Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
File: ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft (raw, json)
Hash identifier: FEosHKgOiQ7RdLyytHE7Uav6qU0Xz1nH0eiRsrnfyFE=
Subject key identifier: 78:5E:FD:9F:5D:39:66:89:CB:E8:D7:17:CB:13:7F:9D:82:A3:EB:73
Authority key identifier: 9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
Certificate issuer: /CN=9ed0c4ff4a90073288b97674694142721f5b8435
Certificate serial: 019D2816946180F25281B31D31532F0B1027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
Manifest number: 1365
Signing time: Thu 26 Mar 2026 03:01:01 +0000
Manifest this update: Thu 26 Mar 2026 03:01:01 +0000
Manifest next update: Fri 27 Mar 2026 03:01:01 +0000
Files and hashes: 1: mRwQ4FZ4qs3-KkP76bFaXtLs11U.roa (hash: d2Arbpcg/AGTRi9adeSZYOX/MBudha1YOQCfUnmj+l8=)
2: ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl (hash: bMze3teG9hFsJmpCPH4LYX96lDpnU+rsvqPEN90eZZc=)
3: yZW2mE5zLO01eM0W6hRtG-uljlk.roa (hash: RagjUFsbMgoncBiop+dDC5tIWu14Ngw7xbU4GHUKDw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:94:61:80:f2:52:81:b3:1d:31:53:2f:0b:10:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed0c4ff4a90073288b97674694142721f5b8435
Validity
Not Before: Mar 26 03:01:01 2026 GMT
Not After : Mar 27 03:01:01 2026 GMT
Subject: CN=785efd9f5d396689cbe8d717cb137f9d82a3eb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:49:8e:be:db:03:e8:5a:a3:f8:d2:a0:b2:
80:33:ed:1c:07:ce:3c:f0:41:65:de:38:c8:24:99:
c6:8e:b3:4d:58:da:56:e1:cd:1b:1d:a9:b4:db:e3:
3e:0a:a4:1f:86:b7:65:9e:00:45:26:88:d9:86:e4:
19:f2:ae:66:c8:23:d1:42:95:24:9c:53:92:39:fc:
9a:fc:af:10:2b:ed:6b:2d:c4:de:01:7a:b8:28:a2:
93:66:50:6a:56:4a:f0:60:cf:d3:4b:bb:60:ce:04:
03:c2:4c:a7:b6:bf:58:f4:e6:4b:d1:51:72:af:c9:
6c:93:41:e5:93:70:cf:42:88:af:b0:2b:e7:c0:d5:
d3:4c:21:7c:f6:7f:bf:01:a6:5a:c1:e6:5b:a8:ab:
37:aa:e1:48:18:78:99:24:d4:d5:6f:d3:b5:d4:c2:
0e:ef:26:e1:d4:27:96:9e:69:c9:1a:3c:c0:c6:96:
86:60:38:6a:85:10:10:b3:bb:ab:76:eb:aa:4d:50:
4c:dd:fc:27:d7:e5:1d:cc:9e:28:1e:7a:e9:fa:b9:
0e:56:2b:f0:45:eb:ec:da:42:67:07:7c:c9:ef:d0:
08:a3:b0:b2:78:24:9e:b1:bb:d2:28:52:6e:5d:d6:
1a:d7:fb:2c:e2:8d:18:d4:80:c8:e2:3a:ab:6b:e1:
99:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5E:FD:9F:5D:39:66:89:CB:E8:D7:17:CB:13:7F:9D:82:A3:EB:73
X509v3 Authority Key Identifier:
keyid:9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:0d:d0:03:15:6e:51:b6:e4:b5:f7:9c:6a:d1:c3:32:2a:a5:
fc:9a:25:6d:fb:c9:3a:5e:53:24:44:40:5e:e2:49:e0:76:c5:
42:99:7b:38:05:f8:ac:a1:03:76:ab:49:14:2a:30:15:9c:9d:
33:89:1d:b4:aa:f6:89:30:78:cf:27:08:73:be:8d:ff:e2:f2:
14:81:15:ae:29:41:8b:ef:95:f9:5f:83:3a:7b:aa:55:d6:e5:
12:4d:55:05:66:03:11:4c:64:24:1a:3c:6e:81:5c:45:73:c9:
f3:e0:72:8e:18:aa:b5:f2:f7:ab:79:27:aa:3b:3a:57:6b:4b:
b9:79:5d:9c:3c:b3:aa:cc:99:fe:59:2b:9f:94:4c:6d:57:90:
0b:8f:c0:77:ed:ca:59:32:75:40:7d:aa:a4:29:a8:46:e7:1b:
60:bc:4a:36:94:e3:1c:fe:c7:f0:aa:9a:ed:fd:e5:00:4d:6d:
b6:69:ec:45:a2:a2:d9:b8:07:4a:3c:25:50:7d:b2:d1:3e:c9:
1a:ee:79:06:a5:4b:3e:c8:c4:14:53:bd:07:3b:3d:de:46:58:
7e:66:9c:f0:b4:74:9a:ca:52:93:e1:52:94:f3:89:dd:58:f4:
09:7a:a0:b2:df:20:25:d6:d6:75:9d:e2:dc:da:8a:8a:d6:3a:
7a:a3:9d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:00 2026 by rpki-client