Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
File: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft (raw, json)
Hash identifier: n5CVt85dn+qs7CUzO3jncRwkWz2SZhk6JtXscSZmtpc=
Subject key identifier: 95:40:36:EE:EC:04:BD:BA:6A:77:4B:AE:92:6B:72:A0:D8:59:75:7D
Authority key identifier: 35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
Certificate issuer: /CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Certificate serial: 019E1DC74213793A0D9DAA5EC3DE0D409BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 20:00:58 +0000
Manifest this update: Tue 12 May 2026 20:00:58 +0000
Manifest next update: Wed 13 May 2026 20:00:58 +0000
Files and hashes: 1: FEFxaV6JKNIg7q55qcKCrfCq-z4.roa (hash: b7JfyrsOhBHQzoGqHArOuD+GUoiR1U1SMxRpiIKCIn8=)
2: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl (hash: g0yByew6WsV1hvWUl2ES4xKrUDAs4TjNZX40gqc1rwI=)
3: baFyB991hO6zmvEFA-bUR-SSeO0.roa (hash: HCQWZRB071vWE048uQIisBvoukGqn9JR/elQALPMrxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:42:13:79:3a:0d:9d:aa:5e:c3:de:0d:40:9b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Validity
Not Before: May 12 20:00:58 2026 GMT
Not After : May 13 20:00:58 2026 GMT
Subject: CN=954036eeec04bdba6a774bae926b72a0d859757d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:36:4d:de:c5:65:7c:9c:a0:6f:60:36:f8:1e:
ce:fb:b9:0b:97:0e:b1:e8:8c:9d:bd:a9:a4:02:e8:
b5:38:1f:35:63:04:de:36:a6:ce:9d:b0:1c:b4:a2:
45:6e:1c:26:b0:6d:ab:2a:b2:dc:e3:a7:24:b4:77:
ad:23:68:6c:36:70:27:61:bb:23:d1:3c:3e:7f:6f:
5e:98:6e:43:cc:21:8f:14:e1:68:1b:7f:35:96:2a:
c2:4f:ea:c3:6f:e0:b9:59:e2:91:51:f5:a0:8e:1c:
2a:ea:a4:00:f6:57:0b:51:12:a3:66:01:e7:7c:d7:
dd:f2:71:44:cc:d9:72:cb:50:e8:ee:4c:86:04:95:
64:ca:e3:1f:93:1f:b7:7e:a8:a8:6a:0d:f6:93:26:
0b:9a:1b:e7:6f:6d:02:f1:47:7e:e8:39:1d:6b:16:
96:f0:25:c1:25:38:e0:bb:4b:2f:91:31:af:5e:4e:
de:9a:cf:2d:67:4e:f2:ec:5b:7b:e3:0b:10:c1:fe:
b6:27:56:ad:8b:e8:95:d9:fa:c4:7d:d7:ad:fd:2e:
af:7b:92:19:e8:5f:55:38:d2:2a:dc:db:1b:27:38:
90:ac:8c:36:d8:af:d7:b9:f4:72:ca:07:34:6e:92:
b3:5d:16:3e:2f:d7:f6:f5:e2:f1:bf:c1:73:ce:1d:
c6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:40:36:EE:EC:04:BD:BA:6A:77:4B:AE:92:6B:72:A0:D8:59:75:7D
X509v3 Authority Key Identifier:
keyid:35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:8e:8c:03:eb:02:e8:af:16:ff:fa:42:d0:24:de:e0:15:73:
41:3e:1e:76:c5:25:7d:a4:37:e4:7c:cb:14:82:75:d0:7a:d8:
f0:0a:45:54:fa:0c:aa:8e:f4:16:c8:22:92:25:85:b5:1a:30:
3f:17:0e:3f:f9:d7:00:3b:fe:b2:03:8f:c8:33:e3:ba:95:93:
e9:17:a6:d7:a5:70:fe:fa:64:d9:60:ef:0f:fd:e5:37:77:87:
74:47:47:bb:ed:5a:ce:5a:73:37:ec:2e:d6:bd:d6:9f:dc:75:
07:0e:e1:72:b7:18:0a:e3:27:9c:11:df:3e:fe:da:48:b8:34:
44:8b:e1:1f:3e:a8:05:42:b8:b5:34:97:fb:d0:6b:f1:c6:02:
25:df:64:8b:6c:75:02:cc:fe:d6:d5:8d:0a:58:ee:51:05:9e:
1d:bf:a1:cc:7a:7f:9a:83:33:46:2a:3e:20:a0:c5:fa:cf:7b:
80:98:ae:f4:a9:43:75:56:53:d2:82:d7:fd:a6:20:f4:d1:07:
37:54:fb:ac:25:f5:f5:a7:78:41:46:9e:cf:9d:64:03:d1:5a:
45:93:5e:c1:3b:97:08:77:f7:89:c6:dc:e6:20:44:37:23:ee:
ca:6b:2a:c5:d7:89:d5:c2:69:a3:77:f5:3d:7a:b2:c3:40:31:
fc:54:ee:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:07 2026 by rpki-client