Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.mft
File: nz-YcVNtYL90vfaQYMkNVBB9jjg.mft (raw, json)
Hash identifier: PU0EusSJMg7/4RMflJBNJs5fYBvbPATnScedAjwQuN0=
Subject key identifier: 2D:F0:B4:09:AA:38:6A:49:EE:28:7D:E4:62:BA:B4:35:7F:93:B1:0C
Authority key identifier: 9F:3F:98:71:53:6D:60:BF:74:BD:F6:90:60:C9:0D:54:10:7D:8E:38
Certificate issuer: /CN=9f3f9871536d60bf74bdf69060c90d54107d8e38
Certificate serial: 01A14C4F7E2F43D20F67A1BA0FEC083260BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nz-YcVNtYL90vfaQYMkNVBB9jjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.mft
Manifest number: 132C
Signing time: Sun 18 Oct 2026 00:00:40 +0000
Manifest this update: Sun 18 Oct 2026 00:00:40 +0000
Manifest next update: Mon 19 Oct 2026 00:00:40 +0000
Files and hashes: 1: PYDato-ASu6UXDdHs5gP0K32nY4.roa (hash: yQRUA3xyuLF4WYI3cv0hMQ5bIo4W5JbDMtC9jfgPPDQ=)
2: nz-YcVNtYL90vfaQYMkNVBB9jjg.crl (hash: SRDYRCCfyb9tqVsbaOoxI/SO1KBAgp1hUwusyReSO0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nz-YcVNtYL90vfaQYMkNVBB9jjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:4f:7e:2f:43:d2:0f:67:a1:ba:0f:ec:08:32:60:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3f9871536d60bf74bdf69060c90d54107d8e38
Validity
Not Before: Oct 18 00:00:40 2026 GMT
Not After : Oct 19 00:00:40 2026 GMT
Subject: CN=2df0b409aa386a49ee287de462bab4357f93b10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9a:7f:6f:3b:71:29:76:1c:37:94:8a:aa:8f:
a7:c0:16:8f:1c:67:9a:99:55:e2:b0:1d:15:b4:c8:
e1:fe:9c:a8:91:68:8d:82:77:53:ba:c7:1b:62:59:
8a:ce:32:33:98:79:07:78:61:b7:14:f1:80:ad:f4:
27:d4:5d:07:03:70:cd:f7:5a:2d:eb:a4:31:ac:e2:
af:b4:d9:c1:41:4a:3f:fe:97:39:ea:df:15:08:d2:
76:00:2e:7c:88:cf:04:a6:c9:44:fd:27:09:a5:07:
5b:9f:21:0a:59:10:b7:02:42:64:84:d6:5a:01:f5:
36:4c:6b:08:53:34:86:2d:b7:2f:7d:21:8d:5d:62:
07:44:69:30:4c:80:b4:b8:2b:ce:a1:c4:51:b1:b2:
e9:c2:00:92:41:15:cc:f8:fd:c2:fd:8f:62:8c:aa:
69:03:8c:6b:fd:6d:c9:f3:e6:6a:3e:28:36:e5:17:
4a:8f:5a:c3:c1:bb:ea:0d:f0:69:b6:8d:28:f1:58:
96:e6:57:a1:71:db:de:72:8e:5f:0a:9d:f4:41:dd:
b1:54:a2:90:61:15:ef:e0:7b:d2:78:47:f7:a2:50:
12:6f:1c:6b:31:48:13:ec:9f:33:4c:da:7c:63:43:
49:ca:24:6f:b9:73:26:af:47:70:a4:f4:43:f6:74:
c3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F0:B4:09:AA:38:6A:49:EE:28:7D:E4:62:BA:B4:35:7F:93:B1:0C
X509v3 Authority Key Identifier:
keyid:9F:3F:98:71:53:6D:60:BF:74:BD:F6:90:60:C9:0D:54:10:7D:8E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nz-YcVNtYL90vfaQYMkNVBB9jjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:cf:09:53:2e:3d:22:1a:a5:8e:4b:27:2a:a2:20:12:02:cf:
fc:69:63:70:57:9f:71:95:d0:a9:ca:fa:0c:a9:15:2e:62:63:
fe:2f:93:5e:58:6e:97:60:54:ac:55:02:b3:c7:b7:f9:38:f7:
7d:9d:4d:d9:12:e8:d5:0f:07:5b:30:fc:9c:e6:b9:ed:55:ed:
9b:2a:86:98:f1:a0:13:64:4a:9f:49:86:e3:76:1a:43:a2:ca:
89:7d:23:3a:39:0d:be:45:f6:7f:7f:db:3b:0e:73:17:33:e7:
41:96:f6:cb:71:35:c3:fe:c6:42:d6:4c:49:96:7e:98:45:75:
fe:21:f2:58:c3:85:5e:f3:04:94:e2:b6:43:62:ae:ab:c7:3a:
7a:f0:d4:91:3e:3f:84:f5:0f:0c:6a:d3:99:08:50:30:45:dc:
7f:d0:c1:02:3a:5e:44:31:7c:ff:37:58:da:0a:32:61:dc:27:
63:5c:5a:77:32:f1:24:7d:82:ed:ee:4e:14:a1:c9:e9:88:7b:
ee:74:54:0d:5f:09:c3:c5:9c:d5:4c:00:33:0d:b7:91:d0:3d:
8c:32:9d:a2:a3:59:87:af:92:41:25:6e:22:af:d1:8b:42:72:
f9:ad:50:11:6a:fe:db:1a:f3:6e:ca:55:d0:1b:00:c1:0d:73:
49:64:c8:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFMT34vQ9IPZ6G6D+wIMmC6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmM2Y5ODcxNTM2ZDYwYmY3NGJkZjY5MDYwYzkwZDU0MTA3
ZDhlMzgwHhcNMjYxMDE4MDAwMDQwWhcNMjYxMDE5MDAwMDQwWjAzMTEwLwYDVQQD
EygyZGYwYjQwOWFhMzg2YTQ5ZWUyODdkZTQ2MmJhYjQzNTdmOTNiMTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpp/bztxKXYcN5SKqo+nwBaPHGea
mVXisB0VtMjh/pyokWiNgndTuscbYlmKzjIzmHkHeGG3FPGArfQn1F0HA3DN91ot
66QxrOKvtNnBQUo//pc56t8VCNJ2AC58iM8EpslE/ScJpQdbnyEKWRC3AkJkhNZa
AfU2TGsIUzSGLbcvfSGNXWIHRGkwTIC0uCvOocRRsbLpwgCSQRXM+P3C/Y9ijKpp
A4xr/W3J8+ZqPig25RdKj1rDwbvqDfBpto0o8ViW5lehcdveco5fCp30Qd2xVKKQ
YRXv4HvSeEf3olASbxxrMUgT7J8zTNp8Y0NJyiRvuXMmr0dwpPRD9nTDLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3wtAmqOGpJ7ih95GK6tDV/k7EMMB8GA1UdIwQY
MBaAFJ8/mHFTbWC/dL32kGDJDVQQfY44MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnotWWNWTnRZTDkwdmZhUVlNa05WQkI5ampnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mNmJiZDMtYWUyNy00ZGM3LWI2Njkt
YzUyNjNiMzMwM2I5LzEvbnotWWNWTnRZTDkwdmZhUVlNa05WQkI5ampnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9mNmJiZDMtYWUyNy00ZGM3LWI2NjktYzUyNjNiMzMwM2I5
LzEvbnotWWNWTnRZTDkwdmZhUVlNa05WQkI5ampnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJc8JUy49
IhqljksnKqIgEgLP/GljcFefcZXQqcr6DKkVLmJj/i+TXlhul2BUrFUCs8e3+Tj3
fZ1N2RLo1Q8HWzD8nOa57VXtmyqGmPGgE2RKn0mG43YaQ6LKiX0jOjkNvkX2f3/b
Ow5zFzPnQZb2y3E1w/7GQtZMSZZ+mEV1/iHyWMOFXvMElOK2Q2Kuq8c6evDUkT4/
hPUPDGrTmQhQMEXcf9DBAjpeRDF8/zdY2goyYdwnY1xadzLxJH2C7e5OFKHJ6Yh7
7nRUDV8Jw8Wc1UwAMw23kdA9jDKdoqNZh6+SQSVuIq/Ri0Jy+a1QEWr+2xrzbspV
0BsAwQ1zSWTIkA==
-----END CERTIFICATE-----
Generated at Sun Oct 18 06:36:09 2026 by rpki-client