Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.mft
File: nz-YcVNtYL90vfaQYMkNVBB9jjg.mft (raw, json)
Hash identifier: F7lPflk52SZWUUohlNJfv5j8Wqoq1R4AQrrdWhZkmgE=
Subject key identifier: 7E:BD:B8:34:9F:04:15:C3:7F:DF:61:E5:18:91:4A:C3:94:10:33:C1
Authority key identifier: 9F:3F:98:71:53:6D:60:BF:74:BD:F6:90:60:C9:0D:54:10:7D:8E:38
Certificate issuer: /CN=9f3f9871536d60bf74bdf69060c90d54107d8e38
Certificate serial: 01A00402834F853710B8EF3952ED5D0DC589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nz-YcVNtYL90vfaQYMkNVBB9jjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.mft
Manifest number: 1282
Signing time: Sat 15 Aug 2026 06:01:08 +0000
Manifest this update: Sat 15 Aug 2026 06:01:08 +0000
Manifest next update: Sun 16 Aug 2026 06:01:08 +0000
Files and hashes: 1: PYDato-ASu6UXDdHs5gP0K32nY4.roa (hash: yQRUA3xyuLF4WYI3cv0hMQ5bIo4W5JbDMtC9jfgPPDQ=)
2: nz-YcVNtYL90vfaQYMkNVBB9jjg.crl (hash: zjktRyO1tA7BPpXV6GZfXCiQeoNYj6QVw6k0oUy6ZY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nz-YcVNtYL90vfaQYMkNVBB9jjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:02:83:4f:85:37:10:b8:ef:39:52:ed:5d:0d:c5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3f9871536d60bf74bdf69060c90d54107d8e38
Validity
Not Before: Aug 15 06:01:08 2026 GMT
Not After : Aug 16 06:01:08 2026 GMT
Subject: CN=7ebdb8349f0415c37fdf61e518914ac3941033c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c1:97:02:b2:73:8c:7c:56:4d:e1:eb:f3:f9:
bd:e9:ec:88:c8:85:10:da:6d:97:10:57:9f:d8:67:
f1:8b:db:4a:af:44:6c:28:c9:ee:de:15:85:d7:8c:
f7:99:9c:a0:3f:14:68:e9:43:63:9b:65:4e:bd:71:
b7:ec:17:b6:f2:20:13:72:a6:78:11:b1:70:fe:9e:
38:69:18:28:f4:47:f0:40:ce:40:e7:90:82:53:68:
a3:16:d1:87:5b:29:bd:68:55:4c:aa:fb:05:60:b9:
b7:87:02:61:14:9b:67:b6:9b:c8:34:34:ca:e5:9c:
2d:2a:3a:80:c1:a8:be:57:9b:0f:08:a9:09:7b:c7:
56:34:fc:3d:d3:03:bb:03:3a:68:7f:9f:33:52:91:
37:19:62:df:e3:e9:74:ac:d0:80:30:b3:ff:46:43:
6c:37:c4:c1:cd:af:7f:ca:b2:bf:28:28:ea:3c:53:
1d:5a:87:e2:75:e7:7b:f1:84:c6:38:1e:ec:73:33:
b4:8c:39:67:78:20:6b:82:87:08:19:b6:97:b4:ad:
7d:05:06:ea:54:32:1d:bd:11:27:a8:15:76:b5:1e:
4a:f2:e3:e3:84:9d:fb:27:2b:85:9c:fb:82:95:0a:
5f:99:2b:0e:70:6d:28:9b:1a:71:be:92:05:93:30:
b1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BD:B8:34:9F:04:15:C3:7F:DF:61:E5:18:91:4A:C3:94:10:33:C1
X509v3 Authority Key Identifier:
keyid:9F:3F:98:71:53:6D:60:BF:74:BD:F6:90:60:C9:0D:54:10:7D:8E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nz-YcVNtYL90vfaQYMkNVBB9jjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f9:f2:40:7b:68:f6:bc:16:46:32:85:1d:9d:c3:cf:ce:18:
3b:85:79:64:1a:c3:df:27:e2:4a:4e:07:a3:ff:45:d5:21:7f:
4d:c8:96:6b:4f:6d:de:3a:74:53:64:b6:0d:c5:09:bc:c4:98:
c6:cc:88:cc:d0:84:67:1a:0e:2e:ae:59:6d:88:8d:13:31:fe:
49:5d:ee:a5:a3:c5:76:3a:ee:bc:6f:39:41:ee:1a:61:b1:31:
d3:07:1d:7a:38:79:83:5f:3f:d8:bc:aa:23:37:c8:9d:27:99:
43:4d:55:8b:6b:a3:13:b6:1d:8a:a2:55:75:16:2b:b0:c8:e7:
51:5e:8a:7c:12:7e:61:5d:5a:5e:24:88:2c:41:78:8c:76:67:
58:a2:16:b8:78:c5:30:39:49:fd:3e:db:2f:28:67:88:13:5f:
33:1f:38:4c:be:02:fa:cc:79:04:45:53:62:8a:ed:82:9c:2e:
8f:18:85:74:21:34:50:81:d3:ac:3f:ee:fc:34:91:5e:cf:e5:
0b:f9:85:6a:31:ae:c5:ec:32:58:17:25:bb:cf:48:ad:31:b5:
13:b5:65:c6:34:3d:0a:23:34:51:74:6a:b6:84:1e:3d:1e:6c:
11:d4:b9:83:13:6b:7c:2a:60:0f:71:6c:61:dc:b9:d6:ac:a4:
9b:0d:da:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:41:24 2026 by rpki-client