Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
File: nzEukpe8HSfr60dt6g7hXddWVC0.mft (raw, json)
Hash identifier: QvqGrUQMTiPmBtbKoLQYi43aVklECia8SJIW3RlV/w8=
Subject key identifier: D8:7F:78:E7:E5:F0:62:A7:8D:40:15:A8:D9:48:75:7A:7F:2B:3C:42
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 019D0EC4EC4478F71B26B34E20189F4205C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
Manifest number: 0F1C
Signing time: Sat 21 Mar 2026 05:01:19 +0000
Manifest this update: Sat 21 Mar 2026 05:01:19 +0000
Manifest next update: Sun 22 Mar 2026 05:01:19 +0000
Files and hashes: 1: 8UzfUWJvn8I9_AC0AqDko2JvNLk.roa (hash: 0Vz8FiIdw8A6JBB2ikazw0zl4TrRKvJ5OhWokpICGeU=)
2: GPrNUgOp-yFfntRAITK46bjxYx8.roa (hash: tp3Wm0E6OeEViiyRYXktB8FqE/SyfwJ6JfvXOHg6tpE=)
3: Ia5LqxC4UDeU94BXdFGGowiTk-Q.roa (hash: trfEQgzbUlz1xLGTVPmFL6RW2N2kOG1uK8fwtE/nm/0=)
4: JpjcVvpsRev2p10C3LQaIJ0kCAk.roa (hash: olGjGjOs+cbpB3gRjJy05Z6fBuTN4aPpcrK5updhkf8=)
5: MEHkcgqEJz7YFYdGUGWIvg3-cls.roa (hash: 1BYxRX72gkHZBwUAz+wy4Xb3C0tFku26Sl04kGiXOpw=)
6: _frEaY1XPz_zgvnWp1kKnyd22cQ.roa (hash: okh9WBzugciORKvFkzhGVKctYUsJYdr64nkB3piPl54=)
7: nzEukpe8HSfr60dt6g7hXddWVC0.crl (hash: xvZSe1slCKuKt73kjWX9zCUsznObGlHPsnCANv62X8M=)
8: unsDtmwuVq6UnIoMMfgu4SomBNI.roa (hash: 42NQRABPwAdQZ7WOYRrg/k8mIJxEsdJlQLE5DRl74k0=)
9: yefHGqoy_vY6UIn_R3TQMREwj3k.roa (hash: B1VLvaZ4NnymL6VHVlSUOOS/upHHX90n9eExa5FLhNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0e:c4:ec:44:78:f7:1b:26:b3:4e:20:18:9f:42:05:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Mar 21 05:01:19 2026 GMT
Not After : Mar 22 05:01:19 2026 GMT
Subject: CN=d87f78e7e5f062a78d4015a8d948757a7f2b3c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:02:fd:19:7c:76:e9:95:f6:89:7e:49:16:51:
d9:9b:1d:87:f4:af:21:8e:8e:62:8f:56:0a:d5:64:
28:88:3e:c8:7e:50:51:cd:58:62:2a:23:21:6c:27:
3e:10:14:3d:14:23:eb:75:d6:c4:f6:10:1c:b1:28:
5d:f8:e7:dc:65:cb:a1:13:e0:a8:65:23:b9:94:d0:
ed:a0:9b:73:76:56:a7:c5:04:2d:96:6e:0f:13:2e:
b1:eb:0a:8a:08:af:7a:b1:3c:6f:c4:ae:67:3e:90:
41:bd:4e:c6:27:af:cd:76:ac:2e:09:c4:00:57:09:
a5:38:f5:98:84:49:3d:21:aa:09:57:dd:7e:6f:65:
b4:d2:e2:b7:dd:f6:78:13:42:d3:94:a8:b6:36:df:
13:dd:15:6f:b0:87:5e:cb:ad:64:7b:01:98:25:41:
4c:2a:60:82:94:5b:4c:12:ce:14:75:6d:c7:76:08:
e1:e2:98:21:9f:2d:ae:2d:0f:20:07:4f:44:5a:ab:
9d:34:84:d4:0d:ac:16:dd:45:ce:d9:94:9f:98:3f:
61:e9:7e:55:84:26:dc:a0:2e:a6:b2:59:b1:a2:e8:
54:61:e9:a4:de:ca:5b:ef:ad:73:00:94:ee:d2:08:
ef:7b:61:ae:1c:e4:7e:3d:cb:00:f1:da:c5:a7:53:
47:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7F:78:E7:E5:F0:62:A7:8D:40:15:A8:D9:48:75:7A:7F:2B:3C:42
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:be:da:c8:5f:48:83:7b:3f:5b:e8:91:b2:11:4b:fe:00:16:
cf:f6:a7:5d:77:7c:29:82:0f:b0:1f:93:a7:bf:c1:1e:60:7b:
f7:3a:f7:74:3d:fe:fb:e9:2f:10:3d:a9:f7:c4:1e:9f:01:9d:
ee:16:17:1e:ea:70:18:d2:3f:3a:c3:9a:e1:f0:4b:fe:43:b9:
8f:af:e6:6c:5b:f7:66:f5:94:7b:38:98:9b:66:77:90:70:74:
81:a8:79:f0:3d:57:f1:ed:a5:a0:71:80:ab:0c:b3:3c:f5:d4:
88:70:18:96:26:c4:4d:32:c2:58:38:88:c5:65:a5:74:c5:5a:
88:ae:d5:83:18:ea:50:b5:cf:38:a8:31:f2:82:10:5a:44:a1:
2b:60:b7:2b:c2:ec:52:46:29:59:28:2b:c5:e4:4c:e9:60:62:
9b:88:b2:5a:52:60:5f:53:d0:5a:39:a8:e3:59:88:a5:ba:98:
9b:d5:3f:75:93:33:05:6a:80:e4:4a:64:cf:16:24:a6:e5:4f:
c2:54:a3:a1:8d:ec:56:d0:24:71:98:bb:24:d8:4b:af:e4:65:
05:98:06:3f:7a:99:1f:8e:03:2f:80:c4:48:31:d0:c7:c2:7e:
47:53:4e:5e:07:b8:82:9c:f0:e6:05:90:28:04:98:25:14:3c:
24:d0:e3:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0OxOxEePcbJrNOIBifQgXCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1
NjU0MmQwHhcNMjYwMzIxMDUwMTE5WhcNMjYwMzIyMDUwMTE5WjAzMTEwLwYDVQQD
EyhkODdmNzhlN2U1ZjA2MmE3OGQ0MDE1YThkOTQ4NzU3YTdmMmIzYzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QL9GXx26ZX2iX5JFlHZmx2H9K8h
jo5ij1YK1WQoiD7IflBRzVhiKiMhbCc+EBQ9FCPrddbE9hAcsShd+OfcZcuhE+Co
ZSO5lNDtoJtzdlanxQQtlm4PEy6x6wqKCK96sTxvxK5nPpBBvU7GJ6/NdqwuCcQA
VwmlOPWYhEk9IaoJV91+b2W00uK33fZ4E0LTlKi2Nt8T3RVvsIdey61kewGYJUFM
KmCClFtMEs4UdW3Hdgjh4pghny2uLQ8gB09EWqudNITUDawW3UXO2ZSfmD9h6X5V
hCbcoC6mslmxouhUYemk3spb761zAJTu0gjve2GuHOR+PcsA8drFp1NHeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNh/eOfl8GKnjUAVqNlIdXp/KzxCMB8GA1UdIwQY
MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt
YmQ1ZDNmMDBmYmIyLzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy
LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu77ayF9I
g3s/W+iRshFL/gAWz/anXXd8KYIPsB+Tp7/BHmB79zr3dD3+++kvED2p98QenwGd
7hYXHupwGNI/OsOa4fBL/kO5j6/mbFv3ZvWUeziYm2Z3kHB0gah58D1X8e2loHGA
qwyzPPXUiHAYlibETTLCWDiIxWWldMVaiK7VgxjqULXPOKgx8oIQWkShK2C3K8Ls
UkYpWSgrxeRM6WBim4iyWlJgX1PQWjmo41mIpbqYm9U/dZMzBWqA5EpkzxYkpuVP
wlSjoY3sVtAkcZi7JNhLr+RlBZgGP3qZH44DL4DESDHQx8J+R1NOXge4gpzw5gWQ
KASYJRQ8JNDjiQ==
-----END CERTIFICATE-----
Generated at Sat Mar 21 13:17:16 2026 by rpki-client