Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
File: NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft (raw, json)
Hash identifier: CQPE8KZuMpuGDMKfBWuteAE8TDTBJgHDvtZpuCpD1rA=
Subject key identifier: 5E:FE:C9:05:EA:4B:00:3E:5D:D4:5B:21:6F:26:AC:66:15:85:A3:0D
Authority key identifier: 35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
Certificate issuer: /CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Certificate serial: 01A06E39A4EC7DBF82CD1AB78489A58CFEF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
Manifest number: 0F1D
Signing time: Fri 04 Sep 2026 21:01:06 +0000
Manifest this update: Fri 04 Sep 2026 21:01:06 +0000
Manifest next update: Sat 05 Sep 2026 21:01:06 +0000
Files and hashes: 1: 1p2ABoTmHppjIUEVK5pg2mIhNow.roa (hash: ECPu2qb2eGXD+sxXXw8nzOOHG8hI1ILJZKOoScd4Ul8=)
2: NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl (hash: PbpKl75+BW/PagjNIxKH3ZuZPaTPsTu8zWc4ySzhT5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:39:a4:ec:7d:bf:82:cd:1a:b7:84:89:a5:8c:fe:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Validity
Not Before: Sep 4 21:01:06 2026 GMT
Not After : Sep 5 21:01:06 2026 GMT
Subject: CN=5efec905ea4b003e5dd45b216f26ac661585a30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f5:20:b6:aa:93:bc:12:78:fa:1d:53:47:dc:
c6:9a:d0:99:20:69:26:aa:65:23:57:f2:1d:c8:21:
d5:52:0b:27:1a:ba:42:6b:b9:3a:64:37:fd:16:7f:
a1:8d:5e:06:bb:54:ba:38:1d:a1:c0:46:54:ff:70:
ac:43:7e:1c:bc:53:20:68:43:f2:62:23:bd:e3:27:
33:6d:10:d5:99:ce:4a:47:cb:88:8e:33:9e:f8:74:
a3:4c:a0:4c:ce:c2:15:f6:6f:a5:62:60:3f:5e:d0:
ac:95:00:77:a5:c7:da:13:4e:8d:5b:70:fa:22:2d:
2e:87:ce:92:40:67:e4:a7:db:54:f7:a5:32:92:2c:
5f:ad:98:87:cb:cd:ab:e5:7b:c4:ed:e2:bc:0f:bf:
06:cd:87:c5:ce:62:ef:e5:75:f2:81:6a:ce:fc:09:
ea:83:a1:03:bc:38:f7:b8:81:0e:9d:2a:7b:f5:2f:
cf:36:b2:8a:aa:23:f3:cb:16:fe:d4:5a:14:27:90:
d0:5f:ac:3e:5f:b4:42:32:b9:71:dd:dc:c0:b4:e8:
c5:ec:9e:ac:85:2d:e4:b4:74:20:8f:7e:4e:e4:da:
a6:53:d3:96:6e:20:02:2a:9b:18:4a:f4:6e:3b:4b:
f1:cd:8c:a3:c8:a8:db:b9:7d:06:5d:ac:ec:b7:ef:
f3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FE:C9:05:EA:4B:00:3E:5D:D4:5B:21:6F:26:AC:66:15:85:A3:0D
X509v3 Authority Key Identifier:
keyid:35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:5f:eb:cf:cd:c6:ef:83:49:e8:1d:28:65:a3:a6:88:2c:4f:
75:7a:7c:60:4a:e0:c7:50:c3:91:c3:da:92:aa:f6:3d:26:98:
26:15:84:d0:5a:c1:dd:a2:09:4f:05:a3:f3:71:88:74:1f:19:
a9:29:58:ee:79:56:15:9a:0a:52:ad:27:bc:be:ea:b7:81:37:
ce:1b:de:04:af:db:ac:e3:c7:0a:69:77:00:69:ab:6e:6b:e1:
dd:fb:5b:a0:ff:b1:f0:62:d6:22:c4:f1:e5:a5:6f:bb:48:43:
64:7b:90:1e:8c:d4:61:f1:4a:b3:ec:05:70:17:51:3c:0f:12:
91:37:0c:54:b5:84:ea:75:63:fe:4f:a6:0f:09:65:2a:2f:74:
05:74:22:1e:65:57:95:c5:07:a5:87:8a:dd:32:57:fa:9e:ee:
7b:7e:cc:03:81:95:1c:dc:a1:a8:18:07:b5:9e:d5:d8:29:c9:
e6:06:3c:47:81:7a:8b:2e:7f:ae:7a:e4:70:d0:22:e2:e8:1c:
8a:62:df:1b:bb:ee:a8:94:83:f6:2b:ad:16:40:8b:86:11:83:
4a:fd:9b:5e:26:49:18:52:a4:ee:47:6a:65:1f:dd:5a:7a:ef:
49:01:cb:68:c4:10:15:65:2d:57:e9:54:02:ee:90:a9:71:e5:
75:64:80:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:47:56 2026 by rpki-client