Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
File: nzEukpe8HSfr60dt6g7hXddWVC0.mft (raw, json)
Hash identifier: S+04Pbv10cIUXfMpP/7UlCYjPFTDdBUc4slimHBXdGw=
Subject key identifier: 44:4C:5B:22:E7:30:B5:89:9E:AB:B9:60:88:A9:FD:19:BF:13:94:9D
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 019DFA5F3FBCC3BF96D9BA2B804DC4FABAB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
Manifest number: 0F97
Signing time: Tue 05 May 2026 23:00:39 +0000
Manifest this update: Tue 05 May 2026 23:00:39 +0000
Manifest next update: Wed 06 May 2026 23:00:39 +0000
Files and hashes: 1: 8UzfUWJvn8I9_AC0AqDko2JvNLk.roa (hash: 0Vz8FiIdw8A6JBB2ikazw0zl4TrRKvJ5OhWokpICGeU=)
2: GPrNUgOp-yFfntRAITK46bjxYx8.roa (hash: tp3Wm0E6OeEViiyRYXktB8FqE/SyfwJ6JfvXOHg6tpE=)
3: Ia5LqxC4UDeU94BXdFGGowiTk-Q.roa (hash: trfEQgzbUlz1xLGTVPmFL6RW2N2kOG1uK8fwtE/nm/0=)
4: JpjcVvpsRev2p10C3LQaIJ0kCAk.roa (hash: olGjGjOs+cbpB3gRjJy05Z6fBuTN4aPpcrK5updhkf8=)
5: MEHkcgqEJz7YFYdGUGWIvg3-cls.roa (hash: 1BYxRX72gkHZBwUAz+wy4Xb3C0tFku26Sl04kGiXOpw=)
6: ZUJhUNmgGj_YHmbRa8-Vde0Gm6Y.roa (hash: W7TJ+QEiqoirOPiCGWDS+nKtWjHZnufX8l6Fd8kt268=)
7: nzEukpe8HSfr60dt6g7hXddWVC0.crl (hash: VlMyNRuGb7ICMzwe5nvUzA8LFTuiv+2Sq6Mi3cobmA4=)
8: unsDtmwuVq6UnIoMMfgu4SomBNI.roa (hash: 42NQRABPwAdQZ7WOYRrg/k8mIJxEsdJlQLE5DRl74k0=)
9: yefHGqoy_vY6UIn_R3TQMREwj3k.roa (hash: B1VLvaZ4NnymL6VHVlSUOOS/upHHX90n9eExa5FLhNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fa:5f:3f:bc:c3:bf:96:d9:ba:2b:80:4d:c4:fa:ba:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: May 5 23:00:39 2026 GMT
Not After : May 6 23:00:39 2026 GMT
Subject: CN=444c5b22e730b5899eabb96088a9fd19bf13949d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a1:54:ca:74:5b:04:c4:78:bf:8b:e7:cd:e7:
58:16:2f:a4:d7:f0:b5:c7:d3:cd:e5:bf:6f:79:1e:
8c:2a:67:8d:67:d9:ce:e3:37:d1:aa:d5:8c:84:18:
f4:65:6b:28:fe:f5:0a:11:7a:fe:ff:52:db:54:b4:
23:2c:08:2d:2b:a3:a4:f8:aa:8f:f3:96:01:c1:b7:
aa:cc:9a:94:2c:70:bf:75:90:8d:13:4c:b3:b4:ca:
d3:1f:c5:e2:fe:40:70:47:2c:24:48:44:71:b4:7c:
bd:58:b8:aa:22:d7:17:5c:9a:25:6d:63:84:5a:0f:
cf:92:06:b1:77:42:bc:65:09:b9:66:a1:bf:1f:b9:
1f:18:6f:d0:d5:45:f2:e1:de:5b:76:0c:c9:d6:09:
71:54:1e:84:5f:7f:23:63:65:04:f2:27:61:9a:53:
53:cb:4b:bd:b5:67:80:f2:ee:02:5a:77:5b:3c:c0:
62:c6:0b:1c:72:49:1e:dd:47:cc:ea:07:ca:6d:95:
c8:aa:ae:b6:79:27:20:26:73:54:b5:8d:6f:e6:36:
f3:cf:70:01:eb:bf:b0:6b:fe:26:97:9f:04:87:63:
01:83:55:db:94:0b:f0:36:67:ad:67:2a:65:37:f2:
af:38:b6:9c:e4:38:10:69:01:57:48:ff:d1:ff:63:
f8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4C:5B:22:E7:30:B5:89:9E:AB:B9:60:88:A9:FD:19:BF:13:94:9D
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:47:a0:3a:eb:31:44:e4:aa:57:04:40:3d:57:29:ed:7e:87:
bb:fb:72:9f:c3:fd:ed:e3:5b:c8:a2:46:b9:f3:89:ee:74:62:
f8:d5:9f:91:cc:5d:2a:48:8a:d1:c9:1a:3a:25:4f:a5:5a:59:
45:7f:ca:c8:82:22:97:50:61:40:f2:70:88:d4:3f:22:5a:d3:
32:c8:17:b9:f1:80:46:ac:1f:a3:c3:ac:f0:80:a4:a5:dc:65:
1a:ab:49:b9:eb:ca:00:35:5a:e7:08:65:76:da:0e:4b:21:7f:
7f:15:74:31:36:ce:32:f3:10:d6:45:6a:f7:64:43:61:54:32:
71:2c:3e:b6:9a:7c:ea:a2:1b:b1:0e:c9:47:db:2a:5b:91:19:
8f:93:72:20:8a:f4:a2:8b:ac:ee:62:4b:aa:ab:ee:ad:7b:bd:
ab:71:27:85:58:8c:e6:90:54:99:f2:5a:bc:c9:5d:f2:1d:95:
a9:7c:f3:35:fc:bf:1e:78:86:0b:f9:e7:d0:64:5a:17:4a:77:
82:ee:84:ed:27:71:e0:6a:02:a8:43:e1:6a:87:f5:69:0d:ef:
15:94:2d:18:1b:ef:ba:1f:77:f5:3f:ec:89:6f:dc:69:0c:42:
6c:94:15:ff:ba:e9:2c:99:aa:1b:18:07:b7:78:1e:e5:50:d4:
43:f7:46:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 03:26:54 2026 by rpki-client