Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
File: NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft (raw, json)
Hash identifier: zgg9hqQly1JHewAe8dVHfHh+aoMCpWmCYENCwTBnRMA=
Subject key identifier: C7:B3:1B:71:CA:DE:B9:A8:C5:C5:02:D3:3E:5F:A3:A1:74:CC:DE:42
Authority key identifier: 36:D3:F5:9B:5F:8A:8F:D6:6F:1D:13:A2:D0:F9:1D:C2:2B:F8:A1:CA
Certificate issuer: /CN=36d3f59b5f8a8fd66f1d13a2d0f91dc22bf8a1ca
Certificate serial: 019E1CEC055F501EFCCD589E618E1361E60F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
Manifest number: 2C
Signing time: Tue 12 May 2026 16:01:30 +0000
Manifest this update: Tue 12 May 2026 16:01:30 +0000
Manifest next update: Wed 13 May 2026 16:01:30 +0000
Files and hashes: 1: K21rZ8iSPzRD0y2-8XH6DYAR720.asa (hash: WdKRw8QVqYDS6afPeC1sTisyLqYHDRhDINFD62xXAtQ=)
2: MbX8Toqw0r9J8vtm77AKZx_6DsI.roa (hash: 3VtGQhyNOfR+9FmN7zOP8ZwidizXpvCOvQGwobiO8IE=)
3: NtP1m1-Kj9ZvHROi0Pkdwiv4oco.crl (hash: 4TEW7xVxFDFkV02kkGmHMvO+tOWv8Vk3GbWKk4mu7Rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:ec:05:5f:50:1e:fc:cd:58:9e:61:8e:13:61:e6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d3f59b5f8a8fd66f1d13a2d0f91dc22bf8a1ca
Validity
Not Before: May 12 16:01:30 2026 GMT
Not After : May 13 16:01:30 2026 GMT
Subject: CN=c7b31b71cadeb9a8c5c502d33e5fa3a174ccde42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:08:2d:1a:3a:41:37:95:5d:e1:16:76:8c:20:
7e:9f:ea:ed:fe:25:32:00:13:3a:33:41:48:99:7b:
22:62:a6:cd:e6:8f:4e:80:ae:08:a0:3a:d6:4c:fd:
9d:5a:bd:09:34:c7:f4:a7:ba:7b:a7:5a:2e:c8:70:
db:6f:29:d0:8c:ce:b2:de:d2:d7:72:2d:59:1d:a4:
29:42:17:cc:ef:40:85:2f:e4:17:01:96:66:ec:b0:
43:7c:31:d6:34:b9:c0:29:ef:4a:57:0f:9f:e1:76:
3a:7b:7d:51:dc:12:84:fe:7b:ff:b3:eb:a3:70:aa:
e8:47:d9:96:2e:75:c2:83:77:8d:48:55:72:6c:72:
f4:f4:ee:3d:9b:1b:85:97:2e:36:c1:cd:d3:05:3f:
97:2d:ed:59:d9:b0:f9:13:8f:22:e5:f9:35:de:a3:
48:5b:c6:01:35:19:d5:20:47:e2:ed:95:e0:cb:84:
8a:7a:83:f5:05:b9:48:f5:96:38:6d:e8:06:98:38:
6c:67:3a:6c:4c:28:8a:4a:bc:a4:5d:63:ae:40:67:
73:a8:c2:f1:92:60:38:ba:16:73:a0:3a:13:b3:ae:
15:8f:15:51:9b:cf:4a:65:87:3c:5b:6f:27:e6:78:
b3:01:2d:b7:f0:3b:86:3e:26:38:9e:e5:7f:be:45:
af:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B3:1B:71:CA:DE:B9:A8:C5:C5:02:D3:3E:5F:A3:A1:74:CC:DE:42
X509v3 Authority Key Identifier:
keyid:36:D3:F5:9B:5F:8A:8F:D6:6F:1D:13:A2:D0:F9:1D:C2:2B:F8:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c8f3-c0ba-423e-9661-c85efd561e25/1/NtP1m1-Kj9ZvHROi0Pkdwiv4oco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:18:c5:c3:d5:06:4e:8c:ec:cb:c6:62:da:9b:cd:67:34:b2:
e9:76:84:3b:b6:86:d9:6a:25:ba:15:84:2c:1a:24:d8:7c:d3:
4e:9d:69:89:3b:86:e1:99:18:52:9a:66:e2:75:60:48:f1:6c:
55:05:b2:f6:b4:4c:ae:85:6d:49:74:ba:1f:af:4c:61:b6:f2:
19:e4:f8:63:e6:80:91:78:40:66:71:0f:68:b2:56:f8:3a:ff:
b8:f4:0a:ff:d0:58:17:f2:db:aa:46:dd:58:e3:98:77:e9:8a:
b6:e0:71:3a:ac:eb:97:d1:c9:c1:f2:39:5f:d1:37:41:b5:57:
89:4e:13:8f:cd:7d:cd:4a:5d:4b:f6:01:23:34:c2:a4:86:6b:
47:ca:cd:7f:0b:53:52:45:00:0e:d2:73:bb:1c:e1:8a:e3:9e:
e9:1d:f6:56:c6:d8:b5:10:9c:e7:e0:ec:f6:d7:8e:21:20:60:
97:3e:35:60:3e:31:cf:4f:db:59:18:51:00:02:40:98:f6:67:
14:eb:c3:b6:9a:00:94:d7:c3:ba:9b:e3:b3:ea:9b:21:be:e6:
c0:2b:cf:f0:38:75:4d:d3:56:ba:7e:17:71:6c:92:0e:28:ee:
fd:81:51:73:0f:cc:69:89:ea:dd:dc:88:ff:e0:28:e4:79:f8:
87:e8:93:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:48 2026 by rpki-client