Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
File: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft (raw, json)
Hash identifier: wKIq2IjtVGWcozqUZuapV52Fb3dvYAFVMKh5I/rtERo=
Subject key identifier: 31:3A:44:10:22:7B:7D:88:BA:C9:B9:54:D4:F4:AA:D9:86:EA:12:5A
Authority key identifier: 9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E
Certificate issuer: /CN=9ed76829ba6314a035fda799fc0370336657083e
Certificate serial: 019D284E1852295B4E1600A112AC62EC592F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
Manifest number: 12F6
Signing time: Thu 26 Mar 2026 04:01:39 +0000
Manifest this update: Thu 26 Mar 2026 04:01:39 +0000
Manifest next update: Fri 27 Mar 2026 04:01:39 +0000
Files and hashes: 1: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl (hash: y4xrKFjOusNoc5LKtMwE0SEXFg208OTcHExcg72iagU=)
2: rCaZ9Cy0alwfhMcrkhs7A3NYfB8.roa (hash: 7fg83l1F4WyPmXoTljaULo+YFLoO2z4vAMFAKMJkors=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:18:52:29:5b:4e:16:00:a1:12:ac:62:ec:59:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed76829ba6314a035fda799fc0370336657083e
Validity
Not Before: Mar 26 04:01:39 2026 GMT
Not After : Mar 27 04:01:39 2026 GMT
Subject: CN=313a4410227b7d88bac9b954d4f4aad986ea125a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:13:65:58:00:e6:4b:b3:a3:87:77:5f:c8:b2:
97:c8:67:22:b2:49:24:bd:16:db:39:b7:74:b8:a0:
65:f3:96:8f:93:36:5d:9e:26:c6:23:16:84:93:8a:
b2:2a:58:af:4d:bd:84:83:39:94:42:0c:07:b7:70:
b6:42:1c:58:79:5c:b0:76:3f:cd:14:dd:b1:a6:02:
09:4e:a0:dc:22:29:3b:34:6f:72:1d:c0:8a:46:27:
61:55:f7:6b:19:a0:04:28:47:36:8e:00:cb:43:c4:
c3:d3:57:08:bb:06:aa:2b:ad:53:cd:74:c9:6d:cf:
df:ba:ef:1a:9b:c1:a3:a3:3a:ae:cb:8e:af:d8:36:
1f:f5:9e:6c:1d:52:8a:3d:60:6c:c5:04:7f:7a:19:
71:0c:02:c2:3a:94:fb:7d:17:d1:38:e7:ab:05:2d:
35:4c:93:25:76:b6:80:67:fa:f7:7f:ba:8e:8d:2e:
73:c6:71:2b:66:0d:00:89:7a:d6:28:c8:a2:da:df:
65:c2:b2:1d:11:96:14:35:8b:7d:78:bc:93:e1:89:
8a:5e:e7:95:e8:f0:a4:98:58:98:03:4f:53:6f:de:
75:33:88:85:60:45:ba:2a:dd:4b:d9:6e:92:b0:b9:
f4:8d:d9:d0:32:22:be:95:39:45:a3:e6:b0:ec:e5:
df:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3A:44:10:22:7B:7D:88:BA:C9:B9:54:D4:F4:AA:D9:86:EA:12:5A
X509v3 Authority Key Identifier:
keyid:9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:60:db:2b:f8:5e:e0:49:03:99:f1:87:00:d9:ee:1e:0c:08:
c0:48:8d:c1:57:98:f0:db:c6:29:e1:c5:22:7a:40:36:37:2f:
49:66:e5:88:35:45:95:ac:d8:42:f4:7e:ed:33:21:16:59:fb:
a9:6c:40:5b:cc:8e:17:f7:63:20:8c:88:8d:6d:1e:3c:3a:c1:
02:85:2d:b2:52:87:59:96:4b:df:13:2b:fb:fb:0b:57:3f:29:
ab:f9:a8:3d:69:1d:5a:77:75:3e:d3:42:91:e7:43:0f:22:9d:
25:c2:39:3d:f6:80:39:9e:ee:5f:b6:10:b6:66:34:ca:ec:34:
6e:78:89:be:ca:be:e4:c7:45:0f:a7:9b:33:ef:6f:95:83:03:
38:03:36:a2:ad:0e:fd:53:b6:58:13:61:b9:83:8a:43:0e:fa:
ae:81:6b:60:77:47:67:4e:e1:fe:ac:e6:a3:a3:71:51:5d:10:
08:32:40:5e:43:17:19:c9:c4:6c:f7:9e:c1:8e:c9:3e:c7:64:
df:1f:5d:4b:67:82:87:6a:ec:4b:a9:2e:b4:b9:4b:71:8a:df:
a0:c2:76:31:09:72:00:b4:d3:20:56:25:c6:39:bf:02:98:e1:
8c:70:ad:20:f6:2f:bd:9c:8d:87:23:81:db:59:e0:0b:4c:8a:
76:4c:6f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:36:08 2026 by rpki-client