Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
File: nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft (raw, json)
Hash identifier: KxWbGAvG+I06SeYGCBwF201KtSmSC9SxU2SOBq1KYxs=
Subject key identifier: C3:E1:FD:E0:A4:4C:90:66:7C:B7:1C:A0:AB:E9:36:DC:C7:29:FF:E9
Authority key identifier: 9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72
Certificate issuer: /CN=9f3640da7f1bc23ed4599f84a0853c8399f35d72
Certificate serial: 01A17BF23133CD111930A98B65CA33FB2A2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
Manifest number: 0C0C
Signing time: Tue 27 Oct 2026 06:00:32 +0000
Manifest this update: Tue 27 Oct 2026 06:00:32 +0000
Manifest next update: Wed 28 Oct 2026 06:00:32 +0000
Files and hashes: 1: NIYrG37trab2P9JVD0eE6NO-0Dk.roa (hash: tSXqLOKf3W/YzIEC+Y4rvZIML+H/1ngQ/p6IkWH1HL8=)
2: nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl (hash: nEYK14iDS5xVrQUhxT3ayBk1vDkMYr0MJhxdcrfbrIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:31:33:cd:11:19:30:a9:8b:65:ca:33:fb:2a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3640da7f1bc23ed4599f84a0853c8399f35d72
Validity
Not Before: Oct 27 06:00:32 2026 GMT
Not After : Oct 28 06:00:32 2026 GMT
Subject: CN=c3e1fde0a44c90667cb71ca0abe936dcc729ffe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fa:ec:8c:24:3f:2f:57:8c:cf:0c:29:dd:09:
64:23:e6:78:b2:d5:4c:08:0b:d2:fc:46:50:ad:06:
85:8a:5e:87:d3:5c:20:a4:a3:7d:49:e9:83:18:8a:
a7:f3:ea:90:d0:80:00:64:a8:35:64:2c:02:57:0a:
92:3f:07:3f:dd:5e:0b:d0:fb:9b:1c:9a:50:94:24:
f0:4c:66:66:6d:a8:fb:3c:c1:b6:b0:32:ef:e4:c3:
c9:9a:9b:93:06:4c:f7:f5:d9:b0:2c:76:db:df:b9:
99:0c:29:a9:07:4b:65:54:88:ee:80:1b:cb:4e:07:
82:c9:41:5e:49:d9:0d:10:2e:d2:5b:c8:97:fd:4f:
00:49:b0:f1:52:9b:d4:6b:5e:2c:8a:bc:60:6a:fa:
77:30:a8:8b:91:0b:0e:09:5b:bf:24:87:15:f3:67:
8c:c3:74:d5:3a:e8:ab:6e:41:cb:b9:e4:e3:6f:e0:
24:98:8d:f3:de:6b:de:29:70:b9:2d:db:a3:30:fd:
0c:1c:ce:fc:23:7d:60:d8:43:2c:a6:bc:8e:1a:35:
ec:a5:77:6e:aa:39:7a:13:47:5a:ad:44:6f:f0:13:
a2:b4:76:87:48:fe:8a:eb:25:c4:bc:71:1d:2a:61:
8c:e9:60:01:d9:71:09:c4:d4:0b:ac:07:d6:f6:fa:
92:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E1:FD:E0:A4:4C:90:66:7C:B7:1C:A0:AB:E9:36:DC:C7:29:FF:E9
X509v3 Authority Key Identifier:
keyid:9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:17:c5:9a:1f:d8:86:5e:ab:5d:1d:a9:a5:36:14:4e:eb:12:
55:f4:18:c0:6b:36:68:6e:85:c7:22:15:b4:02:2f:29:4e:b1:
e1:b7:e9:02:94:01:5c:7e:8c:9c:07:c2:7e:79:95:a6:ea:00:
ce:1b:a3:25:7d:65:a3:2d:48:df:4d:3a:a3:1e:ae:6d:a2:ba:
8a:02:26:89:fc:8e:dd:50:e5:55:bd:56:7b:a5:ff:01:fe:d9:
65:4e:71:1c:a3:d3:8e:11:c0:71:e5:3a:c7:9c:e6:3e:46:c9:
f9:c2:18:91:c5:0c:06:f8:cd:d0:44:5a:44:6a:d8:46:e4:06:
7e:2d:95:b5:d1:56:fe:f2:5e:5e:fe:05:00:35:bf:c8:75:a1:
b2:49:ca:82:69:4d:c8:a7:cd:5f:bb:f5:82:e3:d7:e6:9f:09:
74:91:de:73:4a:da:57:e7:ba:b1:b7:88:76:c9:61:2b:cb:e8:
cf:61:86:6f:b3:10:76:98:b6:c8:b9:f4:1c:8e:7f:8f:65:5a:
85:13:6e:1c:89:4f:79:d7:b6:ea:52:5b:46:a8:3f:7a:9a:28:
d8:8e:7e:d5:63:91:88:90:b6:51:da:71:a0:6b:6e:cc:39:3a:
06:d0:2b:78:7f:22:e4:7d:29:e9:42:52:52:5e:83:14:a5:02:
c8:0e:ed:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF78jEzzREZMKmLZcoz+yoqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzY0MGRhN2YxYmMyM2VkNDU5OWY4NGEwODUzYzgzOTlm
MzVkNzIwHhcNMjYxMDI3MDYwMDMyWhcNMjYxMDI4MDYwMDMyWjAzMTEwLwYDVQQD
EyhjM2UxZmRlMGE0NGM5MDY2N2NiNzFjYTBhYmU5MzZkY2M3MjlmZmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvrsjCQ/L1eMzwwp3QlkI+Z4stVM
CAvS/EZQrQaFil6H01wgpKN9SemDGIqn8+qQ0IAAZKg1ZCwCVwqSPwc/3V4L0Pub
HJpQlCTwTGZmbaj7PMG2sDLv5MPJmpuTBkz39dmwLHbb37mZDCmpB0tlVIjugBvL
TgeCyUFeSdkNEC7SW8iX/U8ASbDxUpvUa14sirxgavp3MKiLkQsOCVu/JIcV82eM
w3TVOuirbkHLueTjb+AkmI3z3mveKXC5LdujMP0MHM78I31g2EMspryOGjXspXdu
qjl6E0darURv8BOitHaHSP6K6yXEvHEdKmGM6WAB2XEJxNQLrAfW9vqS3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPh/eCkTJBmfLccoKvpNtzHKf/pMB8GA1UdIwQY
MBaAFJ82QNp/G8I+1FmfhKCFPIOZ811yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnpaQTJuOGJ3ajdVV1otRW9JVThnNW56WFhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjQ3YzItZjEwYi00YTc3LThiMDMt
ZWRjMzM2NjUyZWQ3LzEvbnpaQTJuOGJ3ajdVV1otRW9JVThnNW56WFhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9iYjQ3YzItZjEwYi00YTc3LThiMDMtZWRjMzM2NjUyZWQ3
LzEvbnpaQTJuOGJ3ajdVV1otRW9JVThnNW56WFhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchfFmh/Y
hl6rXR2ppTYUTusSVfQYwGs2aG6FxyIVtAIvKU6x4bfpApQBXH6MnAfCfnmVpuoA
zhujJX1loy1I3006ox6ubaK6igImifyO3VDlVb1We6X/Af7ZZU5xHKPTjhHAceU6
x5zmPkbJ+cIYkcUMBvjN0ERaRGrYRuQGfi2VtdFW/vJeXv4FADW/yHWhsknKgmlN
yKfNX7v1guPX5p8JdJHec0raV+e6sbeIdslhK8voz2GGb7MQdpi2yLn0HI5/j2Va
hRNuHIlPede26lJbRqg/epoo2I5+1WORiJC2UdpxoGtuzDk6BtAreH8i5H0p6UJS
Ul6DFKUCyA7tDg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 11:11:50 2026 by rpki-client