Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.mft
File: NTPUOQNczcXww50bP7FhlbVV_KM.mft (raw, json)
Hash identifier: dNJaw/EJrwT+gWdIPRYuMTaUXqmkJbHf5X2A/QcdIxM=
Subject key identifier: 32:E0:E7:29:72:EB:9F:71:2D:55:86:6D:11:61:EF:1C:5B:71:78:51
Authority key identifier: 35:33:D4:39:03:5C:CD:C5:F0:C3:9D:1B:3F:B1:61:95:B5:55:FC:A3
Certificate issuer: /CN=3533d439035ccdc5f0c39d1b3fb16195b555fca3
Certificate serial: 01A0D124FD996135F25AA404B4AC36FADCCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NTPUOQNczcXww50bP7FhlbVV_KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.mft
Manifest number: 0F63
Signing time: Thu 24 Sep 2026 02:00:57 +0000
Manifest this update: Thu 24 Sep 2026 02:00:57 +0000
Manifest next update: Fri 25 Sep 2026 02:00:57 +0000
Files and hashes: 1: GkloadKipNGLxGdn49lnbZG57SQ.roa (hash: HQ8BBGVI4OetCOmU12/iTT2SoIrhzR4vqVTSloeX4A8=)
2: HzSiQ5cWi49phHXsqUbKr7wK6UQ.asa (hash: HhV1R0DUoNL9mOEHeM2zMa8hWDwUyMsVfzVpdgupYCM=)
3: NTPUOQNczcXww50bP7FhlbVV_KM.crl (hash: l1V5qqF8MuCDBTqowyrAUE0lo4BZvEdnqd1Di8MOrf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NTPUOQNczcXww50bP7FhlbVV_KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:fd:99:61:35:f2:5a:a4:04:b4:ac:36:fa:dc:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3533d439035ccdc5f0c39d1b3fb16195b555fca3
Validity
Not Before: Sep 24 02:00:57 2026 GMT
Not After : Sep 25 02:00:57 2026 GMT
Subject: CN=32e0e72972eb9f712d55866d1161ef1c5b717851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:80:d3:bd:10:9a:5f:6a:56:a2:ca:39:3c:bb:
eb:66:fd:22:db:53:27:90:04:06:f6:97:53:e0:dd:
e5:05:61:d6:93:70:1f:ed:fc:cd:c2:56:78:b7:be:
4a:95:fd:43:79:6e:54:eb:3d:69:e1:76:b7:e1:5d:
39:61:f1:9f:1e:fb:8f:40:a5:de:53:13:b5:78:55:
a8:ce:f2:5a:32:a9:16:0a:13:f2:5b:d1:44:f6:20:
5a:54:a3:d7:4d:89:59:ca:3c:0c:55:85:62:19:6b:
1e:d1:0e:25:8f:45:45:79:ed:21:c3:99:82:10:38:
1a:fe:12:05:5e:75:87:5c:19:56:8a:a2:cd:56:73:
58:09:99:bf:c5:f9:59:fd:5d:60:af:89:98:ab:25:
d1:8d:37:7b:45:b7:d7:a8:9f:70:bb:5c:cc:8a:c8:
cf:a8:d1:ba:de:11:0f:76:ef:d9:96:0f:94:5f:8c:
79:6d:a7:98:23:b2:80:55:7e:5a:68:5f:8a:9a:0c:
c2:1f:a5:29:2f:b2:60:c0:6e:5d:a2:6b:e2:3b:76:
a8:ad:77:3c:f4:b7:b5:35:f0:3d:51:b5:39:5c:ee:
0f:0c:4c:cf:c4:f0:b5:12:87:dd:f7:12:66:ba:4b:
1a:3c:94:38:48:a0:c8:22:ff:3c:77:70:65:90:1f:
92:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E0:E7:29:72:EB:9F:71:2D:55:86:6D:11:61:EF:1C:5B:71:78:51
X509v3 Authority Key Identifier:
keyid:35:33:D4:39:03:5C:CD:C5:F0:C3:9D:1B:3F:B1:61:95:B5:55:FC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTPUOQNczcXww50bP7FhlbVV_KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:3c:19:03:bb:ff:3c:56:d8:cc:87:16:18:16:7d:e3:3c:79:
09:0e:70:e4:66:8c:7b:e1:6f:e9:55:80:13:cc:b8:75:b0:a1:
45:83:b1:a8:4b:c8:64:d2:b3:51:c2:db:bf:ca:19:ac:2a:0e:
3f:94:0e:77:94:ad:91:92:30:e8:f4:64:ac:23:e8:1d:13:bd:
29:5f:b0:70:09:45:be:f1:ad:9d:1e:37:26:92:b7:db:c9:c6:
09:bb:6d:28:59:14:1e:00:a4:2d:f3:4e:3a:37:4c:b3:0f:f5:
50:e2:02:e9:1d:92:cc:dc:e9:ad:0b:b7:ca:57:63:7e:7e:0f:
3b:e5:63:c1:ad:a4:5d:69:f5:3f:d7:fc:ae:38:5c:61:ff:42:
f0:3a:c4:ad:63:27:9e:2a:ba:ab:e5:bf:6e:b9:51:dc:ad:2e:
68:64:3d:28:62:5a:9f:5a:9f:7f:6b:f1:ac:b5:ce:a2:b8:13:
08:fc:df:5a:80:25:e4:d2:c7:97:98:76:b6:30:77:6b:4b:db:
f9:d7:81:a2:a5:bd:f3:d0:84:50:e8:7b:e5:b5:af:3f:c2:b1:
f6:a5:a4:49:e0:53:68:32:91:7c:cd:3c:33:8b:8c:6f:f9:9b:
d8:a0:9a:d0:dd:65:b4:ee:4d:3f:bc:7f:ea:26:4a:dc:89:24:
83:82:7d:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRJP2ZYTXyWqQEtKw2+tzNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MzNkNDM5MDM1Y2NkYzVmMGMzOWQxYjNmYjE2MTk1YjU1
NWZjYTMwHhcNMjYwOTI0MDIwMDU3WhcNMjYwOTI1MDIwMDU3WjAzMTEwLwYDVQQD
EygzMmUwZTcyOTcyZWI5ZjcxMmQ1NTg2NmQxMTYxZWYxYzViNzE3ODUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8IDTvRCaX2pWoso5PLvrZv0i21Mn
kAQG9pdT4N3lBWHWk3Af7fzNwlZ4t75Klf1DeW5U6z1p4Xa34V05YfGfHvuPQKXe
UxO1eFWozvJaMqkWChPyW9FE9iBaVKPXTYlZyjwMVYViGWse0Q4lj0VFee0hw5mC
EDga/hIFXnWHXBlWiqLNVnNYCZm/xflZ/V1gr4mYqyXRjTd7RbfXqJ9wu1zMisjP
qNG63hEPdu/Zlg+UX4x5baeYI7KAVX5aaF+KmgzCH6UpL7JgwG5domviO3aorXc8
9Le1NfA9UbU5XO4PDEzPxPC1Eofd9xJmuksaPJQ4SKDIIv88d3BlkB+S2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLg5yly659xLVWGbRFh7xxbcXhRMB8GA1UdIwQY
MBaAFDUz1DkDXM3F8MOdGz+xYZW1VfyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlRQVU9RTmN6Y1h3dzUwYlA3RmhsYlZWX0tNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84Y2YyYTYtNDUyOS00M2Q5LWI3ODIt
MzZlODVhYmU1MmZmLzEvTlRQVU9RTmN6Y1h3dzUwYlA3RmhsYlZWX0tNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy84Y2YyYTYtNDUyOS00M2Q5LWI3ODItMzZlODVhYmU1MmZm
LzEvTlRQVU9RTmN6Y1h3dzUwYlA3RmhsYlZWX0tNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDwZA7v/
PFbYzIcWGBZ94zx5CQ5w5GaMe+Fv6VWAE8y4dbChRYOxqEvIZNKzUcLbv8oZrCoO
P5QOd5StkZIw6PRkrCPoHRO9KV+wcAlFvvGtnR43JpK328nGCbttKFkUHgCkLfNO
OjdMsw/1UOIC6R2SzNzprQu3yldjfn4PO+Vjwa2kXWn1P9f8rjhcYf9C8DrErWMn
niq6q+W/brlR3K0uaGQ9KGJan1qff2vxrLXOorgTCPzfWoAl5NLHl5h2tjB3a0vb
+deBoqW989CEUOh75bWvP8Kx9qWkSeBTaDKRfM08M4uMb/mb2KCa0N1ltO5NP7x/
6iZK3Ikkg4J9dA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 13:01:33 2026 by rpki-client