Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
File: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft (raw, json)
Hash identifier: 7QkdHrfeH+7SBul+uJ+mPbzuEG7Fi6sO9+YJJyALtmE=
Subject key identifier: 18:C8:49:EC:AB:75:AD:93:83:68:30:83:6B:C4:EE:E7:2A:09:E0:94
Authority key identifier: 35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
Certificate issuer: /CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Certificate serial: 019F927FAAAF6AAB39E8CB7E643837D7FA70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 05:01:07 +0000
Manifest this update: Fri 24 Jul 2026 05:01:07 +0000
Manifest next update: Sat 25 Jul 2026 05:01:07 +0000
Files and hashes: 1: FEFxaV6JKNIg7q55qcKCrfCq-z4.roa (hash: b7JfyrsOhBHQzoGqHArOuD+GUoiR1U1SMxRpiIKCIn8=)
2: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl (hash: R4qx4Z3lqWNp8/6K9X6ZukN7gKENcfdqpEJCVtfExtg=)
3: baFyB991hO6zmvEFA-bUR-SSeO0.roa (hash: HCQWZRB071vWE048uQIisBvoukGqn9JR/elQALPMrxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:aa:af:6a:ab:39:e8:cb:7e:64:38:37:d7:fa:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Validity
Not Before: Jul 24 05:01:07 2026 GMT
Not After : Jul 25 05:01:07 2026 GMT
Subject: CN=18c849ecab75ad93836830836bc4eee72a09e094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0a:37:2e:dd:58:b2:94:ed:31:1c:9a:f9:ea:
21:24:45:19:be:03:5f:55:90:18:a9:9a:77:07:66:
1e:f1:00:07:0e:2a:69:8a:4f:7f:df:49:38:38:53:
6f:92:8b:9b:cd:91:69:d6:9c:df:f7:af:a9:56:a7:
59:01:a9:f5:86:0f:94:61:d8:0c:40:be:41:be:eb:
61:dc:2c:da:96:4b:6f:4b:b1:1a:ba:d1:60:9d:84:
12:d0:82:d2:b6:b0:60:b9:4f:b4:61:c5:f6:b8:00:
e5:12:72:ca:04:44:8d:7e:97:d3:85:05:20:45:cc:
33:76:ec:b9:4f:cd:d7:3d:60:e4:b3:81:de:f8:00:
68:4d:3d:f8:05:0f:1c:49:49:b8:f9:b1:35:30:2b:
28:ed:e1:b8:69:6f:90:e7:b8:8a:7b:0b:f4:21:48:
5e:14:3e:c1:fb:fb:93:94:6b:b4:a0:b0:7a:c1:92:
1f:22:c9:27:75:5d:b3:f8:9b:09:5f:93:b6:ec:7a:
eb:7a:a4:f8:67:68:70:a7:93:20:b8:fa:b9:66:80:
b6:eb:ea:6d:09:68:ae:22:d4:f3:5a:e8:ae:aa:a7:
19:c7:26:cc:95:3f:f5:36:f2:49:9c:9d:64:fe:78:
34:40:95:01:a9:62:84:92:83:ff:39:7b:82:5a:1a:
60:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C8:49:EC:AB:75:AD:93:83:68:30:83:6B:C4:EE:E7:2A:09:E0:94
X509v3 Authority Key Identifier:
keyid:35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:06:78:ec:71:f2:89:7e:81:da:23:12:2f:06:65:0d:57:b2:
37:b1:58:e6:e8:ef:a4:ac:8c:74:ef:26:f3:3d:a5:95:e8:53:
df:cd:e3:31:3b:56:1e:db:ff:a3:f4:c1:a2:72:43:b6:8a:4c:
f5:f4:bb:44:e6:1c:91:a2:d1:52:f5:c0:29:4f:81:4e:25:15:
40:ae:2a:29:fe:30:d6:86:05:8e:93:e5:df:e5:e8:b1:4d:ea:
72:3a:36:9d:bc:4f:6c:50:bb:9c:da:6d:c1:38:58:1a:b3:31:
ca:64:51:24:df:04:81:bc:c7:22:13:be:20:b4:a1:e2:f8:c7:
8b:a0:32:1a:73:6c:5b:07:16:8f:4a:03:76:87:38:3a:ca:db:
a9:17:f1:50:89:15:dd:6f:d6:27:b9:7d:19:4d:73:8d:5a:0e:
c2:fd:4d:52:0a:9a:e5:61:d9:f5:ee:06:54:0d:07:c6:7c:de:
13:b0:c2:82:53:8c:fd:6b:57:39:64:73:10:e2:66:35:18:e0:
69:e5:fe:2b:c6:b9:4f:58:c8:8b:7b:0d:b1:a2:bf:5f:19:ef:
13:23:19:e6:75:4f:89:0f:22:95:c2:b7:d0:09:19:2b:b5:c3:
e8:b7:7f:58:28:2a:fc:81:55:27:53:84:e5:50:c2:16:d7:e9:
5a:42:f0:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Sf6qvaqs56Mt+ZDg31/pwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1M2UzZjI4ZTY0N2U5MmFjOGE3MTBjMzA1YzJlMjFiNjIz
ZWRjMWMwHhcNMjYwNzI0MDUwMTA3WhcNMjYwNzI1MDUwMTA3WjAzMTEwLwYDVQQD
EygxOGM4NDllY2FiNzVhZDkzODM2ODMwODM2YmM0ZWVlNzJhMDllMDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwo3Lt1YspTtMRya+eohJEUZvgNf
VZAYqZp3B2Ye8QAHDippik9/30k4OFNvkoubzZFp1pzf96+pVqdZAan1hg+UYdgM
QL5Bvuth3CzalktvS7EautFgnYQS0ILStrBguU+0YcX2uADlEnLKBESNfpfThQUg
Rcwzduy5T83XPWDks4He+ABoTT34BQ8cSUm4+bE1MCso7eG4aW+Q57iKewv0IUhe
FD7B+/uTlGu0oLB6wZIfIskndV2z+JsJX5O27HrreqT4Z2hwp5MguPq5ZoC26+pt
CWiuItTzWuiuqqcZxybMlT/1NvJJnJ1k/ng0QJUBqWKEkoP/OXuCWhpg6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjISeyrda2Tg2gwg2vE7ucqCeCUMB8GA1UdIwQY
MBaAFDU+PyjmR+kqyKcQwwXC4htiPtwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83Njc5MzMtNGE3My00YjJmLWFjODQt
ZGFjYTI2ZGU2ZjdiLzEvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83Njc5MzMtNGE3My00YjJmLWFjODQtZGFjYTI2ZGU2Zjdi
LzEvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgZ47HHy
iX6B2iMSLwZlDVeyN7FY5ujvpKyMdO8m8z2llehT383jMTtWHtv/o/TBonJDtopM
9fS7ROYckaLRUvXAKU+BTiUVQK4qKf4w1oYFjpPl3+XosU3qcjo2nbxPbFC7nNpt
wThYGrMxymRRJN8EgbzHIhO+ILSh4vjHi6AyGnNsWwcWj0oDdoc4OsrbqRfxUIkV
3W/WJ7l9GU1zjVoOwv1NUgqa5WHZ9e4GVA0HxnzeE7DCglOM/WtXOWRzEOJmNRjg
aeX+K8a5T1jIi3sNsaK/XxnvEyMZ5nVPiQ8ilcK30AkZK7XD6Ld/WCgq/IFVJ1OE
5VDCFtfpWkLwnw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:07:04 2026 by rpki-client