Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
File: U_NZCAnRh_ezYfskzUP5P2ZLILM.mft (raw, json)
Hash identifier: O6NiepyeMkmhUjU2kuiwpiEs613LBsJjUlbY9PNYoQ0=
Subject key identifier: 46:F4:D8:20:A2:E5:B3:B9:56:5D:09:37:45:FA:02:75:84:9C:51:B5
Authority key identifier: 53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
Certificate issuer: /CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Certificate serial: 01A1976987D60CA6B29A19622531288E019C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
Manifest number: 1AD8
Signing time: Sun 01 Nov 2026 14:00:37 +0000
Manifest this update: Sun 01 Nov 2026 14:00:37 +0000
Manifest next update: Mon 02 Nov 2026 14:00:37 +0000
Files and hashes: 1: 1-UcYB_bC1Q74xvMeMptRl_v4GSM.roa (hash: CZsJE/C7u1KFT+BSHVUsJyL6cOqDP5qXckw/MXkpdZw=)
2: IADl1Gv9BuddIG-0OHvNCj39-5w.roa (hash: S9Dxk12pt58eWH9jO5GDFxrOLIjhAQo2JWChQTtOvm0=)
3: U_NZCAnRh_ezYfskzUP5P2ZLILM.crl (hash: HiohwCK4nwDq1ESXEGOQs95YBSea+m4ZeKA3QoDPsXM=)
4: ctdO6KeqKtoQl8jil7v642rgLAY.roa (hash: 0Ysbxgr5wlnCLuuipo5HyI6PWUVSDIOqUxGUbxE7UC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:97:69:87:d6:0c:a6:b2:9a:19:62:25:31:28:8e:01:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Validity
Not Before: Nov 1 14:00:37 2026 GMT
Not After : Nov 2 14:00:37 2026 GMT
Subject: CN=46f4d820a2e5b3b9565d093745fa0275849c51b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4a:e0:d1:bc:ef:ca:c3:2d:aa:5c:98:c7:48:
4f:67:9f:8d:73:07:e6:9c:22:fc:62:f8:6b:30:28:
c4:a5:50:37:a7:13:65:69:3e:a9:7a:57:5e:5b:bb:
e6:61:3a:76:54:3e:5c:5e:1d:b1:3c:1a:5f:40:2b:
39:fb:73:18:05:a4:78:8e:cd:96:2d:28:63:2b:91:
f1:e1:db:58:4c:4c:75:8c:74:1d:ad:31:7a:21:c0:
5d:71:4e:67:66:2c:fd:66:e5:87:3d:2a:67:d2:b2:
ce:27:75:b6:cb:e2:a2:ca:46:6f:96:55:73:75:92:
5b:b6:1b:c9:a9:67:24:cd:64:a4:c5:0a:5a:09:48:
fb:71:96:5f:24:15:8e:2e:b8:4e:3a:12:c8:8c:15:
3e:df:5c:5d:67:3b:9a:b4:8f:de:96:46:fe:c8:e3:
ef:2b:f3:c9:16:4c:0c:54:14:d4:9f:eb:3a:e2:6e:
30:e9:90:7c:31:1d:be:ed:e5:2b:18:e0:0f:3c:07:
a0:86:e7:e3:d5:a3:a9:3d:8b:43:4a:c2:8b:13:48:
7b:15:fd:6c:f1:94:98:4e:98:37:a8:4e:f0:7a:21:
85:20:94:f5:f0:37:4e:78:50:46:11:1d:3c:98:ea:
86:a3:07:f7:53:1a:97:1d:66:e1:b5:23:6d:7a:2c:
40:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F4:D8:20:A2:E5:B3:B9:56:5D:09:37:45:FA:02:75:84:9C:51:B5
X509v3 Authority Key Identifier:
keyid:53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:f6:d9:a7:96:fd:2a:ee:c1:4d:66:ed:37:ac:8c:22:1d:ad:
41:24:c9:f9:30:18:7c:67:c0:f2:c7:6c:f9:a8:67:60:92:df:
a3:a9:bd:90:b4:47:78:db:b4:11:66:b3:c2:7e:b4:04:81:3b:
9f:86:f1:c8:a2:ed:47:56:a5:e1:00:b2:9b:fc:2d:cb:82:32:
6d:a5:b0:32:5f:af:10:30:44:85:5c:81:bc:c0:bb:49:07:70:
03:45:5b:c0:0a:77:c8:7d:06:2d:b5:e3:6f:c0:6a:3b:9a:3f:
61:42:a8:31:f8:3d:a7:bc:42:d7:0d:36:7d:ae:77:bd:29:81:
c2:07:57:4d:69:83:c1:49:51:fb:38:2a:af:ee:2e:10:fc:72:
b7:4b:cc:b3:d4:60:3b:cc:71:61:31:6d:d3:76:66:a7:71:2d:
f9:ea:0d:03:60:ce:c5:10:8f:d7:3e:68:0c:2f:78:ad:0b:97:
b8:5b:ee:0b:0a:d3:3e:84:70:6d:3a:6e:2d:0c:e6:b5:65:17:
64:ad:f1:3c:f6:7c:43:a5:66:34:bc:ef:d6:be:15:61:2a:40:
2d:66:de:0d:6a:e5:ef:5b:d9:77:61:4b:ca:e1:7b:4a:12:c4:
3c:07:60:95:7d:ec:ea:1f:26:1d:d6:03:b7:a7:90:32:c4:3e:
2f:58:fe:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 22:31:19 2026 by rpki-client