Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
File: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft (raw, json)
Hash identifier: XVOnAkpwLT4WNCizNCuqi27/IfdJYgxtW6EjVasfteQ=
Subject key identifier: 30:EC:F3:DD:D6:93:52:D8:54:6C:5D:A8:81:73:81:ED:13:0C:1E:2F
Authority key identifier: 35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
Certificate issuer: /CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Certificate serial: 019D2A72D801CF3E9076DF07501D06C5D87B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 14:01:02 +0000
Manifest this update: Thu 26 Mar 2026 14:01:02 +0000
Manifest next update: Fri 27 Mar 2026 14:01:02 +0000
Files and hashes: 1: FEFxaV6JKNIg7q55qcKCrfCq-z4.roa (hash: b7JfyrsOhBHQzoGqHArOuD+GUoiR1U1SMxRpiIKCIn8=)
2: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl (hash: YVOPg3tavVip9hHvjGB5CWRxxJwW/PPkoPEBqQpmuOk=)
3: baFyB991hO6zmvEFA-bUR-SSeO0.roa (hash: HCQWZRB071vWE048uQIisBvoukGqn9JR/elQALPMrxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:d8:01:cf:3e:90:76:df:07:50:1d:06:c5:d8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Validity
Not Before: Mar 26 14:01:02 2026 GMT
Not After : Mar 27 14:01:02 2026 GMT
Subject: CN=30ecf3ddd69352d8546c5da8817381ed130c1e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:22:17:d3:0d:f3:ca:88:77:66:75:bb:c2:4a:
b3:e8:69:cd:3f:43:12:88:9c:da:53:9f:fd:27:6a:
2c:da:75:29:09:b8:94:c4:37:c2:07:1c:82:fc:0a:
8c:7a:b6:74:4b:3a:2e:e7:e9:2c:5d:db:8b:e9:e7:
e0:82:5d:3c:02:c4:60:e3:82:f1:c2:60:e2:b7:ac:
ee:f6:28:4d:7e:c2:7e:10:bc:9b:f5:74:15:49:c3:
5e:18:bb:aa:c3:b6:fb:19:cf:ea:23:60:ba:1f:a3:
44:c1:9f:d7:93:f5:28:63:c1:2c:ce:47:56:41:3f:
b7:ad:2c:70:0f:79:16:d6:65:0f:57:9e:c2:39:38:
8d:5a:5f:18:81:54:15:0f:31:88:30:58:ae:5a:c6:
f5:ea:21:c8:61:08:0a:81:25:16:eb:b4:f6:5b:fb:
ac:02:bd:1e:5f:f2:89:87:f3:37:51:01:0b:30:b0:
5d:d9:25:55:37:21:ce:35:8b:24:a5:b5:7b:dd:87:
b1:34:ee:e3:e5:86:22:8f:a0:ac:57:27:9f:87:eb:
62:ef:22:01:ac:4e:51:60:9f:54:9c:01:33:55:b5:
ce:e8:68:ca:8a:55:cb:c8:99:e5:2f:fa:56:5a:16:
61:09:a9:7c:5d:12:42:22:d3:e4:25:5f:c1:21:d5:
16:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EC:F3:DD:D6:93:52:D8:54:6C:5D:A8:81:73:81:ED:13:0C:1E:2F
X509v3 Authority Key Identifier:
keyid:35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c0:1e:bd:e5:2e:0e:76:aa:81:23:ee:76:fd:c7:fe:d4:a3:
07:89:53:31:4b:74:8a:18:c1:84:58:88:12:62:d2:b1:6e:2b:
ef:6d:b4:44:b6:52:9a:30:35:4f:e9:ad:b6:65:93:f3:79:b2:
03:40:87:a2:ec:2b:6c:ad:9c:48:ea:fa:3d:a9:ec:4e:02:6d:
0a:5c:16:52:60:ef:e9:11:33:9d:11:c8:d0:b3:a2:9c:bd:0b:
3a:3c:d7:c9:fd:f2:bd:d0:2b:f1:03:84:3a:31:68:a9:2d:7e:
b2:03:43:2b:3a:99:f4:d0:0e:0b:aa:ae:50:04:f3:3b:dc:3a:
6c:29:d5:40:3b:70:77:92:58:91:08:65:ce:8f:7f:9c:f2:04:
52:97:e9:36:45:97:b4:e6:10:ed:b1:96:69:0c:bf:23:26:9b:
50:3e:c5:4a:be:1f:39:a0:a7:2d:c7:a4:f5:ec:80:9f:80:49:
bd:fa:6f:e5:20:08:19:ad:20:a8:05:d2:78:5c:27:d2:57:db:
82:d7:84:2a:58:c8:d8:83:a5:a5:dc:45:25:e7:af:0f:5b:69:
ed:80:41:6c:4b:01:d9:c7:4c:bd:1f:04:a2:3c:e0:74:9d:0f:
07:4f:ad:81:9f:5b:3c:d0:09:ae:e4:4a:99:0e:53:29:a5:f9:
13:cf:7b:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qctgBzz6Qdt8HUB0Gxdh7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1M2UzZjI4ZTY0N2U5MmFjOGE3MTBjMzA1YzJlMjFiNjIz
ZWRjMWMwHhcNMjYwMzI2MTQwMTAyWhcNMjYwMzI3MTQwMTAyWjAzMTEwLwYDVQQD
EygzMGVjZjNkZGQ2OTM1MmQ4NTQ2YzVkYTg4MTczODFlZDEzMGMxZTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9yIX0w3zyoh3ZnW7wkqz6GnNP0MS
iJzaU5/9J2os2nUpCbiUxDfCBxyC/AqMerZ0Szou5+ksXduL6efggl08AsRg44Lx
wmDit6zu9ihNfsJ+ELyb9XQVScNeGLuqw7b7Gc/qI2C6H6NEwZ/Xk/UoY8EszkdW
QT+3rSxwD3kW1mUPV57COTiNWl8YgVQVDzGIMFiuWsb16iHIYQgKgSUW67T2W/us
Ar0eX/KJh/M3UQELMLBd2SVVNyHONYskpbV73YexNO7j5YYij6CsVyefh+ti7yIB
rE5RYJ9UnAEzVbXO6GjKilXLyJnlL/pWWhZhCal8XRJCItPkJV/BIdUW0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDDs893Wk1LYVGxdqIFzge0TDB4vMB8GA1UdIwQY
MBaAFDU+PyjmR+kqyKcQwwXC4htiPtwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83Njc5MzMtNGE3My00YjJmLWFjODQt
ZGFjYTI2ZGU2ZjdiLzEvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83Njc5MzMtNGE3My00YjJmLWFjODQtZGFjYTI2ZGU2Zjdi
LzEvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgcAeveUu
DnaqgSPudv3H/tSjB4lTMUt0ihjBhFiIEmLSsW4r7220RLZSmjA1T+mttmWT83my
A0CHouwrbK2cSOr6PansTgJtClwWUmDv6REznRHI0LOinL0LOjzXyf3yvdAr8QOE
OjFoqS1+sgNDKzqZ9NAOC6quUATzO9w6bCnVQDtwd5JYkQhlzo9/nPIEUpfpNkWX
tOYQ7bGWaQy/IyabUD7FSr4fOaCnLcek9eyAn4BJvfpv5SAIGa0gqAXSeFwn0lfb
gteEKljI2IOlpdxFJeevD1tp7YBBbEsB2cdMvR8EojzgdJ0PB0+tgZ9bPNAJruRK
mQ5TKaX5E897CQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:24:25 2026 by rpki-client