Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
File: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft (raw, json)
Hash identifier: FzI2PaQ6uPFKOUAvKZ9qJyv6IlWoWj7+WyNKbS7mdKQ=
Subject key identifier: 6B:EE:2D:01:4C:F7:E3:E8:EF:A1:87:9B:DA:AB:B5:39:2D:7B:EC:AF
Authority key identifier: 35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
Certificate issuer: /CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Certificate serial: 01A0CB595894C4B6CA41AD09FCD0243C504C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
Manifest number: 1A6B
Signing time: Tue 22 Sep 2026 23:00:25 +0000
Manifest this update: Tue 22 Sep 2026 23:00:25 +0000
Manifest next update: Wed 23 Sep 2026 23:00:25 +0000
Files and hashes: 1: FEFxaV6JKNIg7q55qcKCrfCq-z4.roa (hash: b7JfyrsOhBHQzoGqHArOuD+GUoiR1U1SMxRpiIKCIn8=)
2: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl (hash: acvj0jdVIXcSaghUQvya0COdl13CihesNASdEtm7DyE=)
3: baFyB991hO6zmvEFA-bUR-SSeO0.roa (hash: HCQWZRB071vWE048uQIisBvoukGqn9JR/elQALPMrxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:58:94:c4:b6:ca:41:ad:09:fc:d0:24:3c:50:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Validity
Not Before: Sep 22 23:00:25 2026 GMT
Not After : Sep 23 23:00:25 2026 GMT
Subject: CN=6bee2d014cf7e3e8efa1879bdaabb5392d7becaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a6:31:ca:91:97:16:f4:1b:45:3c:07:ab:ee:
ee:69:64:31:54:99:4d:54:ee:4b:b5:b4:71:a7:57:
94:34:0d:d5:d4:ea:d3:ad:0a:90:c5:9f:bd:fc:e2:
06:fd:ce:db:86:c3:31:60:83:70:8f:b7:6e:89:b4:
4e:db:d1:ab:e1:8d:0d:81:87:31:f8:47:bf:bf:fa:
af:d4:1b:cb:a8:b2:70:cd:70:6d:35:43:89:4f:21:
d6:28:ab:3e:54:11:9b:cc:26:8c:91:1f:42:8d:85:
b0:9b:f5:63:b1:b2:6d:43:f6:65:4b:7b:19:76:3f:
bf:3a:c3:ea:ae:c7:1d:49:cc:c8:15:e2:64:cb:50:
ef:9a:1c:d7:6f:2f:b4:34:b6:89:ed:af:2f:42:1c:
61:c8:f8:10:8c:42:61:82:b1:8e:1e:1f:c5:1b:3d:
f6:48:b4:ff:78:dc:f3:f4:05:52:8a:a6:cd:9d:07:
c9:d2:95:ff:ee:76:da:16:c0:10:11:7c:ac:81:9a:
d5:97:b2:87:d5:51:35:09:ae:c3:25:36:0b:65:d3:
e7:34:b2:8a:1e:93:bb:c2:19:21:13:ab:98:d5:b6:
9b:b5:76:6b:25:85:b1:0f:e3:c8:65:f9:9b:11:b6:
c2:9d:39:a3:9e:93:37:5d:67:92:5c:37:ac:10:12:
0f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EE:2D:01:4C:F7:E3:E8:EF:A1:87:9B:DA:AB:B5:39:2D:7B:EC:AF
X509v3 Authority Key Identifier:
keyid:35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ca:be:96:5c:e7:b5:fe:94:af:a0:f2:b2:0d:30:b7:3c:89:
9a:ed:8c:7f:00:e8:fc:8b:32:96:8b:84:26:58:8f:44:cd:b9:
9f:ea:4f:33:3e:61:6d:ad:53:d4:1d:d3:c8:64:78:74:b1:34:
25:91:27:96:3e:e1:c7:0c:1e:93:c4:01:3c:19:d1:9e:cc:01:
f3:81:84:83:d7:92:67:57:7a:e1:e1:ab:23:d9:36:02:23:6b:
e7:03:66:f1:16:8a:7c:e1:6e:41:36:a4:0a:6b:f9:17:d9:db:
a6:fc:a4:95:a5:71:cb:86:e2:6b:cf:12:fd:a3:74:77:2e:c7:
de:4f:69:82:4c:1d:4c:62:f5:c7:fc:6e:b5:31:9a:97:c9:4c:
f9:51:d9:d4:c4:05:c3:2b:3e:24:1b:f9:a0:d1:2b:22:6d:24:
16:61:06:99:c9:24:34:ec:a3:ee:ea:88:cf:4f:8a:16:3a:e3:
c5:05:20:ba:8f:8f:88:66:67:fa:77:46:82:06:e1:27:4e:69:
4a:b9:45:67:1e:53:33:01:05:42:6b:da:9f:a5:8f:94:88:7a:
38:6f:28:ae:b5:71:92:09:49:c5:a3:65:6d:96:a1:9b:ea:63:
15:f2:44:a2:17:2d:e2:b1:4a:ff:6a:2d:ef:48:05:24:5e:d0:
c7:d9:9a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:27:33 2026 by rpki-client