Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
File: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft (raw, json)
Hash identifier: 3bRh1CirLUfh9O7iI7Z5QjgoIoRqUIjm6HBdxvG0RJI=
Subject key identifier: 52:6E:AD:E6:4A:48:F9:0B:EB:3F:6A:4B:E5:74:78:C8:EF:4E:50:8F
Authority key identifier: 9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E
Certificate issuer: /CN=9ed76829ba6314a035fda799fc0370336657083e
Certificate serial: 01A0C5574E5FECA905130233685ACC2AAEE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
Manifest number: 14D5
Signing time: Mon 21 Sep 2026 19:00:28 +0000
Manifest this update: Mon 21 Sep 2026 19:00:28 +0000
Manifest next update: Tue 22 Sep 2026 19:00:28 +0000
Files and hashes: 1: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl (hash: OSpCbPWrHETw1AGr9+NoraCiPwrYTcXDwPmxDhduANM=)
2: rCaZ9Cy0alwfhMcrkhs7A3NYfB8.roa (hash: 7fg83l1F4WyPmXoTljaULo+YFLoO2z4vAMFAKMJkors=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:4e:5f:ec:a9:05:13:02:33:68:5a:cc:2a:ae:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed76829ba6314a035fda799fc0370336657083e
Validity
Not Before: Sep 21 19:00:28 2026 GMT
Not After : Sep 22 19:00:28 2026 GMT
Subject: CN=526eade64a48f90beb3f6a4be57478c8ef4e508f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cc:a8:62:33:ce:4f:57:db:b7:5e:02:1a:80:
7f:3c:5f:6c:4f:e3:51:e9:43:3b:48:36:64:78:41:
9f:85:5f:73:8c:1f:95:74:b0:fa:bd:e2:69:cd:79:
f5:a5:2b:fb:43:3c:85:62:45:0a:50:bc:e4:98:c7:
0d:97:b8:aa:8a:88:db:09:60:31:5d:91:32:68:1c:
01:c6:f4:c4:06:1b:e7:72:de:e2:fa:0f:25:13:cd:
aa:e5:78:19:bf:17:e0:d3:33:26:04:3b:ef:d4:c7:
d7:96:c6:9b:2d:a6:83:f6:c0:9b:4a:df:52:fa:8f:
0a:c4:95:02:88:66:10:8e:cd:c3:01:97:a2:03:30:
11:ff:4d:f7:7d:b6:f3:10:c0:47:f8:22:24:a1:0a:
6d:6a:62:fc:0d:5c:89:76:15:9f:a0:18:1c:d2:92:
4d:19:2c:16:23:d7:08:de:db:59:63:e4:0c:9b:e8:
f6:0c:f9:7d:1c:63:7f:fa:e4:ab:dd:b1:7b:a5:2d:
39:d4:be:64:59:e8:17:e8:86:a6:9a:78:19:2c:73:
f0:2f:b6:3e:6b:9d:36:ff:34:5f:7b:68:c7:32:a6:
16:91:90:0b:cd:83:4c:f7:bf:92:19:3b:11:1d:81:
53:f2:db:a9:cb:dc:d3:19:3e:b0:30:9a:01:e1:70:
a3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6E:AD:E6:4A:48:F9:0B:EB:3F:6A:4B:E5:74:78:C8:EF:4E:50:8F
X509v3 Authority Key Identifier:
keyid:9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:da:af:f2:0b:03:99:3c:7a:bb:54:ba:ec:61:fb:b1:9e:9b:
e0:57:95:6e:9b:4d:09:c0:32:d1:a6:8a:f2:c6:c8:c6:5f:79:
5a:aa:64:fd:ce:33:93:8f:a6:68:68:ea:d0:b1:5b:65:16:89:
67:85:4a:6d:bf:86:5d:9e:85:b7:dd:a6:1c:13:4d:a3:04:62:
e1:ac:7f:00:19:67:6d:15:21:d1:53:dd:bd:2e:54:b0:96:bf:
bb:3e:a3:28:e7:fd:78:a4:1d:d7:84:96:86:e8:d1:b9:22:bc:
ce:9e:c9:fd:b2:11:e3:26:16:fc:c0:85:e2:f1:ea:3f:b8:09:
c9:c1:df:e6:ef:64:c5:2f:f9:74:75:37:cf:1e:21:a4:89:fa:
83:ab:b8:b7:29:51:9b:53:c7:24:40:e7:a7:35:f7:65:c2:b3:
22:43:b5:58:b6:89:dd:c3:c4:30:4d:f6:14:49:07:7f:47:20:
bd:ed:ef:34:98:52:ce:17:ab:86:cd:d9:88:52:e3:cd:51:f7:
05:3c:61:28:31:dd:a8:0a:02:ae:72:18:57:87:d7:ce:a1:52:
35:9e:0d:ca:2e:86:43:17:79:6e:51:33:05:31:aa:77:6d:95:
7b:1f:26:34:8e:62:fc:78:0f:12:3d:07:e3:78:96:06:35:36:
33:c2:64:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFV05f7KkFEwIzaFrMKq7oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZDc2ODI5YmE2MzE0YTAzNWZkYTc5OWZjMDM3MDMzNjY1
NzA4M2UwHhcNMjYwOTIxMTkwMDI4WhcNMjYwOTIyMTkwMDI4WjAzMTEwLwYDVQQD
Eyg1MjZlYWRlNjRhNDhmOTBiZWIzZjZhNGJlNTc0NzhjOGVmNGU1MDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcyoYjPOT1fbt14CGoB/PF9sT+NR
6UM7SDZkeEGfhV9zjB+VdLD6veJpzXn1pSv7QzyFYkUKULzkmMcNl7iqiojbCWAx
XZEyaBwBxvTEBhvnct7i+g8lE82q5XgZvxfg0zMmBDvv1MfXlsabLaaD9sCbSt9S
+o8KxJUCiGYQjs3DAZeiAzAR/033fbbzEMBH+CIkoQptamL8DVyJdhWfoBgc0pJN
GSwWI9cI3ttZY+QMm+j2DPl9HGN/+uSr3bF7pS051L5kWegX6IammngZLHPwL7Y+
a502/zRfe2jHMqYWkZALzYNM97+SGTsRHYFT8tupy9zTGT6wMJoB4XCjyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJureZKSPkL6z9qS+V0eMjvTlCPMB8GA1UdIwQY
MBaAFJ7XaCm6YxSgNf2nmfwDcDNmVwg+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnRkb0ticGpGS0ExX2FlWl9BTndNMlpYQ0Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iNWY4MGQtMmE3ZC00YmFiLWFhYWEt
YmYyNjRhMjE1YjMyLzEvbnRkb0ticGpGS0ExX2FlWl9BTndNMlpYQ0Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iNWY4MGQtMmE3ZC00YmFiLWFhYWEtYmYyNjRhMjE1YjMy
LzEvbnRkb0ticGpGS0ExX2FlWl9BTndNMlpYQ0Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddqv8gsD
mTx6u1S67GH7sZ6b4FeVbptNCcAy0aaK8sbIxl95Wqpk/c4zk4+maGjq0LFbZRaJ
Z4VKbb+GXZ6Ft92mHBNNowRi4ax/ABlnbRUh0VPdvS5UsJa/uz6jKOf9eKQd14SW
hujRuSK8zp7J/bIR4yYW/MCF4vHqP7gJycHf5u9kxS/5dHU3zx4hpIn6g6u4tylR
m1PHJEDnpzX3ZcKzIkO1WLaJ3cPEME32FEkHf0cgve3vNJhSzherhs3ZiFLjzVH3
BTxhKDHdqAoCrnIYV4fXzqFSNZ4Nyi6GQxd5blEzBTGqd22Vex8mNI5i/HgPEj0H
43iWBjU2M8Jkng==
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:16:16 2026 by rpki-client