Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
File: ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft (raw, json)
Hash identifier: Z2SYR5ixLPwlP0Pmx0ZyrSMNebWBlitKQXpMHLuMAIs=
Subject key identifier: 16:B0:7B:9F:34:E5:51:B8:A9:A6:7B:E6:7C:B8:8A:FD:FC:D2:BE:B9
Authority key identifier: 9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
Certificate issuer: /CN=9ed0c4ff4a90073288b97674694142721f5b8435
Certificate serial: 019CAC7E3CEE57E196702962F0D40A2CA1A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
Manifest number: 1325
Signing time: Mon 02 Mar 2026 03:01:20 +0000
Manifest this update: Mon 02 Mar 2026 03:01:20 +0000
Manifest next update: Tue 03 Mar 2026 03:01:20 +0000
Files and hashes: 1: mRwQ4FZ4qs3-KkP76bFaXtLs11U.roa (hash: d2Arbpcg/AGTRi9adeSZYOX/MBudha1YOQCfUnmj+l8=)
2: ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl (hash: MOZcFjshz9NRJnjIFuhpkyAyy3oBFKmCIcEF/S7xbZY=)
3: yZW2mE5zLO01eM0W6hRtG-uljlk.roa (hash: RagjUFsbMgoncBiop+dDC5tIWu14Ngw7xbU4GHUKDw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:3c:ee:57:e1:96:70:29:62:f0:d4:0a:2c:a1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed0c4ff4a90073288b97674694142721f5b8435
Validity
Not Before: Mar 2 03:01:20 2026 GMT
Not After : Mar 3 03:01:20 2026 GMT
Subject: CN=16b07b9f34e551b8a9a67be67cb88afdfcd2beb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:03:dc:09:2b:97:ee:03:a8:f7:f8:96:06:7d:
fc:7b:c7:f9:2f:92:3d:d6:3d:44:4e:ee:04:90:24:
b6:8a:61:55:be:77:df:2f:0b:32:d6:7a:5a:8f:1c:
90:46:5a:04:c5:46:74:c2:12:98:3a:f1:88:09:09:
40:6d:bc:18:26:9e:14:93:bb:d7:7e:20:a3:24:2a:
c0:f5:04:31:5d:bc:0c:9d:fb:1f:0c:d5:1f:29:91:
14:41:f6:0e:8e:cc:9b:eb:8a:13:3a:a3:84:2e:7a:
5a:e3:e0:bb:bc:a6:6c:e8:41:f3:fe:7b:f0:b0:27:
cd:d7:c0:51:34:89:64:32:33:af:50:79:f7:fd:16:
64:43:97:1a:53:c7:87:6a:c4:f7:f7:0b:da:d5:99:
10:86:33:b1:93:86:f1:75:16:46:52:f2:67:05:1d:
d4:62:27:93:3a:a6:86:80:10:04:7d:5b:69:2a:75:
c1:da:25:95:f9:c2:78:f6:b3:14:b9:be:9b:26:df:
c5:36:0f:ec:42:be:0e:54:17:db:fb:86:4a:3b:1b:
59:45:95:ba:18:8f:95:e2:64:7b:8c:ac:08:5b:49:
a9:28:21:6b:4e:19:71:bc:8d:36:7f:a8:59:4c:0f:
9f:d0:e2:89:19:36:30:24:2e:b1:ce:8a:a5:ad:53:
46:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B0:7B:9F:34:E5:51:B8:A9:A6:7B:E6:7C:B8:8A:FD:FC:D2:BE:B9
X509v3 Authority Key Identifier:
keyid:9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:bf:85:80:b5:d0:f2:0a:10:c8:86:91:1a:38:e7:67:e3:46:
98:38:ab:ef:75:bc:bc:2f:8d:19:f9:b7:7d:98:e2:96:8e:58:
63:dd:66:51:6f:d5:f0:8a:80:5d:12:86:a4:ef:01:71:d9:0d:
e8:3a:47:c0:1e:fb:b5:fd:ca:bb:3d:4c:18:da:99:1d:da:12:
2a:f6:3e:a8:7c:d3:6e:5c:cb:4a:93:76:5d:db:4f:80:20:2c:
7e:96:70:e0:22:90:62:49:47:af:55:97:f0:54:86:3b:af:bf:
a3:a4:84:13:2e:8a:45:ed:6d:ef:2b:91:d4:db:a6:91:04:df:
15:b9:c7:49:25:f9:a8:f0:41:2e:b9:8c:90:7a:cc:86:69:6b:
20:e3:92:8d:40:b4:1a:95:b8:13:47:f3:fa:40:55:e3:6d:0a:
e0:9d:d0:6e:3c:84:8a:df:3e:5b:ea:22:af:59:e8:2f:80:cf:
d2:31:d2:9d:7f:77:30:7d:26:ba:4b:87:b6:54:a5:e1:bf:5f:
17:6d:73:10:da:39:b5:2a:86:b9:54:1c:81:ce:0f:00:77:7a:
5f:5a:83:7c:24:f5:fd:d4:ac:57:58:6b:3a:95:53:43:f8:30:
6f:38:c2:52:4d:cd:3b:74:e9:3e:4b:26:e1:1c:11:2c:37:d7:
81:b5:01:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfjzuV+GWcCli8NQKLKGkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZDBjNGZmNGE5MDA3MzI4OGI5NzY3NDY5NDE0MjcyMWY1
Yjg0MzUwHhcNMjYwMzAyMDMwMTIwWhcNMjYwMzAzMDMwMTIwWjAzMTEwLwYDVQQD
EygxNmIwN2I5ZjM0ZTU1MWI4YTlhNjdiZTY3Y2I4OGFmZGZjZDJiZWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgPcCSuX7gOo9/iWBn38e8f5L5I9
1j1ETu4EkCS2imFVvnffLwsy1npajxyQRloExUZ0whKYOvGICQlAbbwYJp4Uk7vX
fiCjJCrA9QQxXbwMnfsfDNUfKZEUQfYOjsyb64oTOqOELnpa4+C7vKZs6EHz/nvw
sCfN18BRNIlkMjOvUHn3/RZkQ5caU8eHasT39wva1ZkQhjOxk4bxdRZGUvJnBR3U
YieTOqaGgBAEfVtpKnXB2iWV+cJ49rMUub6bJt/FNg/sQr4OVBfb+4ZKOxtZRZW6
GI+V4mR7jKwIW0mpKCFrThlxvI02f6hZTA+f0OKJGTYwJC6xzoqlrVNGCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBawe5805VG4qaZ75ny4iv380r65MB8GA1UdIwQY
MBaAFJ7QxP9KkAcyiLl2dGlBQnIfW4Q1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnRERV8wcVFCektJdVhaMGFVRkNjaDliaERVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85YTUwZjEtMjk0Yi00OGU0LWJlYWYt
MWRjYWQ4ZTY4ZWQ5LzEvbnRERV8wcVFCektJdVhaMGFVRkNjaDliaERVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi85YTUwZjEtMjk0Yi00OGU0LWJlYWYtMWRjYWQ4ZTY4ZWQ5
LzEvbnRERV8wcVFCektJdVhaMGFVRkNjaDliaERVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu7+FgLXQ
8goQyIaRGjjnZ+NGmDir73W8vC+NGfm3fZjilo5YY91mUW/V8IqAXRKGpO8BcdkN
6DpHwB77tf3Kuz1MGNqZHdoSKvY+qHzTblzLSpN2XdtPgCAsfpZw4CKQYklHr1WX
8FSGO6+/o6SEEy6KRe1t7yuR1NumkQTfFbnHSSX5qPBBLrmMkHrMhmlrIOOSjUC0
GpW4E0fz+kBV420K4J3QbjyEit8+W+oir1noL4DP0jHSnX93MH0mukuHtlSl4b9f
F21zENo5tSqGuVQcgc4PAHd6X1qDfCT1/dSsV1hrOpVTQ/gwbzjCUk3NO3TpPksm
4RwRLDfXgbUBVA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:16:56 2026 by rpki-client