Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
File: nlzy-Led9mJBfsllbtEWbpGquAg.mft (raw, json)
Hash identifier: w3rTpwEW7/AG13/iOXJ387U/r4oLt3wRBo+dbhtopl8=
Subject key identifier: 23:29:A9:FC:A0:DD:C6:9A:A6:91:85:5A:B7:AF:89:64:F7:6E:A5:61
Authority key identifier: 9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08
Certificate issuer: /CN=9e5cf2f8b79df662417ec9656ed1166e91aab808
Certificate serial: 019D3909BECAF9D0863C0609E7D5EF8079EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
Manifest number: 1111
Signing time: Sun 29 Mar 2026 10:00:32 +0000
Manifest this update: Sun 29 Mar 2026 10:00:32 +0000
Manifest next update: Mon 30 Mar 2026 10:00:32 +0000
Files and hashes: 1: 5hcH1GzZhZ8O8qI4d4Zi7O_RjUE.roa (hash: dxTVG5tLErq0ptsL/SIuT5v8Akxf05W3YRl2mwfObes=)
2: nlzy-Led9mJBfsllbtEWbpGquAg.crl (hash: Zf+onuuIx2eqKd8IKUs+rdi8GDEMFhz+SeYIQnDwJjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:be:ca:f9:d0:86:3c:06:09:e7:d5:ef:80:79:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5cf2f8b79df662417ec9656ed1166e91aab808
Validity
Not Before: Mar 29 10:00:32 2026 GMT
Not After : Mar 30 10:00:32 2026 GMT
Subject: CN=2329a9fca0ddc69aa691855ab7af8964f76ea561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5c:95:73:56:55:08:9c:ab:3b:ba:75:83:60:
83:cf:b8:49:49:63:3e:1d:78:41:10:94:db:0e:a9:
ff:fe:4a:01:ec:60:bc:11:35:e5:40:75:aa:ab:58:
16:c5:5d:a7:7e:b1:09:4b:2d:ea:4b:29:49:b4:92:
a3:b1:35:be:21:d4:7f:19:fa:d4:d2:8b:ae:7b:83:
d6:cb:51:a6:21:0d:cb:ad:a3:ad:f1:52:d5:60:ee:
39:cb:9f:84:65:d9:f3:8a:61:84:ce:8b:6c:c5:b1:
84:6d:39:4f:b7:71:78:c8:40:90:1e:8e:c2:5e:7c:
fe:cb:d1:64:52:a0:08:2c:52:26:b7:c6:ca:ab:25:
68:0b:e8:c1:aa:a7:70:fc:23:fc:1f:a4:8a:65:93:
ff:75:f1:31:ec:22:11:60:37:48:2a:64:05:9d:4a:
c7:a2:3c:d7:b7:43:d7:4a:9d:a6:a3:4e:71:8a:39:
fe:38:93:a6:ba:13:b5:b3:d5:e0:60:2d:1c:d6:08:
1d:e1:cd:f2:15:84:cc:1a:bb:77:ae:38:a4:a2:5b:
89:11:9f:de:2d:c9:9c:ba:33:5f:b2:12:25:3b:71:
22:51:89:4f:84:7b:dd:bf:b7:c1:9e:01:7c:f7:d8:
6c:49:ca:73:a0:41:90:aa:81:83:4b:97:2d:aa:51:
36:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:29:A9:FC:A0:DD:C6:9A:A6:91:85:5A:B7:AF:89:64:F7:6E:A5:61
X509v3 Authority Key Identifier:
keyid:9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:09:ab:ac:6f:32:01:51:6f:fe:cd:09:6d:8a:3e:d6:76:47:
33:c5:41:3a:0c:9f:d4:a2:8b:62:fd:0f:ae:c9:91:91:0f:ac:
50:53:2c:d4:ca:4a:ae:40:ae:e8:02:e0:e6:6a:6f:0c:53:44:
32:20:c7:0e:36:70:d2:b7:74:94:c6:d7:ff:46:1f:1b:37:1e:
85:1f:1e:60:77:3e:a1:6c:54:0e:3c:c0:25:8c:d0:96:65:06:
2e:da:fa:c0:16:12:fe:94:84:e8:f4:f2:1f:01:f4:c3:b3:bb:
90:95:66:50:f7:2a:45:35:07:d6:8a:2e:d6:63:3f:c6:42:ef:
ca:04:7b:f3:47:60:f6:87:5d:b5:6f:40:01:00:8a:aa:22:dc:
f0:f9:b4:c4:e4:f8:6e:fb:d3:a9:30:e7:9c:08:24:ec:e3:17:
7d:ae:ae:c2:ac:69:c1:99:a8:e9:fb:fb:8f:20:93:8a:63:f9:
ee:88:27:89:46:db:81:de:bf:f4:be:d3:09:3f:8e:e9:bc:f1:
88:5c:0d:8b:3a:95:51:fd:de:71:09:a3:db:d4:d8:1f:c6:bf:
63:63:82:29:b8:9f:dd:a0:43:a8:50:93:cc:1b:8c:c5:ba:5f:
c5:73:2d:cf:0e:8d:0a:4e:39:4b:6d:a9:94:34:80:9b:64:fb:
fe:19:c9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:23:21 2026 by rpki-client