Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
File: NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft (raw, json)
Hash identifier: cOkjfR5NBKaiXOgI+sYRAk4ZoYfy8HlXIpDrfDPohr4=
Subject key identifier: 4E:C4:CE:34:96:D7:32:45:AF:44:38:D1:FA:5F:5E:C2:63:EF:51:7D
Authority key identifier: 35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80
Certificate issuer: /CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080
Certificate serial: 019EB9FDAEA814CF7184CF1A37951D897707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
Manifest number: 12BC
Signing time: Fri 12 Jun 2026 04:01:10 +0000
Manifest this update: Fri 12 Jun 2026 04:01:10 +0000
Manifest next update: Sat 13 Jun 2026 04:01:10 +0000
Files and hashes: 1: 0KXcrZCfQQCMUJ-Oh6SKIaYBOxQ.roa (hash: gzxW7vQjQaL5VdH2MwBQ91tWqChVH7iFvHzc5ySCf74=)
2: NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl (hash: TQz9Na5sKgywJE9Mgg2kVzdE8QIMYLUToVTvM71IiyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:fd:ae:a8:14:cf:71:84:cf:1a:37:95:1d:89:77:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080
Validity
Not Before: Jun 12 04:01:10 2026 GMT
Not After : Jun 13 04:01:10 2026 GMT
Subject: CN=4ec4ce3496d73245af4438d1fa5f5ec263ef517d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ba:0e:0a:4a:82:b0:c9:4b:7a:7a:93:0d:43:
b3:e6:5a:7f:80:3b:bc:86:94:e6:ab:ba:f1:3f:83:
5c:d9:c6:8e:f7:10:ea:e3:5c:03:45:79:07:70:3a:
c3:66:5b:16:cb:6f:4f:65:82:15:a4:35:cb:ce:e7:
22:4f:55:44:d6:74:21:4b:b4:6a:0c:80:71:34:0d:
ab:cc:47:4a:53:6c:67:bb:20:12:9b:b1:d8:59:ac:
de:f7:51:fb:2a:4b:0d:04:e8:af:24:c4:8b:67:95:
11:48:1a:a9:72:65:83:53:82:73:aa:2b:cd:ff:75:
d0:0e:1b:ce:92:de:10:0c:52:a2:3c:5b:f4:31:4b:
64:e9:9f:9a:66:a4:0a:77:f5:6c:8a:c8:d8:bc:32:
15:80:a9:bd:87:90:ef:f8:22:c9:ab:4f:b0:44:b6:
b6:d9:59:5d:b4:ac:1b:5e:07:92:5b:1e:fb:cd:10:
89:d9:5d:42:e2:98:d7:18:2d:a6:7a:b0:8e:66:89:
64:c1:e8:b0:91:b5:06:87:2b:d4:fe:f9:89:e8:d4:
72:37:25:35:86:e7:c7:26:af:16:5d:78:27:71:b4:
73:6a:8a:05:e3:cc:e6:d9:7c:72:de:fe:d1:f9:06:
85:9e:5d:09:3e:23:b2:8d:1f:ab:26:02:fc:47:11:
37:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C4:CE:34:96:D7:32:45:AF:44:38:D1:FA:5F:5E:C2:63:EF:51:7D
X509v3 Authority Key Identifier:
keyid:35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9c:46:27:8f:c4:56:b0:93:71:ec:c2:6c:84:95:be:b5:d4:
65:d2:c2:23:d3:8b:c5:18:23:ac:fd:91:e8:24:86:89:42:b5:
04:36:e0:68:26:8e:65:1e:50:f9:4d:3b:87:aa:46:ed:4d:fe:
7d:a0:4e:9a:00:70:4d:5c:c8:91:35:5b:a8:40:a8:c2:14:e4:
77:8f:25:3e:c8:f3:95:9e:77:57:fc:a5:8a:2a:26:cf:61:bb:
01:6a:d9:83:bb:b1:ec:28:2f:76:89:47:86:d7:fd:55:b0:fb:
c6:6d:06:3d:36:b5:77:d5:b9:f2:09:41:a0:f8:da:be:c7:5f:
e7:5e:9c:f7:2c:34:12:3d:77:62:11:81:71:51:16:ff:66:cc:
05:14:ea:55:78:aa:81:0c:ea:fa:be:07:1a:ac:07:93:6a:8c:
f3:98:bb:35:31:3e:0c:5a:83:27:cf:5f:ce:41:76:34:bd:34:
46:cc:4d:e1:52:bc:42:ce:e7:3f:70:71:52:d0:98:94:ee:17:
bc:f2:0e:36:d6:7d:01:3e:16:ab:99:72:39:6f:17:9c:bf:58:
e4:a9:6e:22:d8:21:25:19:9b:99:8b:c7:b6:e7:2d:f7:86:ca:
6f:a1:9b:16:a1:98:93:d0:d2:bd:55:f2:87:fd:d3:be:f9:61:
20:b5:f6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:58:53 2026 by rpki-client