Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
File: NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft (raw, json)
Hash identifier: D25kXGUZmfCdAAD0VKWonZXjFopQQpOmlJKLQTIeD7Q=
Subject key identifier: 18:D2:D5:70:14:33:EE:92:93:64:55:5A:90:6C:7B:A7:E1:1D:95:B5
Authority key identifier: 36:D3:F5:9B:5F:8A:8F:D6:6F:1D:13:A2:D0:F9:1D:C2:2B:F8:A1:CA
Certificate issuer: /CN=36d3f59b5f8a8fd66f1d13a2d0f91dc22bf8a1ca
Certificate serial: 019EBF23F477F00A55D3811426CF72F41884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
Manifest number: 80
Signing time: Sat 13 Jun 2026 04:01:04 +0000
Manifest this update: Sat 13 Jun 2026 04:01:04 +0000
Manifest next update: Sun 14 Jun 2026 04:01:04 +0000
Files and hashes: 1: K21rZ8iSPzRD0y2-8XH6DYAR720.asa (hash: WdKRw8QVqYDS6afPeC1sTisyLqYHDRhDINFD62xXAtQ=)
2: MbX8Toqw0r9J8vtm77AKZx_6DsI.roa (hash: 3VtGQhyNOfR+9FmN7zOP8ZwidizXpvCOvQGwobiO8IE=)
3: NtP1m1-Kj9ZvHROi0Pkdwiv4oco.crl (hash: Ry62XiM0boF3xAo2w5isdRDhZ5x5j/IEgD/8VZJcmHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:f4:77:f0:0a:55:d3:81:14:26:cf:72:f4:18:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d3f59b5f8a8fd66f1d13a2d0f91dc22bf8a1ca
Validity
Not Before: Jun 13 04:01:04 2026 GMT
Not After : Jun 14 04:01:04 2026 GMT
Subject: CN=18d2d5701433ee929364555a906c7ba7e11d95b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b7:bd:23:e5:40:33:1e:36:3a:4d:41:ee:8d:
74:63:4a:03:3a:cb:ef:aa:ce:2a:f2:5a:db:84:30:
b3:e6:da:24:e6:a2:63:9a:3a:bb:a4:23:fc:e3:9a:
29:88:ed:06:05:17:c0:c2:6d:43:c4:8f:5b:31:8b:
e4:90:4d:34:0d:7f:a9:ee:5f:54:84:f2:e5:2c:f0:
ad:05:7b:ca:bd:6f:9e:18:60:36:8c:0d:b0:f7:3d:
da:a9:55:8e:52:15:50:ee:07:40:82:9d:a8:63:1c:
8b:d1:5b:28:d6:82:de:28:b2:ea:87:e9:24:87:9b:
58:e1:65:5e:6b:0d:ad:41:bb:29:b8:9a:82:ae:6d:
da:4c:f3:24:fd:f7:7f:b8:a8:76:60:87:98:78:f1:
e2:28:6d:91:b7:15:a5:55:84:b6:28:54:4a:10:06:
e5:c5:a4:bb:e5:00:fa:71:92:40:57:dc:11:d8:2e:
b6:7d:1c:93:8f:4f:04:61:aa:4d:d4:98:3e:64:cc:
35:b2:18:ec:b8:42:bf:44:09:58:e9:89:18:34:0f:
d1:7a:0c:45:62:98:1a:4f:4e:10:b4:bc:05:78:8c:
3c:86:dc:d3:ba:a4:a4:e3:85:32:60:54:e8:0c:76:
80:1b:28:57:6a:95:d2:bd:2f:1c:72:07:18:ed:72:
8b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D2:D5:70:14:33:EE:92:93:64:55:5A:90:6C:7B:A7:E1:1D:95:B5
X509v3 Authority Key Identifier:
keyid:36:D3:F5:9B:5F:8A:8F:D6:6F:1D:13:A2:D0:F9:1D:C2:2B:F8:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:6f:54:ac:99:94:fd:ca:4d:ef:9c:52:99:4a:e5:17:4a:a5:
28:50:63:25:4a:2b:c5:d9:f2:b7:db:78:d9:0c:a6:5d:cd:45:
f5:b9:6a:ff:63:85:fc:9e:c3:fe:9b:68:c0:db:fd:da:76:ea:
46:78:77:e4:68:22:1d:fa:62:20:13:28:6b:c7:64:5a:17:aa:
cd:12:2c:e1:6d:3f:f8:d8:01:77:52:c8:cd:18:a5:9d:67:a6:
00:1d:d4:08:28:85:53:77:25:20:8c:b3:f8:a2:f6:7c:65:0d:
f7:6c:4a:41:74:51:f1:fc:18:b1:ae:6e:a7:63:01:4a:50:ab:
c6:10:14:3c:ff:ac:25:60:34:c2:ed:3c:ee:ea:46:04:eb:25:
66:48:be:7c:70:b9:65:be:08:18:f4:30:4b:43:4c:76:80:fe:
9d:f1:20:6f:9a:92:e5:20:bc:00:ab:b3:44:68:cf:b7:a3:7b:
82:23:2b:62:21:b8:5c:8e:43:5b:a9:12:33:f0:4e:1c:d2:b3:
06:4b:a5:4a:66:4c:ec:f3:67:4a:7f:26:24:4f:c3:3b:de:b9:
2f:e0:7e:b8:1b:6b:87:34:47:af:7e:7e:17:88:91:f9:da:46:
a2:03:0d:3b:31:7a:66:39:d4:07:76:9a:aa:2c:a9:d5:0e:ca:
ff:88:68:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:29:41 2026 by rpki-client