Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
File: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft (raw, json)
Hash identifier: AgWUrew3FjTDm/Vkkrbp4X5C04B9nZkatxG3WhVl8Pk=
Subject key identifier: 47:96:72:D5:68:53:CB:85:35:C0:62:C7:0D:BB:26:FB:45:CC:CA:21
Authority key identifier: 9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E
Certificate issuer: /CN=9ed76829ba6314a035fda799fc0370336657083e
Certificate serial: 01A0D8A8DC000CF3CEE81EE13BC0B6F1F0CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
Manifest number: 14DF
Signing time: Fri 25 Sep 2026 13:02:20 +0000
Manifest this update: Fri 25 Sep 2026 13:02:20 +0000
Manifest next update: Sat 26 Sep 2026 13:02:20 +0000
Files and hashes: 1: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl (hash: 8yFN3G7Ylr6e2v5kfDAAWkK9I6QcNm5+XgLKS9Q5qV8=)
2: rCaZ9Cy0alwfhMcrkhs7A3NYfB8.roa (hash: 7fg83l1F4WyPmXoTljaULo+YFLoO2z4vAMFAKMJkors=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:dc:00:0c:f3:ce:e8:1e:e1:3b:c0:b6:f1:f0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed76829ba6314a035fda799fc0370336657083e
Validity
Not Before: Sep 25 13:02:20 2026 GMT
Not After : Sep 26 13:02:20 2026 GMT
Subject: CN=479672d56853cb8535c062c70dbb26fb45ccca21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0a:34:d3:f6:c3:40:01:d7:ab:c2:98:9e:09:
8a:c0:5a:39:5d:06:40:45:ef:6e:5b:f0:65:6b:6b:
18:38:98:1a:d6:18:6e:dc:37:ff:5c:71:73:45:aa:
83:87:f4:7c:dd:9f:9d:c7:d9:35:5c:b9:22:9a:95:
d0:4d:a6:d8:92:10:9e:63:08:e4:ca:2d:b1:ea:03:
25:9f:47:12:13:d1:9d:12:4d:b4:9a:f8:38:b8:30:
8e:14:a6:00:9e:86:13:af:95:dd:e4:6d:ca:cc:3e:
92:cf:9e:8e:e5:56:1a:e5:44:97:4b:17:67:14:e8:
97:59:50:98:fd:7c:a4:79:6c:ff:81:bc:c4:47:f5:
6b:ec:9e:8c:52:70:d5:a1:d4:26:6b:1e:2b:d9:6f:
01:39:3c:51:00:a8:a1:10:e7:1e:91:29:d7:95:d0:
13:2d:7a:cf:c5:a7:77:92:24:70:a4:08:dc:23:f7:
01:d0:ed:17:01:3b:7e:5f:cb:6a:93:88:f6:8b:0e:
d1:bb:fc:25:56:7d:09:34:91:2d:d0:ec:64:34:dc:
11:1e:01:11:a1:e7:d6:2e:cd:c9:3d:0f:cf:d0:4f:
af:7f:95:33:04:45:fc:59:d8:b8:19:a9:35:79:25:
1e:0c:86:7c:e8:35:34:9b:19:b8:7d:ad:38:d6:0e:
c8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:96:72:D5:68:53:CB:85:35:C0:62:C7:0D:BB:26:FB:45:CC:CA:21
X509v3 Authority Key Identifier:
keyid:9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:94:95:d3:4c:af:bf:41:df:9b:25:07:c6:56:36:01:9a:8a:
cb:a3:db:e7:ed:db:e0:9c:4a:3f:9d:d3:78:b6:fa:43:ea:78:
5e:82:86:76:88:b1:bd:49:b2:e2:05:89:f9:9c:52:97:f4:82:
3a:9f:06:99:65:ff:60:f2:d0:46:52:35:e7:62:02:4e:15:1d:
93:b5:d8:22:bd:22:79:2c:c6:80:fb:b4:16:00:61:b0:73:05:
15:6c:43:93:36:0f:52:2c:bf:1b:44:53:5d:4b:78:a7:10:07:
8f:b5:72:4a:02:a9:94:f5:8b:bb:e0:66:91:a7:ab:0a:b9:25:
92:90:6b:0f:ac:58:5f:72:e3:5e:00:63:8d:77:39:de:92:18:
bb:91:47:e2:f5:79:f0:c8:ab:58:e0:b1:e8:73:12:e1:37:16:
6d:91:e9:a3:5d:6e:28:ef:7d:65:df:c0:7d:6c:30:39:98:be:
0a:2a:ce:5a:a4:2a:4d:c8:2f:fc:6b:17:29:e0:dd:37:03:f5:
87:ff:55:d3:d9:1d:54:a7:cd:6d:55:6f:51:d3:e5:96:e1:ed:
63:d3:c2:57:23:dd:2e:0f:2b:6a:e6:9c:ba:36:ae:21:f8:1f:
e5:f9:d0:b2:cb:f6:af:c8:0a:d8:87:c5:1b:ea:32:25:07:d3:
51:84:3f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:52:10 2026 by rpki-client