Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
File: NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft (raw, json)
Hash identifier: dk43L92QPxAShV9ee77gtj7y4ZIGEZjXW3xOAPDQiSE=
Subject key identifier: 2F:6F:B9:C5:44:AB:7D:ED:D7:D5:A8:1D:9D:9E:43:C9:FF:F2:2B:30
Authority key identifier: 36:D3:F5:9B:5F:8A:8F:D6:6F:1D:13:A2:D0:F9:1D:C2:2B:F8:A1:CA
Certificate issuer: /CN=36d3f59b5f8a8fd66f1d13a2d0f91dc22bf8a1ca
Certificate serial: 019E2882590734F904A2BB5C57A02DE27DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
Manifest number: 32
Signing time: Thu 14 May 2026 22:01:31 +0000
Manifest this update: Thu 14 May 2026 22:01:31 +0000
Manifest next update: Fri 15 May 2026 22:01:31 +0000
Files and hashes: 1: K21rZ8iSPzRD0y2-8XH6DYAR720.asa (hash: WdKRw8QVqYDS6afPeC1sTisyLqYHDRhDINFD62xXAtQ=)
2: MbX8Toqw0r9J8vtm77AKZx_6DsI.roa (hash: 3VtGQhyNOfR+9FmN7zOP8ZwidizXpvCOvQGwobiO8IE=)
3: NtP1m1-Kj9ZvHROi0Pkdwiv4oco.crl (hash: I0GXFQzanO7MvtoUlrpcNQqDOLWz7w+Tg/6b556qJWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 22:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:82:59:07:34:f9:04:a2:bb:5c:57:a0:2d:e2:7d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d3f59b5f8a8fd66f1d13a2d0f91dc22bf8a1ca
Validity
Not Before: May 14 22:01:31 2026 GMT
Not After : May 15 22:01:31 2026 GMT
Subject: CN=2f6fb9c544ab7dedd7d5a81d9d9e43c9fff22b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e4:b9:17:cc:99:f1:ee:22:dc:f5:9d:08:a7:
9e:eb:44:77:a8:7b:46:d2:bc:61:21:e4:ad:f3:be:
ea:13:f0:c2:ef:fa:ce:2b:f9:16:de:3b:2b:5d:1f:
2d:2b:e9:75:49:d3:d3:97:43:7e:77:88:ee:ca:29:
a8:00:bd:17:1e:69:31:cf:bc:de:69:d8:19:b9:d1:
06:59:48:5b:8e:b1:92:65:86:2d:dd:ed:af:f2:97:
ac:88:11:8e:61:6d:71:fa:10:82:ef:4f:2b:bf:87:
40:7d:c5:7c:88:c8:a3:a9:7f:b6:2a:7a:1b:ea:76:
75:14:b8:c7:72:80:9c:51:7e:4f:60:8d:a8:2c:a4:
4e:c4:d8:97:6d:d4:66:d7:26:d4:df:64:38:15:d2:
68:ce:ed:da:d7:75:e2:eb:45:05:82:af:28:2f:2a:
0e:36:10:92:71:e8:6c:2b:3a:b2:1d:85:5a:9f:cc:
db:8b:fa:16:21:b0:20:d1:dd:e4:6a:9b:84:23:04:
e3:a1:34:a7:d8:c3:11:02:93:c4:84:4b:9f:7e:e5:
ae:8a:ef:ec:de:a0:0a:01:fd:99:7c:1c:e2:9b:f4:
c7:99:e9:72:83:8e:88:d2:50:4e:ed:96:59:ad:06:
1f:d1:fa:76:04:e2:b4:31:13:9f:be:61:19:fc:d9:
45:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6F:B9:C5:44:AB:7D:ED:D7:D5:A8:1D:9D:9E:43:C9:FF:F2:2B:30
X509v3 Authority Key Identifier:
keyid:36:D3:F5:9B:5F:8A:8F:D6:6F:1D:13:A2:D0:F9:1D:C2:2B:F8:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:6b:e7:20:c4:4c:37:bf:68:ce:a3:61:0b:1f:4e:47:62:2f:
99:e5:28:ee:af:c1:87:40:f5:eb:3d:a4:ca:6f:ee:05:35:8b:
7a:8d:07:c0:b3:15:ff:d6:e9:70:34:9c:64:2e:e2:e5:1a:f9:
47:5d:74:12:81:a5:2b:c5:aa:9c:b6:df:40:b7:78:f3:61:2d:
2c:e4:cb:ff:21:da:28:ad:bf:0b:08:72:af:f6:30:26:2c:e4:
84:eb:62:b1:2c:78:4d:e5:d7:6a:20:64:dc:2f:26:d6:a7:fb:
c5:03:4a:52:ad:81:2e:0c:df:61:25:f4:85:b8:3b:66:4e:62:
55:49:4b:63:17:73:41:16:f3:b5:ac:0d:67:a4:57:09:dd:68:
0a:83:24:02:09:37:cf:f6:23:98:5a:8f:0e:e6:89:c0:69:c6:
9d:f4:90:ac:f1:8e:bd:11:8f:52:e8:7d:75:62:b7:a3:fe:8a:
ad:0d:b5:5b:90:16:7a:a0:20:11:5d:53:f4:a9:cd:24:02:6b:
24:9b:1e:5b:2c:50:40:1b:a0:fe:17:b4:a8:db:db:bd:39:71:
56:f6:b6:a5:8c:e8:47:9d:7f:f4:39:5a:e8:38:45:c7:de:59:
1d:c4:d8:34:1c:d9:94:5c:83:81:d3:d7:07:b3:d9:3e:9d:23:
9d:16:db:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:52:54 2026 by rpki-client