Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
File: NZTKzdk15Fz3HGFngKGx1Kpox7U.mft (raw, json)
Hash identifier: hzZFtlKHPoyeKTgVGopWFBa3x71ORChFPZZAMewtnA0=
Subject key identifier: BA:05:8E:BB:45:94:94:5B:6B:AF:72:49:2A:D6:B3:86:A1:F7:7E:15
Authority key identifier: 35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
Certificate issuer: /CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Certificate serial: 019F84C3F1DDA4AE55D8EEF75F7DC78B9A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
Manifest number: 19C1
Signing time: Tue 21 Jul 2026 13:01:01 +0000
Manifest this update: Tue 21 Jul 2026 13:01:01 +0000
Manifest next update: Wed 22 Jul 2026 13:01:01 +0000
Files and hashes: 1: NZTKzdk15Fz3HGFngKGx1Kpox7U.crl (hash: LGauyDxM7NtS0aSwyHFjRs2Sw6fGMZ/DpMXRLcA96KQ=)
2: Wdq9UIvFzgDqiYju4znORuRnk4A.roa (hash: eltS6TqFGo2PicugCL3Z+e5ML3gTGzg3RZI9Plv8FIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c3:f1:dd:a4:ae:55:d8:ee:f7:5f:7d:c7:8b:9a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Validity
Not Before: Jul 21 13:01:01 2026 GMT
Not After : Jul 22 13:01:01 2026 GMT
Subject: CN=ba058ebb4594945b6baf72492ad6b386a1f77e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c4:54:d3:23:94:78:89:61:4e:03:c9:b7:f8:
b2:ff:4b:ec:84:a0:45:4e:96:75:9a:d6:21:b9:a2:
46:13:22:b2:17:81:5e:80:43:3e:2e:4c:b0:d7:bf:
31:cb:9b:3b:58:37:a2:c5:2a:1b:54:a5:ba:6e:2d:
09:21:4b:2a:3d:ae:da:8a:74:17:77:b4:e1:ec:ad:
a8:e6:ad:40:4c:67:52:02:e5:3e:77:95:9d:ac:5f:
24:eb:5f:6b:3d:ed:c2:38:80:65:ae:d5:bc:be:ad:
e5:14:66:5a:1b:ce:ef:1b:2b:1b:12:91:2b:d9:a7:
4b:50:27:f3:6f:8f:63:a0:02:f4:64:1d:d9:57:ca:
ed:b2:a6:84:f5:2d:b6:ff:55:28:5e:c6:9d:13:da:
9a:89:0a:64:9b:67:ec:16:66:66:d6:db:ac:05:d0:
18:a7:97:fe:dd:d9:88:6b:af:c7:7f:e2:75:c8:c1:
8f:56:8d:11:f1:a7:55:6f:b8:e6:45:4f:44:04:60:
6d:53:3e:47:65:31:0c:c0:60:68:e2:bd:95:29:d7:
a2:c2:0d:35:03:1b:da:10:e2:d4:b3:f5:32:76:1e:
d4:6f:25:ce:ae:ff:c3:07:c3:7c:c2:04:c4:07:db:
37:0d:0d:d9:58:73:96:e6:b7:ae:4f:72:d8:a3:f9:
1b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:05:8E:BB:45:94:94:5B:6B:AF:72:49:2A:D6:B3:86:A1:F7:7E:15
X509v3 Authority Key Identifier:
keyid:35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:49:84:e5:65:37:2d:ca:bc:51:9a:be:3f:d5:12:eb:47:c9:
ba:ec:98:ed:5a:92:d8:3a:3c:8c:ca:a6:db:81:06:4f:59:31:
cd:8c:ad:07:af:63:86:76:dc:89:44:30:ef:77:80:c3:d1:9a:
0e:9f:3a:77:b7:4d:ba:43:74:a4:c2:86:21:fb:e2:dc:70:ea:
8f:af:bc:d5:d8:fb:58:e5:16:1c:d4:fc:51:aa:eb:15:7a:68:
38:50:d7:be:db:b2:f7:45:1c:9d:80:6d:3d:bc:f6:05:d7:d9:
96:f7:15:8a:dc:b7:e6:5f:de:2e:de:0e:eb:df:fb:ba:44:ee:
e6:39:a2:f7:5c:8a:3b:58:7f:e1:bc:d8:5b:95:06:7d:0d:52:
67:8d:0e:dd:af:07:84:cd:32:45:37:55:c5:bc:7c:41:9b:ec:
95:2e:eb:62:ad:93:1b:02:12:28:d4:40:22:4d:5e:70:d7:a2:
4a:de:fe:62:45:04:f2:92:e3:f6:e1:34:be:18:37:67:5e:b2:
6e:20:c4:fb:c7:0c:21:91:66:de:d6:fb:b9:84:f4:28:d2:9f:
ee:b7:84:a1:df:34:8d:88:98:b2:e0:53:fb:b3:25:dd:68:32:
13:14:41:e4:84:8c:21:69:ba:dc:d5:f8:92:99:8f:b1:72:bb:
ff:e3:51:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:27:51 2026 by rpki-client