Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
File: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft (raw, json)
Hash identifier: NMq3LzYnut0++vZwrd7FETEFMTpp401lFQeLc0Ybn8g=
Subject key identifier: D2:34:66:E9:11:3A:D7:DB:64:44:F5:2F:84:35:CD:3B:64:65:C5:37
Authority key identifier: 9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E
Certificate issuer: /CN=9ed76829ba6314a035fda799fc0370336657083e
Certificate serial: 019D984F9CE2D3797E6E35A51FB02D9BB42B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
Manifest number: 1330
Signing time: Thu 16 Apr 2026 22:00:47 +0000
Manifest this update: Thu 16 Apr 2026 22:00:47 +0000
Manifest next update: Fri 17 Apr 2026 22:00:47 +0000
Files and hashes: 1: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl (hash: RA4CFEHDpgbmdpvFmwBSJRzk4Yu4xV2uUOy76XBKu/s=)
2: rCaZ9Cy0alwfhMcrkhs7A3NYfB8.roa (hash: 7fg83l1F4WyPmXoTljaULo+YFLoO2z4vAMFAKMJkors=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:9c:e2:d3:79:7e:6e:35:a5:1f:b0:2d:9b:b4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed76829ba6314a035fda799fc0370336657083e
Validity
Not Before: Apr 16 22:00:47 2026 GMT
Not After : Apr 17 22:00:47 2026 GMT
Subject: CN=d23466e9113ad7db6444f52f8435cd3b6465c537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f9:89:47:9a:46:9e:d4:72:d6:26:ed:f3:cb:
5c:7e:67:e1:15:8f:86:2a:87:21:53:49:4c:8d:22:
c2:93:bb:c6:31:9b:c3:8b:ed:27:eb:cf:02:e1:37:
39:a3:05:ee:79:7d:24:a3:7f:7b:ca:cd:c0:8c:44:
ff:3e:6a:3e:bd:e4:73:cf:6f:43:29:59:a5:63:01:
fb:7a:c5:c7:1b:df:35:c1:10:cf:74:39:c2:ea:ad:
d2:9c:21:e6:d8:76:b0:17:da:77:ed:52:86:f3:60:
5e:99:85:9c:43:66:be:91:a9:cc:7d:86:73:e1:09:
b0:d2:54:57:dd:8c:4d:c2:12:de:dc:44:44:3d:f5:
92:41:40:91:64:17:ef:ce:4c:ea:c0:0a:90:24:b7:
7f:2c:35:41:c7:f9:51:f1:d7:5b:2f:11:ab:70:3a:
6c:2d:b6:75:1b:85:50:16:e1:8d:9d:cf:5c:f4:57:
3b:34:4e:08:33:13:5b:bd:eb:d5:b9:57:44:da:59:
1b:30:0d:59:66:1b:ea:b6:9c:72:3d:a7:15:82:65:
ca:70:a4:47:28:85:e0:80:56:45:4e:51:42:45:35:
cf:9c:db:d0:3d:91:77:eb:64:3e:69:ed:12:2f:91:
45:79:b5:95:a1:48:0a:e2:bd:93:54:16:24:f8:20:
10:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:34:66:E9:11:3A:D7:DB:64:44:F5:2F:84:35:CD:3B:64:65:C5:37
X509v3 Authority Key Identifier:
keyid:9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2b:63:3b:2f:54:1c:b0:42:c0:db:6e:0d:f6:60:72:52:48:
ac:d8:5b:d7:19:dc:71:af:f2:c2:a9:f8:52:2a:a6:1d:e9:19:
b1:7b:cb:4e:e7:0e:79:ed:60:11:e4:66:87:d0:a3:b5:fe:c6:
d7:8d:e1:fb:8a:23:e9:49:36:45:cb:5c:a9:e8:bd:2e:f0:a3:
98:b5:36:d0:01:cc:ac:94:d6:b3:89:a3:27:a0:76:6b:78:e4:
be:c0:e0:a3:f6:17:5d:49:91:ee:e4:e3:e5:ed:dc:c2:4a:1c:
46:9f:51:50:e9:88:9b:72:d6:e5:34:54:5d:f4:9d:28:08:e6:
0c:35:7b:cb:44:75:ea:a3:67:18:fb:b2:d5:2c:3b:d3:16:7a:
62:f2:61:66:0f:ea:a4:4d:bd:7a:53:2c:be:6e:7e:42:f9:85:
c2:a5:a4:bc:e9:7f:c0:0f:86:75:a3:fa:32:b4:8d:c0:1c:b1:
ac:00:0c:f5:b0:ad:b0:2b:17:c5:23:a6:df:61:b4:10:24:09:
e8:8d:91:1f:5d:d4:30:bd:b0:02:e4:bd:3a:28:f0:ed:cc:3e:
9f:e7:47:03:43:e0:86:de:6c:e1:d4:d6:11:5c:50:39:60:b8:
fb:e7:d7:3c:5c:77:c9:a3:ff:e9:c1:e4:06:5e:fe:f4:36:bd:
21:c7:a6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:41:11 2026 by rpki-client