Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
File: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft (raw, json)
Hash identifier: Jz8rxFReanVDbnM0B0CdtAEbT75MorRtTHQaCpLbGlk=
Subject key identifier: 7B:96:7E:0C:09:8A:1D:34:2D:87:A7:4F:49:C5:12:D1:0E:0A:18:44
Authority key identifier: 9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E
Certificate issuer: /CN=9ed76829ba6314a035fda799fc0370336657083e
Certificate serial: 019CAAC714E5F5C021BB0F70995F2E713942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
Manifest number: 12B5
Signing time: Sun 01 Mar 2026 19:01:39 +0000
Manifest this update: Sun 01 Mar 2026 19:01:39 +0000
Manifest next update: Mon 02 Mar 2026 19:01:39 +0000
Files and hashes: 1: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl (hash: nEKTDk8i12KRZgU4MTP3gDEF72BiowYKAN2G06SlY4E=)
2: rCaZ9Cy0alwfhMcrkhs7A3NYfB8.roa (hash: 7fg83l1F4WyPmXoTljaULo+YFLoO2z4vAMFAKMJkors=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:14:e5:f5:c0:21:bb:0f:70:99:5f:2e:71:39:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed76829ba6314a035fda799fc0370336657083e
Validity
Not Before: Mar 1 19:01:39 2026 GMT
Not After : Mar 2 19:01:39 2026 GMT
Subject: CN=7b967e0c098a1d342d87a74f49c512d10e0a1844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:31:2d:c6:6c:31:d6:9b:3f:3d:a8:e5:7c:a3:
6a:eb:b9:d5:e1:4e:da:97:b8:ae:5f:d0:73:53:d3:
43:a6:ec:e4:2a:e7:9c:87:4d:c0:ff:22:14:cf:e0:
cf:60:8e:54:0b:f0:65:94:b9:e0:a2:e2:e0:9a:8f:
05:85:c5:8d:fb:db:20:ce:ff:dc:14:e5:84:d4:ba:
98:9c:11:e2:2b:5a:a6:46:c5:88:df:2f:43:e7:4d:
af:43:04:66:eb:dd:76:e5:8f:49:10:e3:bf:9f:a3:
fa:bf:b4:43:e3:f1:ab:f0:3b:d7:7d:d4:c2:24:70:
6d:24:dc:8f:73:29:20:da:2b:81:48:63:a1:91:8f:
3a:10:3d:90:85:c0:2d:dd:9f:6d:a5:f2:1c:95:3a:
f0:a1:f5:2e:ac:c3:96:a4:b3:2a:ad:03:25:c1:d0:
9b:0b:38:ec:2a:d3:f6:ba:64:6f:f7:58:71:5c:65:
fe:1f:95:c0:53:fa:d1:7c:64:d0:0d:41:49:b5:06:
ae:aa:92:6a:69:b2:ed:c9:29:7a:da:2a:b4:37:46:
21:7b:f1:e0:9c:ba:e3:ea:c1:08:d8:6c:c0:95:3d:
03:2c:32:e0:2b:34:21:47:74:c7:b4:97:96:fc:27:
20:c3:f4:86:90:30:81:20:0f:3a:ba:a9:58:9c:42:
ce:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:96:7E:0C:09:8A:1D:34:2D:87:A7:4F:49:C5:12:D1:0E:0A:18:44
X509v3 Authority Key Identifier:
keyid:9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:0e:98:f7:73:d2:41:96:de:91:6b:e5:95:53:b6:89:83:30:
1c:12:60:a4:ea:c7:69:43:c0:12:fb:ab:48:8f:af:32:8a:a6:
96:28:bd:5c:b1:ea:55:dd:3e:b3:36:56:bf:a4:51:92:0d:5b:
b6:e7:19:2b:c3:94:2c:fc:24:19:78:16:2d:36:28:be:dd:73:
a9:22:b8:26:71:d1:3a:f0:18:7c:70:55:fc:0c:4f:3c:3d:d3:
bc:57:99:ad:cc:21:f6:0b:71:df:4f:24:c5:b8:4d:ab:30:0e:
3f:ce:05:80:06:25:c2:9d:7f:5b:b0:fa:06:95:43:12:16:5a:
0f:31:3b:f0:cb:a4:0b:e4:c0:45:16:a5:d7:be:33:b4:38:87:
35:75:44:7e:f2:2f:d0:f7:d7:cb:4d:08:d3:24:76:4c:f7:fb:
3d:4b:ef:fb:9e:d8:d4:3c:09:52:53:ab:bf:a0:da:4f:16:ae:
6d:45:4f:1b:02:71:b2:e6:4b:ee:c6:59:c7:2a:ca:5f:25:09:
be:da:fd:c0:cf:d9:97:4b:f8:9b:a4:eb:08:d8:b6:33:ff:e8:
db:5b:49:5c:28:75:f8:7b:f9:78:ed:12:e7:bf:45:31:c1:08:
6f:64:d2:1f:99:66:72:ed:ba:c0:77:4b:ca:e2:ad:8b:88:5d:
23:19:fd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:02:39 2026 by rpki-client