Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
File: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft (raw, json)
Hash identifier: S1Uxx+/RvgJ6pB699e+RE9Eqr5JYPErd+mPJ8OH3zJs=
Subject key identifier: 98:38:C9:D8:90:8E:9E:0D:5F:D2:79:43:4C:BE:45:C8:DF:5F:5D:60
Authority key identifier: 35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
Certificate issuer: /CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Certificate serial: 019D9886C36721012482E57DEEBE61DFA409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 23:01:01 +0000
Manifest this update: Thu 16 Apr 2026 23:01:01 +0000
Manifest next update: Fri 17 Apr 2026 23:01:01 +0000
Files and hashes: 1: FEFxaV6JKNIg7q55qcKCrfCq-z4.roa (hash: b7JfyrsOhBHQzoGqHArOuD+GUoiR1U1SMxRpiIKCIn8=)
2: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl (hash: nUgWepclXnGabkGRT9zxOokeTws7+cDK6TDPoXqu7W0=)
3: baFyB991hO6zmvEFA-bUR-SSeO0.roa (hash: HCQWZRB071vWE048uQIisBvoukGqn9JR/elQALPMrxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:c3:67:21:01:24:82:e5:7d:ee:be:61:df:a4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Validity
Not Before: Apr 16 23:01:01 2026 GMT
Not After : Apr 17 23:01:01 2026 GMT
Subject: CN=9838c9d8908e9e0d5fd279434cbe45c8df5f5d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c9:b1:fd:b5:7f:db:3e:dd:78:f3:2d:25:96:
3d:71:f3:ff:3f:33:fd:20:6c:a1:9c:83:c6:e6:ee:
a1:b3:66:d0:ab:b4:00:0c:49:3b:26:03:31:c5:d4:
79:ec:40:d9:43:72:ca:06:6b:92:bd:23:39:0c:e5:
fe:dc:5f:1e:b7:c9:99:72:9e:d8:17:41:86:52:37:
b2:69:b2:2d:74:ba:92:fd:f9:45:20:8a:5b:b6:f1:
9f:36:43:d6:52:7b:de:3b:2d:ad:af:eb:5b:54:ab:
a2:2c:39:eb:cd:12:d6:83:22:9e:ff:1d:b6:12:4b:
e2:5e:50:d6:bf:ee:50:de:ca:48:f9:b8:7e:40:c4:
87:82:16:7b:98:2b:ec:0e:65:2f:81:11:98:9f:35:
26:1e:a2:c1:c6:9e:08:bb:06:4b:5e:80:8b:5c:dd:
29:41:d2:80:24:aa:ca:4c:68:20:ce:84:1f:13:e0:
01:a3:1f:3c:55:90:25:e3:e9:53:fc:7e:f9:7b:2c:
db:aa:33:62:9a:4f:af:1d:b5:79:1e:7a:d6:7c:f0:
bc:8e:16:cc:be:ce:92:e5:b1:57:a0:b4:ba:f0:24:
03:57:37:a0:a5:38:96:30:25:46:3c:86:e1:22:a4:
cd:3f:0f:32:ce:d0:02:85:1c:03:bc:b0:6a:fa:e7:
0c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:38:C9:D8:90:8E:9E:0D:5F:D2:79:43:4C:BE:45:C8:DF:5F:5D:60
X509v3 Authority Key Identifier:
keyid:35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:70:98:51:09:f8:5a:1d:e3:6d:60:01:20:8c:2a:20:f1:a9:
36:c7:b5:42:23:29:76:5c:d1:20:f0:42:70:3f:ff:74:b6:e4:
fc:57:3e:bb:61:95:bf:1d:a1:41:0f:9b:5e:42:9c:4e:ef:30:
e8:17:95:73:db:d0:14:2b:f2:89:56:2c:ed:f7:af:4a:03:2c:
57:56:6d:d9:67:fa:02:37:2d:7d:59:25:b0:24:42:7f:de:bd:
bd:65:48:13:2c:3c:09:30:37:c1:d8:a2:74:39:44:17:c4:18:
d3:30:8f:53:e9:5e:9f:c2:62:46:bb:d5:79:4f:b1:f1:30:5b:
00:27:f8:09:1d:0b:e6:c6:dd:96:46:7b:b1:87:c1:42:88:cb:
1c:74:d1:a9:31:5e:9a:a2:e5:38:71:c6:79:33:5a:8a:eb:2c:
b5:3a:f3:df:d7:d7:6c:b2:dd:51:c8:d9:94:39:93:36:3e:c2:
a2:8d:f4:ff:3d:2b:e6:1c:1e:c2:b8:bd:cf:f5:1c:a7:65:80:
0e:b0:04:ac:ae:51:16:1e:38:2f:de:53:14:56:38:ce:02:7b:
f1:8c:49:96:4c:98:40:f9:ec:b0:5f:27:1d:eb:a0:f3:83:78:
ce:a2:be:68:f8:19:17:a6:1d:83:bd:53:37:84:c2:f3:b8:5b:
9a:b6:ac:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:32:43 2026 by rpki-client