Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.mft
File: NTPUOQNczcXww50bP7FhlbVV_KM.mft (raw, json)
Hash identifier: 7IRBfxF+krm2UWTdHsVoBq5f8qsaWCUitQQBxNmssSQ=
Subject key identifier: 46:FC:AB:9A:87:35:54:85:C8:BE:3E:3D:CB:8B:04:A0:DF:E6:D3:3D
Authority key identifier: 35:33:D4:39:03:5C:CD:C5:F0:C3:9D:1B:3F:B1:61:95:B5:55:FC:A3
Certificate issuer: /CN=3533d439035ccdc5f0c39d1b3fb16195b555fca3
Certificate serial: 019F927FDE9568EFE405D8F9B79D34A1D727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NTPUOQNczcXww50bP7FhlbVV_KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.mft
Manifest number: 0EBD
Signing time: Fri 24 Jul 2026 05:01:21 +0000
Manifest this update: Fri 24 Jul 2026 05:01:21 +0000
Manifest next update: Sat 25 Jul 2026 05:01:21 +0000
Files and hashes: 1: GkloadKipNGLxGdn49lnbZG57SQ.roa (hash: HQ8BBGVI4OetCOmU12/iTT2SoIrhzR4vqVTSloeX4A8=)
2: NTPUOQNczcXww50bP7FhlbVV_KM.crl (hash: MQN2T/0IR5pgnOiurGwU/LM1jL1wQ+kjaznwP9dPdIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NTPUOQNczcXww50bP7FhlbVV_KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:de:95:68:ef:e4:05:d8:f9:b7:9d:34:a1:d7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3533d439035ccdc5f0c39d1b3fb16195b555fca3
Validity
Not Before: Jul 24 05:01:21 2026 GMT
Not After : Jul 25 05:01:21 2026 GMT
Subject: CN=46fcab9a87355485c8be3e3dcb8b04a0dfe6d33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d8:0a:22:3c:3a:bf:28:cf:3a:3e:e1:58:c9:
cd:28:9e:bc:f5:bf:28:0f:2d:a5:41:30:51:bb:6b:
15:6a:82:d8:24:08:98:a2:54:08:f4:ed:03:59:74:
e6:78:a0:fc:52:77:c0:a3:7f:e7:8d:b3:8f:e5:91:
8c:9b:0f:b8:14:42:7b:d8:0f:65:2f:41:70:3b:06:
4a:eb:1b:96:e7:4a:fa:2d:23:5b:6f:83:c1:d4:09:
c2:ae:a8:32:15:9f:a5:da:a8:28:74:c2:f0:6e:54:
db:8e:96:4a:3b:64:02:8d:2a:f6:e7:78:e4:3d:df:
2d:94:fd:83:6d:39:79:0a:cd:02:27:2e:11:91:3b:
e0:b7:c0:6a:ec:c4:59:3a:66:c5:31:e3:0b:ca:0f:
c5:c2:4d:5f:ea:84:45:fb:23:a1:8d:6f:d8:b8:06:
ad:47:ad:b2:d6:99:43:4a:99:df:45:ac:71:04:f1:
fd:07:db:3f:8c:b0:b8:74:0d:04:a9:3e:26:93:83:
6b:96:01:a9:74:13:f1:e5:59:f4:0c:35:e4:ff:ef:
33:12:cd:4a:f6:19:d3:29:94:1a:e3:8a:4e:c4:f4:
3d:b8:b1:c2:32:28:72:fd:b7:43:06:6e:cf:80:25:
6b:23:04:9a:ea:c4:ee:84:03:cf:05:e9:81:b5:44:
6c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FC:AB:9A:87:35:54:85:C8:BE:3E:3D:CB:8B:04:A0:DF:E6:D3:3D
X509v3 Authority Key Identifier:
keyid:35:33:D4:39:03:5C:CD:C5:F0:C3:9D:1B:3F:B1:61:95:B5:55:FC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTPUOQNczcXww50bP7FhlbVV_KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ff:ac:6c:11:e0:b2:e5:64:bc:9d:49:63:7c:c1:5d:da:43:
42:34:a5:b5:20:f3:23:30:ff:80:89:ff:f9:1b:93:93:c5:95:
30:e0:3e:b1:fb:a6:0a:51:48:52:63:0d:e7:1d:85:34:53:8d:
4e:6a:9c:a1:92:3c:48:62:4f:46:92:78:5f:f0:2b:f2:07:aa:
09:51:b5:a2:bc:0b:40:9b:cb:dd:db:0e:ea:fb:65:39:3f:3d:
5b:3e:11:10:ca:87:56:9f:ff:21:43:0d:10:9e:fd:48:bf:b9:
ad:dd:04:9c:89:4f:eb:e8:32:3e:08:10:12:11:c2:e1:f2:cc:
9d:7b:d6:5d:47:56:77:78:71:42:3f:be:c6:3b:9c:cb:4c:3b:
71:31:c7:be:db:86:08:5d:36:24:1e:c7:d7:52:c0:8f:91:1e:
4d:c4:4f:90:d7:e9:ba:2d:19:24:64:f8:e1:c6:60:2f:c9:c3:
a0:af:fb:d5:a4:f9:e1:b5:a6:08:e3:99:ee:54:8d:e5:da:a1:
ae:f6:be:79:18:51:87:38:23:fd:33:ef:26:e1:d3:d7:e1:1e:
c1:8c:b6:e9:83:46:e8:9d:e5:70:cf:8c:aa:1f:05:2c:10:90:
0f:95:53:b7:6a:3a:cc:84:66:a7:b4:3b:df:c1:f4:16:e3:a4:
07:f6:53:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:39:03 2026 by rpki-client