Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
File: NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft (raw, json)
Hash identifier: JpOgEhh6OTu05n1w35O0ngFDbgnB6H7cxDGOXnEsTpU=
Subject key identifier: FC:12:60:15:9E:E1:FC:C6:26:4A:12:23:F5:2C:BA:2A:FC:4D:5A:15
Authority key identifier: 35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
Certificate issuer: /CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Certificate serial: 019F848C4F74B90AAA942AA892E1E975C507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
Manifest number: 0EA4
Signing time: Tue 21 Jul 2026 12:00:15 +0000
Manifest this update: Tue 21 Jul 2026 12:00:15 +0000
Manifest next update: Wed 22 Jul 2026 12:00:15 +0000
Files and hashes: 1: 1p2ABoTmHppjIUEVK5pg2mIhNow.roa (hash: ECPu2qb2eGXD+sxXXw8nzOOHG8hI1ILJZKOoScd4Ul8=)
2: NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl (hash: BfgEJh6Z+JvmUiMV+AOUmsxfIlauHNlByyL/Ks2IpmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:8c:4f:74:b9:0a:aa:94:2a:a8:92:e1:e9:75:c5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Validity
Not Before: Jul 21 12:00:15 2026 GMT
Not After : Jul 22 12:00:15 2026 GMT
Subject: CN=fc1260159ee1fcc6264a1223f52cba2afc4d5a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:e6:36:2e:21:8a:24:39:e5:91:cd:c9:9e:
1c:fe:29:e4:46:42:7c:aa:d2:d0:83:af:e6:fb:c8:
4d:5d:f1:58:98:a4:65:ac:e0:12:4e:0a:b7:22:2a:
5c:e4:e9:ff:51:37:f9:d9:5b:74:1b:0a:5f:d0:7d:
c7:f0:cb:4c:fe:5b:83:72:f7:f8:0b:11:4a:8b:f0:
2e:0f:60:ca:08:5a:da:89:ae:7c:a7:e3:0f:04:72:
c3:1d:11:2b:e2:9c:fa:b0:dd:d5:11:c7:e4:86:01:
ca:78:76:46:51:d1:3b:ee:14:ef:6f:0d:c0:57:ef:
0e:2c:b8:03:14:ce:88:54:55:ee:44:a4:3b:01:0a:
30:f7:11:d4:f7:85:53:1e:78:d2:e2:c3:20:be:b3:
86:51:ce:96:62:a0:05:ad:f6:69:ba:bf:33:d1:65:
1e:0c:ed:cc:6e:5e:91:cf:aa:1c:32:60:6c:ca:ed:
96:ea:62:c7:3b:2d:94:88:5f:f7:ae:18:18:cc:f4:
95:66:42:b5:b8:12:c2:4a:03:a0:85:0a:71:6d:f4:
af:1c:24:d3:86:8a:af:63:57:e1:e3:a7:5c:81:78:
3d:ff:da:58:a0:04:81:b3:ad:7c:1b:43:65:c3:de:
47:ec:bc:b8:77:da:56:be:94:66:a2:b0:63:3d:ec:
01:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:12:60:15:9E:E1:FC:C6:26:4A:12:23:F5:2C:BA:2A:FC:4D:5A:15
X509v3 Authority Key Identifier:
keyid:35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:04:69:dc:47:96:5c:74:dc:de:93:a7:6c:05:8f:75:8f:c7:
8e:3f:8c:4d:a2:59:f7:0b:75:90:b7:cf:78:a8:bb:3a:fb:f9:
53:2e:2e:48:19:29:08:f6:50:2c:4e:44:dc:99:4b:2b:72:17:
71:82:f4:d5:ac:de:80:1c:e1:ea:00:2e:72:f4:d0:da:0e:50:
d3:5d:dd:f7:db:39:55:a4:5a:eb:28:a1:d9:f5:5b:f6:bf:0a:
90:4d:57:8f:ee:1c:06:e7:90:f8:a2:af:aa:d9:73:57:8e:2b:
38:cd:7a:18:e8:93:96:17:81:6e:11:7c:a9:02:73:8c:40:d7:
07:e9:ef:7b:4b:d6:ae:4d:38:02:3d:3c:1b:77:36:0e:77:90:
40:5d:e9:f2:aa:9f:49:09:aa:55:0b:76:17:84:b2:88:71:0a:
0c:cc:d2:f3:34:c5:ea:b8:5c:01:b7:a7:0c:4b:86:67:db:9f:
3c:52:61:d6:cc:bb:d1:29:87:a8:3b:92:c0:e5:6e:be:31:23:
99:e9:84:b7:b4:d4:82:4a:b4:5f:e6:7f:bb:fc:1f:69:b7:a8:
b3:55:85:2f:7c:62:98:ec:4c:1f:f2:59:3f:8d:3d:dd:70:54:
89:0b:5b:2c:d8:bf:9f:1e:7f:35:32:c5:4d:1d:21:8b:42:91:
f7:02:75:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:53:10 2026 by rpki-client