Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
File: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft (raw, json)
Hash identifier: tasuFvwKK3XAWp8CFLGigRoX6KzEDkQHORnWBQXSQEc=
Subject key identifier: CD:74:95:A5:B4:6B:16:61:C2:85:7E:A6:17:9F:DE:10:49:39:A0:58
Authority key identifier: 35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
Certificate issuer: /CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Certificate serial: 01A0E2874F2B1F72AB081D79D5327EE88FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
Manifest number: 1A77
Signing time: Sun 27 Sep 2026 11:01:53 +0000
Manifest this update: Sun 27 Sep 2026 11:01:53 +0000
Manifest next update: Mon 28 Sep 2026 11:01:53 +0000
Files and hashes: 1: FEFxaV6JKNIg7q55qcKCrfCq-z4.roa (hash: b7JfyrsOhBHQzoGqHArOuD+GUoiR1U1SMxRpiIKCIn8=)
2: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl (hash: q5GfrIYS5zAzDY1bRomToIS5x4+NH1PjI+GSQGPN1Mo=)
3: baFyB991hO6zmvEFA-bUR-SSeO0.roa (hash: HCQWZRB071vWE048uQIisBvoukGqn9JR/elQALPMrxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 11:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:87:4f:2b:1f:72:ab:08:1d:79:d5:32:7e:e8:8f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Validity
Not Before: Sep 27 11:01:53 2026 GMT
Not After : Sep 28 11:01:53 2026 GMT
Subject: CN=cd7495a5b46b1661c2857ea6179fde104939a058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0a:48:a4:38:02:e1:fc:92:ac:f8:0d:e2:3e:
c3:3b:47:b6:46:ab:b9:ab:24:9b:ec:bd:b2:c5:36:
82:1c:af:02:13:93:a3:fd:e5:58:94:f8:9e:a0:a7:
f5:f3:97:59:f3:6f:bc:ee:3e:24:9a:2d:ec:88:d7:
5d:96:11:39:01:90:dc:03:5c:ce:9b:a0:4a:3a:aa:
d4:49:43:d9:13:87:de:dd:60:31:bf:8f:f6:de:c0:
90:0b:55:81:a5:ea:c5:de:39:77:75:c2:f0:49:e1:
f2:e3:33:09:0d:17:e8:f0:a9:75:86:13:55:8f:f0:
e5:74:22:30:f4:c5:60:6f:5a:d0:29:69:03:ae:ae:
32:24:c9:de:34:88:91:59:28:7f:f0:a1:52:a3:6d:
da:93:ef:66:3b:26:14:fb:eb:73:51:6c:f5:76:0b:
ed:77:4d:9e:da:d3:cc:8b:2a:ea:15:29:83:19:da:
17:6c:59:11:b8:60:8d:5b:b2:df:3c:fe:4c:52:f2:
6e:34:9e:cc:e5:4c:13:ca:ef:e6:1c:2a:43:4a:49:
a0:a6:c4:bc:d3:95:49:0c:b2:ac:f7:8b:0e:df:c8:
15:62:0c:45:9c:94:30:fd:08:37:8b:72:b1:c5:a9:
a0:45:23:e9:0d:c6:cf:68:40:bc:92:ab:bd:04:8c:
45:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:74:95:A5:B4:6B:16:61:C2:85:7E:A6:17:9F:DE:10:49:39:A0:58
X509v3 Authority Key Identifier:
keyid:35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e6:f4:0d:e9:89:41:cf:75:bf:6c:cb:02:56:1a:bc:da:cc:
09:fe:26:33:44:0e:e7:22:b2:5c:c1:89:8a:ad:00:a9:c4:01:
cd:f0:f8:dd:da:ee:d9:24:d4:04:e0:86:b8:8d:96:72:57:53:
89:06:99:ad:ef:b7:a3:0f:10:81:41:0e:e5:6f:f1:2e:36:ed:
2e:1a:fb:71:3c:b9:b6:35:51:5a:4d:a4:35:84:7c:5c:10:b0:
2f:8d:15:8c:15:c3:3d:fb:fc:b0:8a:e6:6c:66:03:07:f8:a4:
0a:a4:50:3a:03:40:3b:34:c2:2d:0d:ad:84:e8:e6:f1:2b:ac:
75:ca:71:ae:dc:ef:f9:5f:93:67:5e:99:51:1e:5d:59:1e:d9:
d0:4c:33:fa:ca:92:a0:9d:2f:1b:46:80:33:da:e4:50:ec:6d:
3f:d5:11:44:e5:12:ed:c2:89:61:34:0e:99:5e:ab:25:79:ef:
b5:92:90:f6:09:ff:39:36:90:e3:17:fa:3d:4f:88:75:91:3a:
86:84:c1:41:d9:46:4b:75:51:c1:8b:46:f2:18:41:b4:82:15:
68:5b:9c:34:3a:8f:54:96:16:ed:9b:10:fd:3e:06:79:e2:36:
83:c1:b2:be:5b:1d:14:2e:b6:97:33:13:39:34:b2:fb:e7:37:
29:06:8c:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDih08rH3KrCB151TJ+6I+1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1M2UzZjI4ZTY0N2U5MmFjOGE3MTBjMzA1YzJlMjFiNjIz
ZWRjMWMwHhcNMjYwOTI3MTEwMTUzWhcNMjYwOTI4MTEwMTUzWjAzMTEwLwYDVQQD
EyhjZDc0OTVhNWI0NmIxNjYxYzI4NTdlYTYxNzlmZGUxMDQ5MzlhMDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQpIpDgC4fySrPgN4j7DO0e2Rqu5
qySb7L2yxTaCHK8CE5Oj/eVYlPieoKf185dZ82+87j4kmi3siNddlhE5AZDcA1zO
m6BKOqrUSUPZE4fe3WAxv4/23sCQC1WBperF3jl3dcLwSeHy4zMJDRfo8Kl1hhNV
j/DldCIw9MVgb1rQKWkDrq4yJMneNIiRWSh/8KFSo23ak+9mOyYU++tzUWz1dgvt
d02e2tPMiyrqFSmDGdoXbFkRuGCNW7LfPP5MUvJuNJ7M5UwTyu/mHCpDSkmgpsS8
05VJDLKs94sO38gVYgxFnJQw/Qg3i3KxxamgRSPpDcbPaEC8kqu9BIxFMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM10laW0axZhwoV+phef3hBJOaBYMB8GA1UdIwQY
MBaAFDU+PyjmR+kqyKcQwwXC4htiPtwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83Njc5MzMtNGE3My00YjJmLWFjODQt
ZGFjYTI2ZGU2ZjdiLzEvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83Njc5MzMtNGE3My00YjJmLWFjODQtZGFjYTI2ZGU2Zjdi
LzEvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+b0DemJ
Qc91v2zLAlYavNrMCf4mM0QO5yKyXMGJiq0AqcQBzfD43dru2STUBOCGuI2WcldT
iQaZre+3ow8QgUEO5W/xLjbtLhr7cTy5tjVRWk2kNYR8XBCwL40VjBXDPfv8sIrm
bGYDB/ikCqRQOgNAOzTCLQ2thOjm8Susdcpxrtzv+V+TZ16ZUR5dWR7Z0Ewz+sqS
oJ0vG0aAM9rkUOxtP9URROUS7cKJYTQOmV6rJXnvtZKQ9gn/OTaQ4xf6PU+IdZE6
hoTBQdlGS3VRwYtG8hhBtIIVaFucNDqPVJYW7ZsQ/T4GeeI2g8GyvlsdFC62lzMT
OTSy++c3KQaM6g==
-----END CERTIFICATE-----
Generated at Sun Sep 27 23:17:30 2026 by rpki-client