Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
File: NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft (raw, json)
Hash identifier: zKgvH2I08SDl/H6AAnYxeDyqnA3LhtBplLVfDnebeHY=
Subject key identifier: 03:A6:32:25:96:95:0A:5D:3A:44:8A:1A:58:0A:6B:79:75:7B:6B:96
Authority key identifier: 36:D3:F5:9B:5F:8A:8F:D6:6F:1D:13:A2:D0:F9:1D:C2:2B:F8:A1:CA
Certificate issuer: /CN=36d3f59b5f8a8fd66f1d13a2d0f91dc22bf8a1ca
Certificate serial: 019F8F4744D53CF7967B312EFCFAAF6EE944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
Manifest number: EC
Signing time: Thu 23 Jul 2026 14:00:40 +0000
Manifest this update: Thu 23 Jul 2026 14:00:40 +0000
Manifest next update: Fri 24 Jul 2026 14:00:40 +0000
Files and hashes: 1: K21rZ8iSPzRD0y2-8XH6DYAR720.asa (hash: WdKRw8QVqYDS6afPeC1sTisyLqYHDRhDINFD62xXAtQ=)
2: NtP1m1-Kj9ZvHROi0Pkdwiv4oco.crl (hash: pgiPGKvmaqc3JZduqTxID43QNaYzF2RWlQdWG2dQSYs=)
3: VHyFqWR0a0N6Jb-SqSv3sKoAF5Y.roa (hash: ewx9Epnewi0OtJiwgx7sgDatpdquBPwdoRqY8DXtLIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:44:d5:3c:f7:96:7b:31:2e:fc:fa:af:6e:e9:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d3f59b5f8a8fd66f1d13a2d0f91dc22bf8a1ca
Validity
Not Before: Jul 23 14:00:40 2026 GMT
Not After : Jul 24 14:00:40 2026 GMT
Subject: CN=03a6322596950a5d3a448a1a580a6b79757b6b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:36:57:b8:48:23:f9:44:2e:bb:c1:a5:bb:d4:
4f:cf:f8:af:58:7c:c4:63:d4:4a:b3:12:ee:00:d1:
a8:74:e0:5b:36:78:ae:71:00:a3:1a:85:57:be:7a:
12:81:b8:bc:7f:b0:f0:4b:10:20:87:2f:3e:dc:a4:
ca:a7:f7:61:9e:39:69:37:05:ef:8b:2a:cc:fe:47:
04:84:87:54:c5:10:5f:f6:8d:0f:ee:a2:6b:5b:96:
3b:2e:e0:05:26:a4:c6:29:48:05:c5:3e:8c:c2:b5:
98:a1:4c:74:98:a9:d2:08:42:8d:cb:de:59:aa:65:
94:52:ce:a2:06:e0:66:b7:0d:3b:82:08:dc:46:62:
c7:10:c5:66:47:46:52:cb:d0:61:a3:08:d2:56:4b:
80:35:09:f6:c4:4a:e3:b5:a3:73:d0:4b:4b:1e:ee:
ef:e0:2b:ac:e8:cb:72:ed:06:2e:41:9a:c1:eb:88:
25:a6:a0:cd:90:55:8e:f4:32:31:6f:0f:31:83:aa:
01:1d:61:b5:98:24:aa:f7:9b:fa:35:54:31:6a:c6:
f5:b0:87:78:41:a5:73:b6:82:a9:07:5d:5a:dc:09:
c9:36:87:36:c3:30:1f:12:07:f1:41:0a:51:e0:77:
fa:6c:95:e3:9d:fd:47:6d:5a:c6:66:3a:a2:78:ff:
64:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A6:32:25:96:95:0A:5D:3A:44:8A:1A:58:0A:6B:79:75:7B:6B:96
X509v3 Authority Key Identifier:
keyid:36:D3:F5:9B:5F:8A:8F:D6:6F:1D:13:A2:D0:F9:1D:C2:2B:F8:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:da:cb:24:52:fe:11:11:cc:35:d6:db:36:35:6f:18:35:76:
bf:e1:68:6b:5d:82:81:11:2f:76:da:1c:80:c6:32:90:c1:49:
fa:5e:5a:81:19:19:f5:b3:67:ca:07:1e:a5:5a:cd:15:e1:a9:
62:d0:18:41:ab:40:79:96:88:8c:04:b7:8a:b3:71:a1:32:4e:
9f:0e:3b:8d:f4:7f:6f:fe:f7:d5:3f:f1:0c:b6:50:dc:82:d7:
57:76:5f:27:de:32:7b:b2:68:86:f1:be:56:cc:80:c3:30:7d:
97:e3:0c:a9:ae:e6:ae:f0:3c:b5:72:30:52:de:e9:af:e6:0e:
8e:4e:62:c5:b6:69:dd:e9:4f:c8:5e:1a:01:50:be:83:04:31:
a4:f0:91:10:e6:50:d9:ea:a1:79:53:8b:43:26:69:e5:0b:91:
9d:25:b1:98:60:47:55:19:8f:a7:09:41:0f:f9:66:b8:a5:e4:
8d:58:28:64:52:cf:ee:07:db:e5:0c:da:9d:6e:73:a0:0b:b8:
4a:72:83:43:33:85:57:ec:6f:c8:dc:01:4c:d9:92:2b:3a:e5:
41:7b:11:3d:c9:79:a2:11:4a:27:1e:13:45:5c:cd:0f:c2:d6:
e8:4f:28:f4:64:4a:dd:b4:97:60:e2:76:96:38:b6:8d:00:af:
1e:46:46:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PR0TVPPeWezEu/PqvbulEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZDNmNTliNWY4YThmZDY2ZjFkMTNhMmQwZjkxZGMyMmJm
OGExY2EwHhcNMjYwNzIzMTQwMDQwWhcNMjYwNzI0MTQwMDQwWjAzMTEwLwYDVQQD
EygwM2E2MzIyNTk2OTUwYTVkM2E0NDhhMWE1ODBhNmI3OTc1N2I2Yjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzZXuEgj+UQuu8Glu9RPz/ivWHzE
Y9RKsxLuANGodOBbNniucQCjGoVXvnoSgbi8f7DwSxAghy8+3KTKp/dhnjlpNwXv
iyrM/kcEhIdUxRBf9o0P7qJrW5Y7LuAFJqTGKUgFxT6MwrWYoUx0mKnSCEKNy95Z
qmWUUs6iBuBmtw07ggjcRmLHEMVmR0ZSy9BhowjSVkuANQn2xErjtaNz0EtLHu7v
4Cus6Mty7QYuQZrB64glpqDNkFWO9DIxbw8xg6oBHWG1mCSq95v6NVQxasb1sId4
QaVztoKpB11a3AnJNoc2wzAfEgfxQQpR4Hf6bJXjnf1HbVrGZjqieP9kXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOmMiWWlQpdOkSKGlgKa3l1e2uWMB8GA1UdIwQY
MBaAFDbT9Ztfio/Wbx0TotD5HcIr+KHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnRQMW0xLUtqOVp2SFJPaTBQa2R3aXY0b2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9lN2M4ZjMtYzBiYS00MjNlLTk2NjEt
Yzg1ZWZkNTYxZTI1LzEvTnRQMW0xLUtqOVp2SFJPaTBQa2R3aXY0b2NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9lN2M4ZjMtYzBiYS00MjNlLTk2NjEtYzg1ZWZkNTYxZTI1
LzEvTnRQMW0xLUtqOVp2SFJPaTBQa2R3aXY0b2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjtrLJFL+
ERHMNdbbNjVvGDV2v+Foa12CgREvdtocgMYykMFJ+l5agRkZ9bNnygcepVrNFeGp
YtAYQatAeZaIjAS3irNxoTJOnw47jfR/b/731T/xDLZQ3ILXV3ZfJ94ye7JohvG+
VsyAwzB9l+MMqa7mrvA8tXIwUt7pr+YOjk5ixbZp3elPyF4aAVC+gwQxpPCREOZQ
2eqheVOLQyZp5QuRnSWxmGBHVRmPpwlBD/lmuKXkjVgoZFLP7gfb5QzanW5zoAu4
SnKDQzOFV+xvyNwBTNmSKzrlQXsRPcl5ohFKJx4TRVzND8LW6E8o9GRK3bSXYOJ2
lji2jQCvHkZGag==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:43 2026 by rpki-client