Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.mft
File: NTPUOQNczcXww50bP7FhlbVV_KM.mft (raw, json)
Hash identifier: /j3s2/PYNitG/sPsd0bcfggLjWC+YlK0+M3W2m8D1Po=
Subject key identifier: 08:73:BC:C7:A8:19:31:6D:13:C2:74:7F:D0:0E:91:E1:27:53:ED:FA
Authority key identifier: 35:33:D4:39:03:5C:CD:C5:F0:C3:9D:1B:3F:B1:61:95:B5:55:FC:A3
Certificate issuer: /CN=3533d439035ccdc5f0c39d1b3fb16195b555fca3
Certificate serial: 01A0C96ADA0811EC1ABEAFAE4690F97B8C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NTPUOQNczcXww50bP7FhlbVV_KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.mft
Manifest number: 0F5F
Signing time: Tue 22 Sep 2026 14:00:18 +0000
Manifest this update: Tue 22 Sep 2026 14:00:18 +0000
Manifest next update: Wed 23 Sep 2026 14:00:18 +0000
Files and hashes: 1: GkloadKipNGLxGdn49lnbZG57SQ.roa (hash: HQ8BBGVI4OetCOmU12/iTT2SoIrhzR4vqVTSloeX4A8=)
2: HzSiQ5cWi49phHXsqUbKr7wK6UQ.asa (hash: HhV1R0DUoNL9mOEHeM2zMa8hWDwUyMsVfzVpdgupYCM=)
3: NTPUOQNczcXww50bP7FhlbVV_KM.crl (hash: bvCz7MySjlQk8JqPl54ofOjnQfzYw05AAU0hF7U3Ywg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NTPUOQNczcXww50bP7FhlbVV_KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6a:da:08:11:ec:1a:be:af:ae:46:90:f9:7b:8c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3533d439035ccdc5f0c39d1b3fb16195b555fca3
Validity
Not Before: Sep 22 14:00:18 2026 GMT
Not After : Sep 23 14:00:18 2026 GMT
Subject: CN=0873bcc7a819316d13c2747fd00e91e12753edfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:85:aa:04:c8:31:32:74:94:2d:31:42:7f:
ff:44:e4:f1:63:e1:14:ae:2c:18:a3:bf:f3:47:ef:
c1:93:87:01:fa:f5:cc:71:15:80:ff:93:91:b1:34:
f7:0c:c3:f8:d0:d6:5d:d5:16:f4:5c:b9:d1:7d:ef:
11:5e:5c:1e:05:f8:fc:80:30:14:25:31:e5:63:fa:
4a:7f:ad:b4:cd:a2:0c:21:07:0f:72:be:58:57:c2:
3c:d9:67:61:e3:cf:b1:4c:af:59:b4:6e:38:bc:84:
7b:2d:8c:98:cd:04:4a:19:f9:54:61:dc:1d:74:70:
3e:6a:61:29:18:ec:a8:92:ba:1c:1c:b0:9e:cd:e7:
cf:38:8b:ac:aa:a3:f9:4a:ce:85:49:61:2b:b1:c2:
8d:e2:60:1d:ad:23:28:2d:35:4c:91:d7:d4:97:0b:
5c:3a:70:3d:e4:02:2d:57:63:2b:0b:7e:11:45:47:
95:e4:1b:0e:89:06:f1:f6:ec:5b:c4:97:61:95:a3:
a8:9b:87:fa:cd:48:a7:2f:39:cc:0f:08:85:5e:9c:
5a:0c:41:c3:41:53:c5:4f:e4:d1:c9:7e:d4:69:f4:
cb:cc:55:7f:53:04:49:ac:c1:c4:0d:d0:ac:13:09:
88:6d:d0:27:e3:53:a2:fc:21:ae:9e:18:77:1a:5a:
f5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:73:BC:C7:A8:19:31:6D:13:C2:74:7F:D0:0E:91:E1:27:53:ED:FA
X509v3 Authority Key Identifier:
keyid:35:33:D4:39:03:5C:CD:C5:F0:C3:9D:1B:3F:B1:61:95:B5:55:FC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTPUOQNczcXww50bP7FhlbVV_KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ce:15:d0:57:b1:30:fa:e3:1a:d2:3b:7c:0c:57:78:54:73:
06:bf:57:b0:28:e1:99:f0:a4:b6:10:5a:79:4e:b1:09:2a:c8:
39:24:4d:20:1d:78:20:5d:8e:27:9c:d6:96:dd:7e:77:14:43:
2a:ed:88:03:79:11:94:3d:d4:50:e1:03:2c:39:36:01:b1:66:
52:e2:16:79:f3:5b:0f:47:a5:b4:34:8c:8f:f2:42:07:0e:d6:
58:2d:d2:f3:ec:84:7a:8e:4a:e3:c2:c0:96:1c:09:63:58:8c:
f1:ea:15:d9:c0:4b:3f:66:76:f4:18:5a:b8:1a:cb:ce:5d:cb:
bf:bd:47:93:c0:10:f4:2e:d9:2f:e6:b2:8e:b2:e6:32:0a:a5:
68:f6:3e:b9:ec:51:f9:34:16:63:bf:ba:49:86:d5:5f:d9:95:
73:ba:8e:f4:44:69:b6:1a:fc:95:24:17:f3:27:da:96:15:81:
3d:42:8a:e0:ce:82:d4:d6:9a:5a:df:9d:ed:86:e4:8a:1b:a4:
9a:35:66:0a:1c:d8:b4:ca:5d:8c:f4:f6:9f:fe:3c:26:56:97:
5f:49:06:79:ee:0e:26:41:93:27:92:ef:b6:33:c8:84:7f:7a:
17:7f:6d:00:5c:ba:10:2d:4f:19:c2:60:55:0d:f7:13:e6:15:
db:8c:f7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:22:41 2026 by rpki-client