Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
File: NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft (raw, json)
Hash identifier: Sb6EFnCmJzhlWMNAcGqp2X2eCJ/HMUnY8Tx/EFs2LmQ=
Subject key identifier: 02:99:D3:79:D8:62:33:53:33:07:D7:0E:69:01:1B:BF:54:96:A8:66
Authority key identifier: 36:D3:F5:9B:5F:8A:8F:D6:6F:1D:13:A2:D0:F9:1D:C2:2B:F8:A1:CA
Certificate issuer: /CN=36d3f59b5f8a8fd66f1d13a2d0f91dc22bf8a1ca
Certificate serial: 01A0C0682AF49E003AC93819E6A3E6830A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
Manifest number: 018A
Signing time: Sun 20 Sep 2026 20:00:47 +0000
Manifest this update: Sun 20 Sep 2026 20:00:47 +0000
Manifest next update: Mon 21 Sep 2026 20:00:47 +0000
Files and hashes: 1: K21rZ8iSPzRD0y2-8XH6DYAR720.asa (hash: WdKRw8QVqYDS6afPeC1sTisyLqYHDRhDINFD62xXAtQ=)
2: NtP1m1-Kj9ZvHROi0Pkdwiv4oco.crl (hash: 2XBl72lIqy8BMqCfrmlHK4ODDaZEEg5iC1Swtco5MGk=)
3: VHyFqWR0a0N6Jb-SqSv3sKoAF5Y.roa (hash: ewx9Epnewi0OtJiwgx7sgDatpdquBPwdoRqY8DXtLIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:68:2a:f4:9e:00:3a:c9:38:19:e6:a3:e6:83:0a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d3f59b5f8a8fd66f1d13a2d0f91dc22bf8a1ca
Validity
Not Before: Sep 20 20:00:47 2026 GMT
Not After : Sep 21 20:00:47 2026 GMT
Subject: CN=0299d379d86233533307d70e69011bbf5496a866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e2:08:42:dc:10:8e:f1:5f:e3:ba:36:ff:3a:
28:32:d0:2b:d8:a6:10:24:55:4f:a5:f3:ae:19:2b:
ae:bf:61:7c:e9:c2:51:d6:6b:b1:8e:fd:96:5b:00:
60:8a:08:1a:2a:30:f1:b5:95:d0:79:ab:91:ac:36:
a1:82:3a:80:6a:e1:bd:2d:52:a7:dd:ca:0a:68:aa:
a5:54:27:98:69:35:49:a0:62:37:f1:fe:e2:14:c4:
da:a9:4d:19:b2:10:15:00:58:e6:df:ea:42:cb:64:
d1:7f:89:62:e0:1e:1c:a7:e2:83:ca:c6:33:3f:c2:
2f:a8:4b:c0:a1:a5:e4:f6:bc:29:5b:97:19:1c:d8:
9e:62:a1:57:06:d3:db:0c:90:ae:cb:45:16:18:a4:
ff:01:17:a8:85:e6:7c:34:ce:96:2d:0b:ae:6f:be:
37:bf:ab:e7:9f:4b:dd:ee:10:f7:72:a6:09:e6:0d:
f7:c6:fa:80:53:b6:9b:15:23:f5:aa:7e:f5:23:b6:
c8:08:6b:68:ac:a0:83:ae:ef:dc:87:53:ab:c6:f5:
b2:25:99:af:17:d8:12:61:29:af:26:24:12:eb:0c:
63:a7:40:57:f0:50:21:14:53:19:03:cd:a3:fd:a3:
3a:ab:a1:a3:2b:cc:25:fc:d7:9c:aa:aa:13:2e:2f:
5a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:99:D3:79:D8:62:33:53:33:07:D7:0E:69:01:1B:BF:54:96:A8:66
X509v3 Authority Key Identifier:
keyid:36:D3:F5:9B:5F:8A:8F:D6:6F:1D:13:A2:D0:F9:1D:C2:2B:F8:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:37:31:c4:dd:f1:57:f7:67:a1:3a:8b:16:fb:9d:f2:a6:46:
f2:aa:48:61:cc:2a:fe:e9:06:4c:04:12:e6:55:d9:72:44:ac:
9d:05:f0:f2:c1:1d:60:15:9d:08:fc:cd:98:f1:af:d5:ec:6c:
8f:ed:56:4a:6c:92:e4:25:ca:58:15:7b:8b:da:58:24:5c:70:
2f:bd:54:96:96:2b:7f:28:b1:89:c5:ec:13:a5:90:52:cf:88:
fa:9e:ed:50:25:06:9c:ce:3e:a6:5a:ac:b8:dc:95:c1:12:66:
d9:c7:a1:34:51:6a:53:8d:66:2a:8b:76:37:43:92:87:d0:30:
8e:3d:71:8f:e9:73:7d:14:09:42:81:4e:7a:42:8a:67:9f:42:
18:96:39:74:75:f8:7c:74:eb:fb:c5:7c:ee:73:73:b6:91:07:
49:87:71:08:48:b0:53:81:64:49:20:70:9b:8c:35:d1:42:80:
76:46:64:48:8b:67:e6:2a:ed:ac:f4:2d:47:29:82:26:31:2b:
a9:89:fd:ce:fb:ea:27:9e:4c:71:2e:5e:b5:a1:1b:3d:6a:9c:
d8:a6:d1:09:53:b2:04:94:79:0f:06:af:de:9a:46:3b:e5:4c:
e5:2b:1e:32:c0:66:57:85:16:2d:7c:59:83:d6:63:fb:f1:85:
8f:2d:5b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 00:10:24 2026 by rpki-client