Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
File: nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft (raw, json)
Hash identifier: 9CkSGRds/g21HCE4/aQu2Hlt2FTBVbSRmnXFkofLp18=
Subject key identifier: 1E:D1:A0:E0:69:CF:69:74:20:01:24:05:35:0B:E5:D6:BF:01:3E:79
Authority key identifier: 9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72
Certificate issuer: /CN=9f3640da7f1bc23ed4599f84a0853c8399f35d72
Certificate serial: 019D38D2BF8C7308A512D000D1FAFA838A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
Manifest number: 09D7
Signing time: Sun 29 Mar 2026 09:00:28 +0000
Manifest this update: Sun 29 Mar 2026 09:00:28 +0000
Manifest next update: Mon 30 Mar 2026 09:00:28 +0000
Files and hashes: 1: NIYrG37trab2P9JVD0eE6NO-0Dk.roa (hash: tSXqLOKf3W/YzIEC+Y4rvZIML+H/1ngQ/p6IkWH1HL8=)
2: nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl (hash: +tGxVqXXWDbDEzzMdQns42PVKZ9e1THSeKFn1ENWpjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:bf:8c:73:08:a5:12:d0:00:d1:fa:fa:83:8a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3640da7f1bc23ed4599f84a0853c8399f35d72
Validity
Not Before: Mar 29 09:00:28 2026 GMT
Not After : Mar 30 09:00:28 2026 GMT
Subject: CN=1ed1a0e069cf697420012405350be5d6bf013e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:15:7f:c9:ea:c6:5a:e0:20:18:1c:75:76:85:
61:4e:29:b8:80:13:5a:04:20:ad:66:2b:6f:6c:53:
d5:bd:be:f9:73:17:01:64:46:e4:15:8e:35:0c:5c:
97:4e:e6:0c:cb:88:d2:cc:69:48:9f:62:f7:e7:45:
87:ca:5a:cb:a8:8c:8b:31:eb:1b:80:8a:2f:8c:1d:
ba:4a:32:ac:dd:bd:3d:17:44:48:8e:60:d0:d5:5b:
97:31:d7:eb:16:f5:0a:c1:e6:da:12:ca:3b:ed:09:
27:31:be:fd:7b:c6:d8:02:e7:89:c0:ad:db:46:9d:
b1:99:a9:78:d3:47:c2:4a:8d:26:13:de:1b:96:4e:
8d:96:a8:4b:c3:28:fd:6f:8f:35:1e:e6:02:2f:84:
9d:6e:36:59:a0:24:57:12:27:78:74:43:39:92:c6:
44:b6:47:bc:6f:31:0a:7f:4d:62:e6:f6:83:c5:fe:
34:b6:ce:84:56:62:aa:6f:53:54:f3:4c:8a:e3:e7:
51:a2:37:49:07:de:41:8a:36:41:8a:c7:de:6d:68:
9a:f4:1d:e2:7a:0e:ac:2c:de:42:98:21:d7:05:30:
eb:a5:d2:ab:b7:6a:bd:34:ea:08:55:06:a5:41:ea:
74:36:34:84:ba:50:36:69:32:cc:c5:02:23:84:18:
fa:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D1:A0:E0:69:CF:69:74:20:01:24:05:35:0B:E5:D6:BF:01:3E:79
X509v3 Authority Key Identifier:
keyid:9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:98:54:dc:54:6a:ae:5c:89:c0:0b:b1:11:71:93:3b:ea:6d:
53:1e:b5:b9:24:4e:d2:b3:7e:f8:a0:b9:f6:fa:24:7d:f7:f7:
e5:38:e4:f2:41:fd:3d:2a:a6:ce:89:a0:1e:2b:28:27:e2:47:
c8:24:51:5a:ee:2a:4c:59:bb:57:e1:e4:88:5d:7f:fb:4b:97:
a4:80:3c:31:39:f5:30:52:c2:40:0b:a4:44:18:81:4e:c4:cb:
55:6e:15:1a:df:7b:9a:f2:39:8b:3f:50:f8:88:2d:34:91:d8:
b6:ed:ad:28:03:44:6a:df:a7:3a:1d:10:c1:80:b0:e9:76:e6:
1c:3e:3a:f8:56:19:91:07:98:25:58:17:1e:6e:5c:d2:14:b0:
6e:b3:0a:55:eb:f8:ef:3a:8d:1c:ee:92:1f:1c:ff:ec:2c:5c:
40:fd:09:a3:39:f6:2f:35:27:c9:1f:ac:c2:83:98:73:f2:c5:
40:56:9a:ae:3c:17:4a:78:01:4d:6b:54:df:80:70:a0:ac:55:
99:e9:20:dc:cc:dd:7a:b5:63:b3:fd:33:12:13:6a:9e:69:41:
5d:3c:c1:09:dc:8e:48:94:b3:f5:70:9f:e2:d0:53:ff:d2:f2:
68:43:b1:73:17:42:f8:5e:9a:06:26:30:a2:8d:ce:3a:49:f9:
3b:28:f7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:11:51 2026 by rpki-client