Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
File: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft (raw, json)
Hash identifier: dcnE5lCY/NtaehiL5YcslP/manuwnYH/ZHIVOj8VmOM=
Subject key identifier: F9:89:1B:C6:E4:04:F8:AA:E5:72:97:AE:F7:44:C1:73:51:1C:13:FF
Authority key identifier: 35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
Certificate issuer: /CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Certificate serial: 019CAED9BC96A4218BE59375B7C4AFE505AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 14:00:31 +0000
Manifest this update: Mon 02 Mar 2026 14:00:31 +0000
Manifest next update: Tue 03 Mar 2026 14:00:31 +0000
Files and hashes: 1: FEFxaV6JKNIg7q55qcKCrfCq-z4.roa (hash: b7JfyrsOhBHQzoGqHArOuD+GUoiR1U1SMxRpiIKCIn8=)
2: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl (hash: kOKFGvcv+PEs+ZhVA6o9KeoEEFy2g/g9Y4qF31nWF+I=)
3: baFyB991hO6zmvEFA-bUR-SSeO0.roa (hash: HCQWZRB071vWE048uQIisBvoukGqn9JR/elQALPMrxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:bc:96:a4:21:8b:e5:93:75:b7:c4:af:e5:05:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Validity
Not Before: Mar 2 14:00:31 2026 GMT
Not After : Mar 3 14:00:31 2026 GMT
Subject: CN=f9891bc6e404f8aae57297aef744c173511c13ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:44:bf:35:b2:b4:d9:80:1d:3f:39:f0:27:
81:92:52:f8:96:74:9c:61:5f:bb:ca:d8:58:cf:cd:
32:c4:06:a0:d6:b5:b6:0e:e9:a7:ad:df:b3:ed:40:
b2:66:a6:fd:cf:a5:23:6a:ec:ab:fb:ab:de:ff:fa:
ed:67:8c:74:24:79:36:85:ef:b6:a8:b9:6a:e6:5b:
e3:94:de:a9:2b:72:55:b7:ba:25:39:7e:8b:3d:aa:
4c:54:7d:cd:3e:b1:e2:42:80:88:76:12:4d:76:39:
20:d4:6d:f0:12:84:b5:a2:f8:ef:7b:1e:2a:8d:36:
8b:f3:95:d2:5d:9f:80:2b:90:b6:8e:88:7e:d2:fb:
fb:d7:f0:e4:78:ef:37:7e:24:51:d9:bf:e0:d9:d6:
fc:d5:28:0b:b8:80:91:7a:4d:91:93:af:a3:6a:92:
ce:2d:8d:6f:45:c8:28:bb:24:3e:ea:e8:fd:1e:42:
6e:f0:16:32:99:d2:c6:fc:93:b1:00:b3:a4:71:3a:
a5:4c:19:19:a8:8a:9a:d6:51:9c:ec:49:d3:c9:23:
8d:da:25:ea:94:61:16:79:35:67:c3:10:69:90:db:
fc:30:51:b9:12:ff:e2:12:46:5e:e6:2c:80:63:85:
d7:b6:d0:01:4f:47:33:58:28:42:42:34:bd:41:46:
72:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:89:1B:C6:E4:04:F8:AA:E5:72:97:AE:F7:44:C1:73:51:1C:13:FF
X509v3 Authority Key Identifier:
keyid:35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:dc:84:b6:db:54:27:30:73:1f:85:54:e6:67:fd:b1:1e:d1:
57:14:16:c9:59:7f:90:dc:75:a9:e5:e4:09:e6:a8:46:cc:57:
f0:c6:8a:8a:22:e9:8a:81:bf:50:76:4f:32:b7:d4:9b:95:b1:
7a:31:af:5a:ac:eb:44:69:4a:bc:1a:2b:b7:89:12:31:40:3d:
95:dc:75:58:07:ba:d5:aa:fa:9c:1a:93:4b:5c:a9:20:ef:11:
16:37:2b:44:44:42:43:31:44:6a:81:cb:78:05:e8:bd:0b:06:
ac:14:d1:4e:3c:6e:5c:8b:32:7f:57:9f:f5:1e:df:3f:31:55:
d1:5d:3f:d8:4f:09:2a:27:f4:07:51:3c:14:32:25:a5:2f:44:
cb:d2:bf:ad:81:3c:9e:88:c1:e0:94:f7:ca:a4:d2:2c:f8:89:
b7:ea:cc:c7:be:84:3c:af:bb:f6:c9:7b:61:2d:cc:de:88:fb:
c4:cb:87:82:2f:8e:81:e5:08:4e:39:10:07:4d:61:05:ac:a8:
4b:ff:ee:58:35:d1:9a:ee:43:cd:00:58:76:36:ab:d0:9a:3c:
9b:3d:25:6b:a1:df:7e:23:ed:5c:6a:22:9f:a3:4a:11:11:61:
5f:ad:89:ec:5f:06:72:bf:99:e3:87:6b:5f:28:5a:bd:f5:b6:
3b:b0:e2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:09:01 2026 by rpki-client