Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
File: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft (raw, json)
Hash identifier: Zf6ZCzLgsfCL5pVD4djfJYF8mv6F5DjTy7XRTFexqaE=
Subject key identifier: FF:1C:92:36:08:A5:F2:39:EC:2A:52:CA:D6:9E:52:E7:C2:04:49:23
Authority key identifier: 35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
Certificate issuer: /CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Certificate serial: 019EBFFEF717D15FDDA5879B01248A98F40E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 08:00:18 +0000
Manifest this update: Sat 13 Jun 2026 08:00:18 +0000
Manifest next update: Sun 14 Jun 2026 08:00:18 +0000
Files and hashes: 1: FEFxaV6JKNIg7q55qcKCrfCq-z4.roa (hash: b7JfyrsOhBHQzoGqHArOuD+GUoiR1U1SMxRpiIKCIn8=)
2: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl (hash: G3Ujry5pWiYy0e7mcgSBWM4Qk3c3SCOmgrnijSrPmTg=)
3: baFyB991hO6zmvEFA-bUR-SSeO0.roa (hash: HCQWZRB071vWE048uQIisBvoukGqn9JR/elQALPMrxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:fe:f7:17:d1:5f:dd:a5:87:9b:01:24:8a:98:f4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Validity
Not Before: Jun 13 08:00:18 2026 GMT
Not After : Jun 14 08:00:18 2026 GMT
Subject: CN=ff1c923608a5f239ec2a52cad69e52e7c2044923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:71:b0:cc:b4:53:f1:0f:0d:a0:2e:27:d9:d4:
26:c5:ff:33:5b:70:d7:bc:19:5b:2b:7d:d4:9d:23:
49:09:07:1b:b3:2d:40:37:a6:b7:0d:2a:3b:2d:11:
f5:87:0d:c8:78:ae:1c:16:41:86:23:5a:0b:4f:55:
34:39:1e:b0:d6:fa:d9:da:04:b5:a5:af:4b:0d:d7:
c5:ab:ad:2b:0b:e9:11:d8:7a:40:48:95:44:93:9c:
4e:cc:c0:0a:c6:94:1b:a3:c8:ed:3e:a4:30:8a:bb:
42:84:67:93:7f:bd:2a:43:7b:67:83:dc:9c:bb:99:
33:a8:11:61:1b:d7:75:18:a5:cf:95:eb:f0:f5:a7:
7b:be:15:af:71:22:94:7d:9f:76:db:dd:7c:2d:94:
83:ee:86:dd:4e:82:c7:f5:b4:cc:d2:37:1d:80:d1:
27:2a:b3:87:92:79:3d:43:1e:35:10:ea:9d:c7:a0:
01:80:a6:c8:c4:56:58:2e:77:ef:58:d6:e7:dd:f6:
2a:31:1b:6f:36:b3:f4:18:5d:8c:9a:7b:36:d7:06:
7e:57:0f:5d:77:e2:eb:e0:aa:65:55:d5:cd:40:97:
f0:f0:9b:45:51:f4:a4:91:c9:75:5d:76:41:d5:2a:
4f:2b:c9:0a:9d:83:cb:35:bf:5a:94:f7:6a:4a:fa:
32:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1C:92:36:08:A5:F2:39:EC:2A:52:CA:D6:9E:52:E7:C2:04:49:23
X509v3 Authority Key Identifier:
keyid:35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c6:41:b2:de:2e:b8:46:85:e5:00:6b:91:9c:22:53:b1:66:
5d:13:30:62:b8:d6:91:ce:92:f8:65:74:26:2f:89:6d:a9:13:
76:04:8c:1f:04:ac:81:fb:2a:09:05:21:d6:59:7b:32:62:31:
ea:f2:bd:83:91:d7:15:81:0a:d5:15:8f:87:1c:d8:e3:78:ce:
09:33:eb:bd:01:f1:28:1c:f5:9b:3e:97:99:a5:cd:8f:02:86:
cf:96:2f:f9:99:de:93:40:9f:bf:76:26:c5:89:aa:0b:0e:72:
c5:5e:9a:3b:ee:6b:f3:73:27:89:8b:c7:5d:9a:8e:1c:0c:d7:
47:9b:53:e2:57:aa:51:1a:ff:fb:18:7f:e0:93:24:32:cb:ca:
ad:57:25:f1:40:c0:c4:6f:85:57:b6:81:ae:96:ba:a9:cc:e1:
37:94:28:03:7d:42:73:13:48:6c:9a:5e:02:84:f6:56:18:6a:
92:7e:07:96:a0:9d:68:e0:96:dd:85:ea:26:1d:fc:df:65:e1:
72:ee:4e:5a:61:a8:38:4f:00:74:e7:4e:e8:28:26:82:02:d4:
f9:79:30:ee:08:37:b7:15:0d:f9:dd:02:92:b1:fa:a2:7b:1f:
6c:0f:38:79:f9:44:09:3e:08:5a:e4:d1:38:7b:32:d8:21:7d:
ae:50:b7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:05:50 2026 by rpki-client