Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
File: NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft (raw, json)
Hash identifier: 6BP9o8jqkM5q8cR9EEX0v7GSsh3Yw6P5wLWDbca1Qqo=
Subject key identifier: EC:66:94:43:20:AA:5D:67:86:FC:B7:62:79:88:FC:79:6C:CD:E0:56
Authority key identifier: 36:D3:F5:9B:5F:8A:8F:D6:6F:1D:13:A2:D0:F9:1D:C2:2B:F8:A1:CA
Certificate issuer: /CN=36d3f59b5f8a8fd66f1d13a2d0f91dc22bf8a1ca
Certificate serial: 019FA862781D9D23E04F69B37EA100B56F98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
Manifest number: F9
Signing time: Tue 28 Jul 2026 11:00:53 +0000
Manifest this update: Tue 28 Jul 2026 11:00:53 +0000
Manifest next update: Wed 29 Jul 2026 11:00:53 +0000
Files and hashes: 1: K21rZ8iSPzRD0y2-8XH6DYAR720.asa (hash: WdKRw8QVqYDS6afPeC1sTisyLqYHDRhDINFD62xXAtQ=)
2: NtP1m1-Kj9ZvHROi0Pkdwiv4oco.crl (hash: H89Rv6lSFlZy7uRgR/FNQYadbfNBsxAplgrssQgL82o=)
3: VHyFqWR0a0N6Jb-SqSv3sKoAF5Y.roa (hash: ewx9Epnewi0OtJiwgx7sgDatpdquBPwdoRqY8DXtLIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:78:1d:9d:23:e0:4f:69:b3:7e:a1:00:b5:6f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d3f59b5f8a8fd66f1d13a2d0f91dc22bf8a1ca
Validity
Not Before: Jul 28 11:00:53 2026 GMT
Not After : Jul 29 11:00:53 2026 GMT
Subject: CN=ec66944320aa5d6786fcb7627988fc796ccde056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dd:c7:b1:c5:2f:32:b7:0b:d7:0f:f7:b4:86:
01:45:36:5b:a8:69:c8:e3:2c:dd:ba:70:35:46:c7:
f8:2c:82:9d:53:54:58:5e:b7:70:81:35:8c:68:6f:
f8:14:fe:09:a2:62:e9:23:01:2d:3c:15:d8:04:08:
48:09:2c:22:d3:8f:96:54:7b:6c:05:dd:70:a3:bc:
3f:e4:03:58:aa:da:18:7d:6d:26:d9:d2:7b:dc:46:
bb:04:a5:a4:1d:2b:a5:13:6a:73:d7:32:76:3e:cf:
39:ac:be:7e:ed:0c:96:ae:ea:b3:d3:bd:73:db:59:
50:51:55:c0:1c:40:70:d6:b6:ee:26:b6:45:9f:f0:
d5:4d:3b:e3:c2:c1:66:2b:29:73:b0:c7:a0:5d:ef:
7e:3a:23:d0:f6:b7:65:3e:98:d7:44:89:58:f4:8a:
4a:c0:6e:f4:4a:d9:aa:c5:ab:e7:4e:da:c7:e1:a8:
1e:b0:03:ab:a3:3e:25:99:a7:61:a9:d1:90:3c:fc:
ff:f9:0c:29:9b:e5:50:95:59:6d:74:1d:96:5b:61:
42:29:cf:5b:04:d3:20:0e:65:fe:03:85:ae:de:7c:
fa:72:9a:de:2d:21:b0:66:69:fe:6c:4b:ce:9b:eb:
1f:39:6a:f5:00:ce:0e:fc:25:8e:49:c4:a7:17:0b:
09:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:66:94:43:20:AA:5D:67:86:FC:B7:62:79:88:FC:79:6C:CD:E0:56
X509v3 Authority Key Identifier:
keyid:36:D3:F5:9B:5F:8A:8F:D6:6F:1D:13:A2:D0:F9:1D:C2:2B:F8:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a6:bd:61:4b:71:b1:2f:05:38:75:f9:63:8d:7d:5e:e4:e2:
9e:8b:93:ad:a2:b3:39:ab:97:b2:2e:9a:40:4a:9d:a9:9f:52:
51:a1:1a:5c:27:9c:d3:31:29:91:75:a2:c2:5e:9d:4f:d6:bc:
23:ca:71:dc:1b:72:da:b5:84:65:60:d3:55:76:ae:d2:ec:22:
4c:80:88:49:a3:0e:63:91:a2:62:64:a7:45:76:3c:9d:8a:62:
69:61:25:4f:4b:b0:70:2d:e6:28:5a:2e:47:d2:f0:d1:1b:0b:
41:9a:ea:79:8a:66:36:f2:53:41:8e:bd:05:b8:15:83:08:e0:
96:4e:73:86:68:46:f1:73:bd:a2:81:de:17:9f:ee:27:aa:cd:
90:bd:ee:57:ab:d1:95:7e:82:29:43:8d:b3:c8:9f:53:42:e6:
b4:cb:6a:23:fc:e5:60:40:cd:b5:74:c5:e8:74:7c:52:7c:e0:
d1:bd:0e:07:fc:12:50:fb:40:6b:f5:89:2c:05:71:f5:b5:6e:
9b:1c:94:64:02:4e:a3:4b:58:fd:e8:81:b9:a0:e2:68:93:27:
51:a2:e7:88:97:70:9b:78:5e:90:19:f3:27:16:f4:c0:ca:ad:
09:f4:1b:7f:d1:72:97:0f:dc:38:74:0f:a7:b8:e6:9f:53:1c:
11:4c:93:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:10:33 2026 by rpki-client