Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
File: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft (raw, json)
Hash identifier: sZIt/i85raraPN8x1tl6bTvC9yq86I0alF2FfoMLk2Y=
Subject key identifier: 29:CE:FF:F1:BA:BB:FE:71:F3:5C:EC:ED:06:CD:04:74:4A:23:09:C4
Authority key identifier: 35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
Certificate issuer: /CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Certificate serial: 019FAB9A5BE01443A5CA8CA64752D25B0F2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 02:00:47 +0000
Manifest this update: Wed 29 Jul 2026 02:00:47 +0000
Manifest next update: Thu 30 Jul 2026 02:00:47 +0000
Files and hashes: 1: FEFxaV6JKNIg7q55qcKCrfCq-z4.roa (hash: b7JfyrsOhBHQzoGqHArOuD+GUoiR1U1SMxRpiIKCIn8=)
2: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl (hash: O1E3A9Io2cXU6hrlFcyEzHfWtJNHy3hzGR1f/zA6840=)
3: baFyB991hO6zmvEFA-bUR-SSeO0.roa (hash: HCQWZRB071vWE048uQIisBvoukGqn9JR/elQALPMrxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:5b:e0:14:43:a5:ca:8c:a6:47:52:d2:5b:0f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Validity
Not Before: Jul 29 02:00:47 2026 GMT
Not After : Jul 30 02:00:47 2026 GMT
Subject: CN=29cefff1babbfe71f35ceced06cd04744a2309c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cc:4c:16:25:3a:1b:35:a0:45:85:7c:c0:9c:
e5:e7:1f:bb:08:23:67:26:a3:0f:46:6f:5a:ac:11:
6a:6c:14:7d:9c:0b:11:4e:50:29:2f:a3:ac:65:66:
38:16:69:95:86:d7:16:a6:85:e5:00:7e:09:50:47:
ca:f0:9a:a4:bc:38:98:6d:76:c8:b0:5b:f2:57:94:
7a:b5:f4:2d:a2:aa:b7:f8:e4:7a:35:f4:6e:65:eb:
9b:53:49:84:92:1d:6b:b8:6e:d5:de:7d:c8:8c:f0:
20:cf:f4:d4:52:fb:f3:1b:80:4f:3e:68:c3:df:0b:
d6:5b:ea:65:ab:2f:b0:67:1e:bb:40:18:06:d6:0c:
be:14:7c:0c:b4:63:1d:dd:e8:b7:78:82:25:c4:00:
96:31:1f:f2:b7:24:73:68:cc:4c:0c:71:a8:4d:e3:
0c:22:35:ee:31:62:9d:12:3a:59:e0:ad:ab:9a:84:
12:df:cf:3f:02:ce:c7:60:9b:9d:d8:ef:3b:aa:dd:
10:bf:3b:06:a8:d3:54:5f:ca:6d:31:05:a6:a1:b5:
cb:5d:ec:9d:c4:f0:31:3a:6a:7f:2c:25:e3:3e:33:
3a:73:cb:63:3c:d4:bd:a8:a2:d2:46:d0:2c:61:b0:
ee:d2:2d:48:81:ed:8e:28:cc:8e:ee:8d:e1:72:35:
b2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CE:FF:F1:BA:BB:FE:71:F3:5C:EC:ED:06:CD:04:74:4A:23:09:C4
X509v3 Authority Key Identifier:
keyid:35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:38:1f:cd:60:fc:c8:01:0a:b7:e1:49:5f:5b:91:4b:13:7d:
7e:33:df:cf:68:fa:6b:14:52:6a:45:61:4e:e5:9c:e2:ea:ba:
7c:e4:ae:c0:54:ae:b3:ca:e7:e1:58:af:d0:a0:56:2a:38:6f:
b4:e1:cd:ef:f0:34:1f:7a:21:1b:cb:8b:a7:7f:9f:4c:a3:8c:
90:64:57:de:ab:a1:e7:fe:c4:29:ed:4f:ac:7b:39:5e:ac:05:
a4:e2:6d:5e:98:05:41:87:5d:94:aa:20:86:d4:39:c1:cf:2b:
da:70:2f:dd:6e:dd:43:d4:a5:8f:f9:60:68:7c:a3:c1:1f:7a:
6e:ff:b4:08:17:38:ee:ed:b8:0c:4d:8d:e6:af:32:01:27:8a:
3f:7c:c4:5d:f3:d5:fe:c8:f4:81:49:9f:20:46:07:7f:9a:24:
3f:50:ab:85:30:a9:1e:b9:ee:a3:bc:6a:aa:4f:3a:4d:5f:91:
1f:2e:a0:9f:9d:89:bf:df:e4:5c:19:3d:2a:5f:20:9e:75:8d:
6d:f8:7a:be:9f:ae:64:e8:2b:9f:2f:75:f4:88:9b:62:b5:df:
3c:98:81:ae:1d:46:fa:c7:0b:0b:12:63:f0:76:56:a0:0b:2f:
17:cb:73:da:17:d8:bd:11:ba:38:e2:4f:1b:90:81:ad:f1:b6:
a3:90:5d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:25:33 2026 by rpki-client