Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
File: ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft (raw, json)
Hash identifier: YqCDrvwQ+FKPGChCSFLTD5cnsEs+4upsQKZ+mn/9qGU=
Subject key identifier: C2:EC:CA:BB:55:BB:40:32:DB:41:E7:51:0A:58:4B:F4:9C:ED:A6:66
Authority key identifier: 9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
Certificate issuer: /CN=9ed0c4ff4a90073288b97674694142721f5b8435
Certificate serial: 019D4CC83E913EDFF64CA232265F2D2F0067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
Manifest number: 1378
Signing time: Thu 02 Apr 2026 06:01:24 +0000
Manifest this update: Thu 02 Apr 2026 06:01:24 +0000
Manifest next update: Fri 03 Apr 2026 06:01:24 +0000
Files and hashes: 1: mRwQ4FZ4qs3-KkP76bFaXtLs11U.roa (hash: d2Arbpcg/AGTRi9adeSZYOX/MBudha1YOQCfUnmj+l8=)
2: ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl (hash: MqFHEehnHqSUz1j0qhnqSG0x+CxosoQhApeVtiuHOKs=)
3: yZW2mE5zLO01eM0W6hRtG-uljlk.roa (hash: RagjUFsbMgoncBiop+dDC5tIWu14Ngw7xbU4GHUKDw4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4c:c8:3e:91:3e:df:f6:4c:a2:32:26:5f:2d:2f:00:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed0c4ff4a90073288b97674694142721f5b8435
Validity
Not Before: Apr 2 06:01:24 2026 GMT
Not After : Apr 3 06:01:24 2026 GMT
Subject: CN=c2eccabb55bb4032db41e7510a584bf49ceda666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:82:a9:df:bc:c5:02:7b:4e:ee:8a:99:b7:19:
5d:ce:f9:44:73:f5:81:16:9c:0e:fe:92:f1:ee:79:
a0:f4:4f:5c:cd:8c:c3:de:8a:18:6d:cf:22:00:01:
cc:da:92:32:b0:fc:0e:06:49:dd:78:68:55:c6:c0:
1f:be:9e:9c:04:a6:af:7d:c3:6c:a1:94:60:e5:60:
b7:1d:2a:5f:93:9c:93:8f:f9:ee:7a:85:67:5a:8a:
0b:ef:85:8a:c0:da:76:1d:34:f7:4c:f7:5e:27:c0:
7e:9c:23:41:6f:24:c9:2c:46:4d:57:0d:74:5d:bd:
c3:0f:18:84:7a:af:6c:35:d0:c2:72:4e:fe:e3:60:
de:a4:87:2c:a5:cc:62:2d:0c:ea:34:61:9a:b3:7a:
fd:1d:55:d9:5f:57:58:18:e0:f6:c3:bb:aa:78:20:
fb:b5:39:13:75:4c:e2:33:93:b6:ff:5a:04:db:8b:
b7:f0:39:4f:2e:5c:cd:2f:aa:06:c3:cd:31:fa:54:
57:cd:c3:63:0e:0a:f4:59:09:c8:5c:3a:dc:ed:b0:
71:a2:79:da:e0:e8:3a:fc:24:37:20:48:3c:c5:6d:
ef:f5:24:cb:be:c3:43:81:bc:6f:d5:e3:32:36:f6:
d3:11:e2:59:ae:90:c4:06:8d:f8:df:e8:cb:d9:a1:
b6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EC:CA:BB:55:BB:40:32:DB:41:E7:51:0A:58:4B:F4:9C:ED:A6:66
X509v3 Authority Key Identifier:
keyid:9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:2a:5c:11:36:8e:06:ec:9f:a6:c3:e3:fc:9a:21:5f:f4:2a:
70:27:b5:19:75:87:66:05:13:d4:37:4a:f2:a7:4b:31:58:5b:
37:5b:0c:c0:06:25:75:ed:7a:91:8a:f5:4f:b3:8a:77:bd:e3:
d6:8e:4f:c5:23:30:bf:6c:87:e5:5c:41:e7:0e:7b:db:73:2f:
31:35:72:bd:6d:e1:54:11:ea:ef:fa:e4:6c:6d:84:66:43:95:
6d:ad:06:1f:6d:a8:82:f5:99:71:d4:34:ea:59:c6:4d:0b:02:
d3:57:8b:c5:7a:35:76:b8:58:5e:b4:0f:47:4c:de:3c:55:30:
e8:27:54:e4:6e:3c:a3:21:47:9e:4a:07:db:08:ea:b4:be:1f:
08:02:26:ef:f1:e9:d2:09:b5:0c:86:83:3e:81:21:7e:ac:e4:
8e:ac:8c:d4:d0:ee:44:73:fe:c9:59:3f:32:30:26:c6:0c:44:
ff:0f:e1:50:69:25:c8:67:b4:88:42:d2:e9:f5:f5:aa:49:e3:
90:4f:32:ef:fd:cc:ee:7f:16:d9:48:4c:55:3d:7c:91:a0:06:
be:b2:c7:3b:7e:88:80:71:57:49:e6:c3:20:b8:84:dc:ec:68:
cf:68:8f:f8:b5:5a:24:5b:74:2b:71:0c:c7:78:d7:fb:3d:2b:
e4:28:1b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:24 2026 by rpki-client