Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
File: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft (raw, json)
Hash identifier: auGZ56h3CPKYEr0hZLSxKq+jcxkrZABCvUttNRtpRU4=
Subject key identifier: B0:15:15:B8:28:C4:4D:4B:CD:C4:C9:68:D6:CF:CF:0F:F4:C7:09:30
Authority key identifier: 35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
Certificate issuer: /CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Certificate serial: 019D28844BD90FBE1ACAAF8EEF1AA2D4BF4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 05:00:51 +0000
Manifest this update: Thu 26 Mar 2026 05:00:51 +0000
Manifest next update: Fri 27 Mar 2026 05:00:51 +0000
Files and hashes: 1: FEFxaV6JKNIg7q55qcKCrfCq-z4.roa (hash: b7JfyrsOhBHQzoGqHArOuD+GUoiR1U1SMxRpiIKCIn8=)
2: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl (hash: ehvlu/8ubasZDljFYlFdCqoF6Kk2c817K4osAJQ+GhY=)
3: baFyB991hO6zmvEFA-bUR-SSeO0.roa (hash: HCQWZRB071vWE048uQIisBvoukGqn9JR/elQALPMrxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:4b:d9:0f:be:1a:ca:af:8e:ef:1a:a2:d4:bf:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Validity
Not Before: Mar 26 05:00:51 2026 GMT
Not After : Mar 27 05:00:51 2026 GMT
Subject: CN=b01515b828c44d4bcdc4c968d6cfcf0ff4c70930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:86:a2:63:cd:e1:9f:51:b8:8c:bc:12:3a:76:
6f:47:4f:ca:5e:9e:d4:17:9c:52:2a:80:1b:c5:cf:
99:ad:25:ae:9f:6d:26:e4:c9:60:ee:74:5e:65:c7:
11:a0:f3:65:c2:db:23:f8:5a:cb:f6:e6:93:10:ed:
0d:5c:fb:d8:29:4f:86:08:e4:99:ee:3c:04:9a:7c:
b8:f8:3b:ee:30:7e:af:9b:51:73:71:c0:9d:56:d2:
b7:11:cb:0a:77:80:6f:18:76:eb:3f:60:5f:8d:7e:
b3:f4:b2:b3:8c:1d:00:6b:96:94:40:98:9a:a3:38:
bc:9f:ea:ad:5f:a9:17:65:ce:5b:7f:b6:c7:fe:7a:
0f:14:23:1f:4d:a5:ec:7e:6b:9c:d9:db:6b:81:80:
e6:f0:e7:82:b9:15:89:a9:23:4a:fd:15:5e:38:b6:
05:e6:96:21:3d:59:bd:6e:91:d3:a0:f7:01:b1:8f:
a5:6c:27:a3:e6:47:d9:e9:24:15:be:72:6f:0b:82:
80:19:14:20:65:e2:82:3d:9f:94:52:55:57:dd:3f:
44:5c:a3:e7:4b:79:3b:63:f6:b1:25:e3:12:0b:4f:
9a:6f:df:9f:fc:3c:b9:8f:72:9b:00:69:b3:06:f8:
59:f3:5a:4a:02:03:02:30:c6:12:06:7d:eb:b7:22:
92:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:15:15:B8:28:C4:4D:4B:CD:C4:C9:68:D6:CF:CF:0F:F4:C7:09:30
X509v3 Authority Key Identifier:
keyid:35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:11:64:23:0f:ce:2f:3e:0b:33:09:2c:44:f6:4f:a0:55:c5:
70:cd:d0:e2:df:97:ba:14:d2:55:62:bb:d1:ca:99:36:79:ec:
bc:65:df:3c:67:c9:f9:77:c5:ea:2c:74:f8:2b:89:03:3b:52:
90:eb:d2:81:55:b5:71:1c:20:9c:d4:eb:06:92:d1:f1:50:ae:
d7:d7:c7:87:a8:bc:04:b3:d9:51:74:77:9e:5b:a5:56:67:d8:
2d:29:89:72:48:2c:d1:3b:eb:10:a2:af:5e:4b:bc:64:3a:5f:
9d:44:c9:27:c0:d8:e5:00:11:d5:8a:e5:d4:d2:f2:b2:39:e6:
09:c7:ba:6d:d4:e8:98:92:20:8f:01:ee:b2:d2:c4:48:b4:aa:
27:c5:32:89:33:8e:81:dd:ea:26:f3:31:df:af:d3:06:47:ee:
be:c4:fe:99:4d:12:15:47:bb:11:d3:df:2d:1c:c4:93:6e:fd:
1a:70:ec:12:9d:dc:3f:2c:ca:98:63:80:d6:7c:7f:53:da:9e:
8f:d0:df:1f:e2:5b:ba:f8:0c:90:1e:ff:aa:8f:af:97:81:18:
a3:5a:0a:b2:3d:42:f9:d7:98:27:09:58:b9:fc:c7:17:94:59:
4c:17:e0:24:e4:2d:12:a8:23:ab:96:60:74:a6:8c:8f:2f:b3:
54:00:b9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:55:40 2026 by rpki-client