Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
File: nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft (raw, json)
Hash identifier: V15t07+WJGudyue2dGBqZ0WAq7oKfQ3VyWj4sOHO4Uw=
Subject key identifier: DB:CD:25:95:66:70:50:7B:F2:EC:1F:4F:A2:16:2C:AC:7E:39:B2:58
Authority key identifier: 9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72
Certificate issuer: /CN=9f3640da7f1bc23ed4599f84a0853c8399f35d72
Certificate serial: 019EB9219D6A114B50D85546C30D37E6C724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
Manifest number: 0A9E
Signing time: Fri 12 Jun 2026 00:00:48 +0000
Manifest this update: Fri 12 Jun 2026 00:00:48 +0000
Manifest next update: Sat 13 Jun 2026 00:00:48 +0000
Files and hashes: 1: NIYrG37trab2P9JVD0eE6NO-0Dk.roa (hash: tSXqLOKf3W/YzIEC+Y4rvZIML+H/1ngQ/p6IkWH1HL8=)
2: nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl (hash: QFwV9rAXNAQglV2ALA63Mki9AR0VKV49M8R/A84sjuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:9d:6a:11:4b:50:d8:55:46:c3:0d:37:e6:c7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3640da7f1bc23ed4599f84a0853c8399f35d72
Validity
Not Before: Jun 12 00:00:48 2026 GMT
Not After : Jun 13 00:00:48 2026 GMT
Subject: CN=dbcd25956670507bf2ec1f4fa2162cac7e39b258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:55:95:36:b1:ec:28:8d:64:61:3b:eb:6c:a3:
59:fe:6c:5c:8c:13:31:91:1d:8e:35:ed:d3:fb:53:
5a:82:ab:46:d4:17:de:04:6b:36:fd:b0:e3:08:16:
25:95:54:be:4b:e7:68:a6:a7:cb:2c:61:79:5b:5a:
b7:65:c4:77:06:07:94:da:c4:1e:4c:23:64:ea:17:
12:99:73:c2:ec:17:4e:5e:43:2c:4c:a2:54:74:02:
b9:d8:3e:3e:ed:0b:5b:9f:7a:6d:d6:d9:39:a7:1f:
ee:93:dd:07:31:d3:7f:26:12:76:08:e8:e3:4e:94:
7a:64:a5:c1:84:dd:88:bd:09:96:7a:95:64:63:24:
8d:da:74:6b:28:40:20:92:a4:ef:b3:ce:5b:56:9a:
19:d8:bc:fd:2d:c9:f6:18:01:32:f7:37:55:14:10:
db:bb:c5:b3:a8:ba:ed:ca:14:22:57:ed:c0:96:b1:
fd:46:e7:f4:cc:8e:c0:73:d3:95:63:71:ec:bd:b9:
44:ce:fd:78:e0:26:d3:14:39:fd:52:3f:ae:aa:b8:
c6:06:9b:94:bd:55:db:1d:40:15:93:00:32:4a:3a:
1f:4a:f1:a7:32:60:53:7d:50:cd:62:7f:bd:c0:ff:
26:85:4b:15:2b:81:c2:11:c5:30:26:c6:30:aa:14:
d0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CD:25:95:66:70:50:7B:F2:EC:1F:4F:A2:16:2C:AC:7E:39:B2:58
X509v3 Authority Key Identifier:
keyid:9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ac:62:de:78:21:77:9a:c9:f3:ca:ba:41:1e:13:56:54:80:
35:86:b6:b6:68:b9:27:de:c7:df:dc:09:bb:76:04:45:37:6b:
5d:e2:aa:e6:1f:b2:38:2a:1f:2e:1b:84:4d:36:28:13:81:e4:
ea:de:12:62:db:c8:c9:9c:43:bf:65:1a:c9:6a:bd:f6:04:f7:
33:83:5c:78:2f:6e:1d:b1:0a:de:b3:6e:dc:89:76:73:cd:98:
d0:60:b7:97:30:4e:71:02:82:19:5b:14:f1:2a:53:01:b9:f6:
0a:bf:55:96:36:c4:a7:a3:ba:0a:a7:30:7a:0f:ae:ab:8a:f5:
4c:de:2f:9a:a6:88:25:c3:78:e4:3e:78:5c:54:b5:0d:e2:fb:
20:fa:4b:ed:48:8d:61:5a:49:41:7a:1c:05:21:c7:b6:e6:b3:
f4:ae:5a:d7:69:59:db:15:17:3b:0d:c8:60:ea:64:3c:a1:fd:
ce:2a:72:35:f3:0a:a0:60:b1:f0:5c:79:2c:b6:cd:f3:9c:b0:
2e:c5:df:67:98:9d:e9:94:39:b7:66:fc:09:f5:b8:94:ca:69:
19:94:f0:f3:06:61:4a:17:a5:ea:73:d9:57:cd:d2:52:93:a2:
ec:a2:c7:66:65:54:b3:04:91:42:88:00:fc:9a:d1:f2:7d:53:
45:51:d3:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65IZ1qEUtQ2FVGww035sckMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzY0MGRhN2YxYmMyM2VkNDU5OWY4NGEwODUzYzgzOTlm
MzVkNzIwHhcNMjYwNjEyMDAwMDQ4WhcNMjYwNjEzMDAwMDQ4WjAzMTEwLwYDVQQD
EyhkYmNkMjU5NTY2NzA1MDdiZjJlYzFmNGZhMjE2MmNhYzdlMzliMjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FWVNrHsKI1kYTvrbKNZ/mxcjBMx
kR2ONe3T+1NagqtG1BfeBGs2/bDjCBYllVS+S+dopqfLLGF5W1q3ZcR3BgeU2sQe
TCNk6hcSmXPC7BdOXkMsTKJUdAK52D4+7Qtbn3pt1tk5px/uk90HMdN/JhJ2COjj
TpR6ZKXBhN2IvQmWepVkYySN2nRrKEAgkqTvs85bVpoZ2Lz9Lcn2GAEy9zdVFBDb
u8WzqLrtyhQiV+3AlrH9Ruf0zI7Ac9OVY3HsvblEzv144CbTFDn9Uj+uqrjGBpuU
vVXbHUAVkwAySjofSvGnMmBTfVDNYn+9wP8mhUsVK4HCEcUwJsYwqhTQVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvNJZVmcFB78uwfT6IWLKx+ObJYMB8GA1UdIwQY
MBaAFJ82QNp/G8I+1FmfhKCFPIOZ811yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnpaQTJuOGJ3ajdVV1otRW9JVThnNW56WFhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjQ3YzItZjEwYi00YTc3LThiMDMt
ZWRjMzM2NjUyZWQ3LzEvbnpaQTJuOGJ3ajdVV1otRW9JVThnNW56WFhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9iYjQ3YzItZjEwYi00YTc3LThiMDMtZWRjMzM2NjUyZWQ3
LzEvbnpaQTJuOGJ3ajdVV1otRW9JVThnNW56WFhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaqxi3ngh
d5rJ88q6QR4TVlSANYa2tmi5J97H39wJu3YERTdrXeKq5h+yOCofLhuETTYoE4Hk
6t4SYtvIyZxDv2UayWq99gT3M4NceC9uHbEK3rNu3Il2c82Y0GC3lzBOcQKCGVsU
8SpTAbn2Cr9VljbEp6O6Cqcweg+uq4r1TN4vmqaIJcN45D54XFS1DeL7IPpL7UiN
YVpJQXocBSHHtuaz9K5a12lZ2xUXOw3IYOpkPKH9zipyNfMKoGCx8Fx5LLbN85yw
LsXfZ5id6ZQ5t2b8CfW4lMppGZTw8wZhShel6nPZV83SUpOi7KLHZmVUswSRQogA
/JrR8n1TRVHTHQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:32:01 2026 by rpki-client