Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
File: NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft (raw, json)
Hash identifier: DA7eVfNlb3y8ScO/Y5c0iz3V4WO5EArCOZSpDb0zQR4=
Subject key identifier: 21:A4:36:85:AE:1D:4A:55:39:3F:1F:7E:6A:F0:DA:6C:53:86:00:DB
Authority key identifier: 35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
Certificate issuer: /CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Certificate serial: 01A17100DD91B10636167E4175E4EA13B6EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
Manifest number: 0FA3
Signing time: Sun 25 Oct 2026 03:00:44 +0000
Manifest this update: Sun 25 Oct 2026 03:00:44 +0000
Manifest next update: Mon 26 Oct 2026 03:00:44 +0000
Files and hashes: 1: 1p2ABoTmHppjIUEVK5pg2mIhNow.roa (hash: ECPu2qb2eGXD+sxXXw8nzOOHG8hI1ILJZKOoScd4Ul8=)
2: NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl (hash: iCxep1gKLn0MJjjrSbzfFdkq9JhIbZemI3uHXFeGtxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:00:dd:91:b1:06:36:16:7e:41:75:e4:ea:13:b6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Validity
Not Before: Oct 25 03:00:44 2026 GMT
Not After : Oct 26 03:00:44 2026 GMT
Subject: CN=21a43685ae1d4a55393f1f7e6af0da6c538600db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:eb:7f:68:b4:76:4c:3e:b6:54:c0:3c:e8:45:
4f:7e:4e:65:1d:b9:20:9e:1f:ff:c7:cb:f4:29:51:
e8:29:b0:a0:8b:1d:09:1f:b2:b9:52:5a:01:bf:07:
b4:94:e8:b0:d6:e4:f6:87:c0:5b:64:a9:d4:b9:32:
24:0a:6d:87:8b:74:6c:4b:32:de:4c:d6:83:d7:8b:
b6:b6:a4:86:3b:28:93:0d:d2:5a:53:a7:8b:6b:93:
e0:44:41:8c:8c:9f:4d:5f:8d:15:4b:2e:c3:33:00:
28:0f:45:8f:1d:34:c7:c4:82:cc:1d:c5:dd:25:11:
2e:4f:1e:f3:df:2e:e0:a8:59:94:5c:f6:ac:a9:9e:
97:61:f3:19:ba:27:da:e2:4f:09:31:53:c0:f2:86:
f1:e8:0a:a1:89:d2:33:35:02:00:dc:d6:d5:ca:15:
23:1f:c2:8e:5f:85:a9:8a:a0:83:6c:2c:58:be:0a:
05:a3:a2:28:79:c7:74:71:89:3d:e5:58:2d:e6:3b:
71:07:a0:4a:76:ac:28:30:c6:9f:70:f1:9a:33:af:
69:9a:31:b0:54:11:13:41:15:0e:7b:87:2b:f5:a7:
4c:c9:18:a0:ca:25:4b:0f:78:9b:d0:10:f0:20:e3:
53:b6:0b:46:e2:3e:2c:c0:17:80:24:56:64:21:b3:
90:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A4:36:85:AE:1D:4A:55:39:3F:1F:7E:6A:F0:DA:6C:53:86:00:DB
X509v3 Authority Key Identifier:
keyid:35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:9b:5c:07:0e:83:d4:6e:2b:e8:22:f4:eb:9a:8a:96:f5:0a:
4d:a0:89:ef:c2:b2:c6:b7:c5:9e:44:36:c8:ea:57:39:9f:44:
62:fb:7b:88:72:16:76:96:f4:16:e8:6a:d9:4e:f5:02:34:5b:
53:f9:5f:fc:a9:cb:6b:5b:e9:ab:02:f6:cf:29:89:4a:4a:83:
ff:7b:ff:c3:1a:93:71:99:70:c1:3c:d7:38:56:41:6c:86:2b:
68:d5:3c:79:0b:0f:62:d3:38:fb:2e:78:98:1e:50:ef:2d:bb:
56:c0:77:d4:6d:45:52:84:a7:e0:98:85:3a:33:7d:75:ba:15:
17:84:6e:6a:7a:98:5c:f6:ac:ad:3a:9e:10:dc:c3:e3:00:f2:
52:55:11:49:ff:09:87:80:13:92:b3:ab:d7:90:df:d1:70:46:
a9:06:56:43:7f:a7:12:ec:45:19:e3:4e:bb:17:d6:01:23:bd:
be:bd:6b:08:09:37:23:7c:00:f4:ef:79:7f:e7:3a:1f:09:22:
31:a9:3b:5a:87:cd:48:14:e2:02:3b:17:2b:83:8e:26:b1:92:
a6:5a:3a:b2:61:2c:2f:37:04:be:fc:7e:e9:e9:74:ba:8c:f1:
fa:4f:65:83:28:ba:1d:be:8e:b2:f6:a5:60:7a:56:ba:bc:d8:
30:b6:46:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:51:11 2026 by rpki-client