:04:b8:70:e3:6d:9c:
31:06:cc:51:70:5e:b4:f3:c0:2d:1b:10:f4:34:c8:
2c:fd:de:3f:61:5b:00:26:6c:0f:ec:bb:2f:a3:e8:
53:9f:45:1d:e5:8e:f2:89:da:ca:ac:2f:bc:36:9b:
54:f8:cf:82:85:ab:86:3e:9e:9b:10:e0:f2:45:28:
fa:17:55:df:e0:8a:e6:17:0e:f8:d5:b8:1f:88:d7:
14:de:41:9b:ae:7c:3f:5b:0c:fa:54:aa:f9:bd:51:
48:dc:08:b3:89:a7:98:2d:e6:e8:11:b3:64:1c:3a:
58:f7:68:e7:7f:f6:2e:af:21:c5:66:ba:36:c0:44:
f3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:33:24:04:EB:A4:FD:B5:45:5A:9C:75:13:92:E4:08:3C:5A:CD:D3
X509v3 Authority Key Identifier:
keyid:36:D3:F5:9B:5F:8A:8F:D6:6F:1D:13:A2:D0:F9:1D:C2:2B:F8:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:3d:22:27:8d:6b:db:1c:51:1a:68:11:5f:45:f3:80:6c:02:
bc:24:5f:52:5b:82:0a:50:bd:59:49:9c:fc:d4:1c:c2:30:0f:
75:50:4b:7c:8d:49:9d:aa:84:16:c9:e2:ca:6d:ae:67:37:a3:
76:e2:47:2a:f7:e7:52:18:ee:d8:f5:bf:d7:8c:b6:aa:92:fd:
0d:0c:d0:b6:2f:80:97:02:43:b0:3c:f8:7e:59:6b:e7:95:87:
1a:01:5e:36:4f:06:95:f4:94:d0:a9:24:a7:43:ef:6d:00:05:
f4:af:78:01:5e:f9:97:26:39:21:16:5e:88:7d:db:ff:fc:18:
c1:ec:78:7d:a1:20:e2:7e:b7:9b:23:eb:f2:cd:88:59:df:01:
e7:be:d4:78:0c:03:f2:22:14:c8:b4:c3:78:dd:30:6e:f1:6e:
3b:16:03:2f:e4:c5:6c:1e:65:19:fd:1f:b5:41:32:07:de:8d:
31:43:b5:81:54:b6:ea:b2:5a:9e:33:59:91:14:6b:36:6a:ff:
5a:cf:d6:5c:30:07:c7:c3:6c:7b:bb:9a:21:73:c9:00:49:31:
67:7b:ef:9b:80:e5:42:1a:bf:9b:18:7b:9f:bd:8d:ad:37:80:
90:77:f1:7e:23:09:8c:20:de:ae:fc:f1:8d:39:14:37:0c:ec:
2c:0e:9a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:34:19 2026 by rpki-client