Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
File: NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft (raw, json)
Hash identifier: F/UIGpev9faJ3HFhtA1jXonbbv1/DrvlZqtuvbz3G6U=
Subject key identifier: 37:A0:5E:69:FF:F6:F4:1B:66:7D:DA:EA:BE:2C:7B:6C:25:E6:31:75
Authority key identifier: 36:D3:F5:9B:5F:8A:8F:D6:6F:1D:13:A2:D0:F9:1D:C2:2B:F8:A1:CA
Certificate issuer: /CN=36d3f59b5f8a8fd66f1d13a2d0f91dc22bf8a1ca
Certificate serial: 01A0CBFE11F06DF416F3F967EEF0E78678AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
Manifest number: 0190
Signing time: Wed 23 Sep 2026 02:00:20 +0000
Manifest this update: Wed 23 Sep 2026 02:00:20 +0000
Manifest next update: Thu 24 Sep 2026 02:00:20 +0000
Files and hashes: 1: K21rZ8iSPzRD0y2-8XH6DYAR720.asa (hash: WdKRw8QVqYDS6afPeC1sTisyLqYHDRhDINFD62xXAtQ=)
2: NtP1m1-Kj9ZvHROi0Pkdwiv4oco.crl (hash: MsLgqjK5FEX6huU6rudFatPbzcxr8j5UyABLAobXs6s=)
3: VHyFqWR0a0N6Jb-SqSv3sKoAF5Y.roa (hash: ewx9Epnewi0OtJiwgx7sgDatpdquBPwdoRqY8DXtLIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:11:f0:6d:f4:16:f3:f9:67:ee:f0:e7:86:78:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d3f59b5f8a8fd66f1d13a2d0f91dc22bf8a1ca
Validity
Not Before: Sep 23 02:00:20 2026 GMT
Not After : Sep 24 02:00:20 2026 GMT
Subject: CN=37a05e69fff6f41b667ddaeabe2c7b6c25e63175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:37:9b:13:f6:55:f9:63:0e:3b:7f:ef:55:90:
6a:29:ba:0d:4b:9b:dd:7d:d2:95:b6:d7:c9:45:1a:
12:5d:9e:7a:28:8b:9a:80:c9:52:b2:bd:97:9b:13:
96:0b:bb:4a:4e:3f:0f:89:53:64:23:01:2f:e9:69:
f3:13:3e:53:86:e8:e7:72:e4:42:ed:c7:33:7b:e6:
19:4c:3b:31:37:fe:6f:7c:b8:e5:27:bc:c1:0e:b6:
63:d3:43:db:9c:6d:3b:94:1b:64:5c:ce:28:f5:ed:
7b:ce:46:84:25:ea:35:db:d8:ad:85:22:d6:b5:f9:
9b:71:16:50:0b:30:ad:0a:26:63:10:17:d3:e5:d7:
69:8f:71:c2:b6:48:43:ce:b7:2c:0d:ef:70:25:2c:
2b:50:c5:c3:de:0b:17:24:91:56:bf:06:81:9d:07:
3f:43:a0:30:ed:56:b2:c4:18:27:6c:f4:b8:b4:f7:
28:93:bb:53:75:e8:11:f4:1f:07:a4:15:e4:93:c6:
09:63:db:f2:b9:61:4a:b6:5d:57:33:21:39:df:18:
0e:c6:a5:99:40:03:f3:94:96:58:e5:6f:65:bc:bc:
10:04:e8:3e:c6:7b:25:1e:a8:61:61:40:14:f5:93:
c9:1f:a7:fa:62:78:4b:17:05:49:6f:89:86:20:73:
93:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A0:5E:69:FF:F6:F4:1B:66:7D:DA:EA:BE:2C:7B:6C:25:E6:31:75
X509v3 Authority Key Identifier:
keyid:36:D3:F5:9B:5F:8A:8F:D6:6F:1D:13:A2:D0:F9:1D:C2:2B:F8:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:40:59:31:90:74:04:1a:e8:56:38:c3:5e:9b:e0:14:72:43:
82:14:78:37:7a:f8:67:12:81:94:8e:fa:b2:27:de:ff:ff:b9:
1f:82:aa:88:0e:08:4c:79:8c:c3:27:52:2c:a7:73:8a:e9:5b:
8d:43:82:09:5c:d9:64:a8:3b:79:7a:85:24:ce:3a:5a:6f:d0:
19:1c:75:fc:64:67:92:14:8d:50:76:1c:cf:e6:e8:48:b1:55:
2d:82:55:09:9d:98:4a:d0:39:c8:03:de:88:0d:5b:de:b2:d3:
90:b0:f9:ab:64:64:3c:7c:9f:2b:05:14:54:01:b0:87:99:57:
b8:bc:c7:5d:4f:2e:c1:01:c6:47:46:2c:1f:9e:8f:af:d0:fc:
c4:03:6a:1d:9a:27:df:97:64:8a:23:d3:42:60:c2:cd:1e:1d:
0d:87:00:ba:6a:3e:c8:cc:e8:d3:22:9d:da:fc:03:c2:d4:71:
24:2e:d7:e0:c4:41:74:69:06:47:02:c3:6d:75:e6:25:0d:7b:
58:e0:2d:11:4e:89:0a:38:6d:5d:a1:18:ef:d4:d8:bd:e8:27:
31:21:70:1e:0e:35:bf:23:26:06:91:32:ff:7b:86:a8:a8:94:
09:52:9e:af:f4:bb:99:c2:32:ff:3e:51:73:3c:6a:e5:82:34:
9d:97:51:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDL/hHwbfQW8/ln7vDnhnivMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZDNmNTliNWY4YThmZDY2ZjFkMTNhMmQwZjkxZGMyMmJm
OGExY2EwHhcNMjYwOTIzMDIwMDIwWhcNMjYwOTI0MDIwMDIwWjAzMTEwLwYDVQQD
EygzN2EwNWU2OWZmZjZmNDFiNjY3ZGRhZWFiZTJjN2I2YzI1ZTYzMTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTebE/ZV+WMOO3/vVZBqKboNS5vd
fdKVttfJRRoSXZ56KIuagMlSsr2XmxOWC7tKTj8PiVNkIwEv6WnzEz5ThujncuRC
7ccze+YZTDsxN/5vfLjlJ7zBDrZj00PbnG07lBtkXM4o9e17zkaEJeo129ithSLW
tfmbcRZQCzCtCiZjEBfT5ddpj3HCtkhDzrcsDe9wJSwrUMXD3gsXJJFWvwaBnQc/
Q6Aw7VayxBgnbPS4tPcok7tTdegR9B8HpBXkk8YJY9vyuWFKtl1XMyE53xgOxqWZ
QAPzlJZY5W9lvLwQBOg+xnslHqhhYUAU9ZPJH6f6YnhLFwVJb4mGIHOTqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDegXmn/9vQbZn3a6r4se2wl5jF1MB8GA1UdIwQY
MBaAFDbT9Ztfio/Wbx0TotD5HcIr+KHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnRQMW0xLUtqOVp2SFJPaTBQa2R3aXY0b2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9lN2M4ZjMtYzBiYS00MjNlLTk2NjEt
Yzg1ZWZkNTYxZTI1LzEvTnRQMW0xLUtqOVp2SFJPaTBQa2R3aXY0b2NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9lN2M4ZjMtYzBiYS00MjNlLTk2NjEtYzg1ZWZkNTYxZTI1
LzEvTnRQMW0xLUtqOVp2SFJPaTBQa2R3aXY0b2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApEBZMZB0
BBroVjjDXpvgFHJDghR4N3r4ZxKBlI76sife//+5H4KqiA4ITHmMwydSLKdziulb
jUOCCVzZZKg7eXqFJM46Wm/QGRx1/GRnkhSNUHYcz+boSLFVLYJVCZ2YStA5yAPe
iA1b3rLTkLD5q2RkPHyfKwUUVAGwh5lXuLzHXU8uwQHGR0YsH56Pr9D8xANqHZon
35dkiiPTQmDCzR4dDYcAumo+yMzo0yKd2vwDwtRxJC7X4MRBdGkGRwLDbXXmJQ17
WOAtEU6JCjhtXaEY79TYvegnMSFwHg41vyMmBpEy/3uGqKiUCVKer/S7mcIy/z5R
czxq5YI0nZdRJA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 07:26:26 2026 by rpki-client