Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
File: NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft (raw, json)
Hash identifier: +oWx9ko3LYDc+bxTbIuduBVwCSCQLv/kAjY9+rv5NmA=
Subject key identifier: 29:A6:F4:A4:F4:CA:82:BC:52:0F:F8:F7:24:18:04:2D:F0:20:C3:E5
Authority key identifier: 35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80
Certificate issuer: /CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080
Certificate serial: 01A17ADFCFDA95E5A49D73161246C48D1635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
Manifest number: 1429
Signing time: Tue 27 Oct 2026 01:00:50 +0000
Manifest this update: Tue 27 Oct 2026 01:00:50 +0000
Manifest next update: Wed 28 Oct 2026 01:00:50 +0000
Files and hashes: 1: 0KXcrZCfQQCMUJ-Oh6SKIaYBOxQ.roa (hash: gzxW7vQjQaL5VdH2MwBQ91tWqChVH7iFvHzc5ySCf74=)
2: NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl (hash: WPfaSo8nr/DcLj1EWyrjdqe/u5AVOMZtPLC+xxgTILQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:df:cf:da:95:e5:a4:9d:73:16:12:46:c4:8d:16:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080
Validity
Not Before: Oct 27 01:00:50 2026 GMT
Not After : Oct 28 01:00:50 2026 GMT
Subject: CN=29a6f4a4f4ca82bc520ff8f72418042df020c3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:65:91:49:21:f4:44:c5:65:5c:96:ec:38:79:
9b:6c:bb:dd:80:55:a0:84:6c:93:ac:08:af:ca:d2:
ee:42:60:16:1a:d5:c9:fb:b7:ce:8f:b8:88:db:c7:
e5:80:51:36:b9:62:a9:3a:e3:fb:f4:77:51:d3:6f:
9b:5b:e2:5a:bb:73:0f:0c:96:55:ab:11:f3:95:39:
85:76:7a:7f:77:5b:03:b9:88:12:6c:3d:9b:e5:f1:
5d:d7:63:6a:c6:1d:3a:91:15:5c:48:77:5d:fe:e0:
37:41:ea:51:51:2a:25:ff:9f:b1:10:b1:14:69:c9:
a6:ab:d5:16:60:f9:a9:53:6c:fb:b8:b7:d6:66:fe:
82:e2:cd:54:26:ff:c0:e7:6d:7c:e8:5c:0a:b0:91:
11:4a:15:a4:cf:3e:e0:c9:07:f9:e1:02:b2:52:e1:
6f:6f:b8:9a:b8:f8:6d:94:e5:83:37:83:8f:f3:46:
e3:e0:fa:25:1f:d2:60:f1:59:e3:7e:98:19:97:d0:
12:55:d6:1c:24:30:e0:12:a5:f5:c4:bf:80:5f:a8:
4f:d6:5e:19:b4:ba:25:ec:26:b1:a5:f8:99:93:ce:
68:b1:65:1b:eb:4b:27:19:8a:ba:45:8f:50:42:dd:
cd:b8:a6:bb:fc:83:d7:6f:80:0c:14:e3:0b:a0:17:
dc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A6:F4:A4:F4:CA:82:BC:52:0F:F8:F7:24:18:04:2D:F0:20:C3:E5
X509v3 Authority Key Identifier:
keyid:35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:af:a3:f6:cb:b6:18:64:cd:69:8f:b9:05:ec:e4:c7:29:ba:
f2:05:54:45:59:50:e4:9f:d3:bd:a4:42:e9:33:8b:34:59:01:
f8:68:ec:54:95:9d:60:cb:57:c8:1a:af:cf:35:e9:aa:42:42:
20:f2:68:62:65:79:1d:d7:24:0d:e5:02:a0:1e:54:5a:92:15:
3b:bd:56:8e:38:a2:7a:a5:d5:80:74:c6:d1:b5:84:d7:40:b0:
1d:af:16:de:d4:d2:a7:fb:e7:e9:12:45:47:3e:b3:bc:73:9d:
ce:a4:55:17:b4:08:15:04:d1:36:7d:7e:12:de:f5:52:1b:34:
ad:5a:44:48:8b:c9:3d:94:22:4a:3f:f8:f0:2e:f0:63:c1:ee:
f1:2f:cd:3e:3e:58:54:56:cd:d9:0d:92:93:67:85:d7:3e:e3:
9f:df:15:48:df:5e:bd:93:28:cd:ff:8d:1d:30:40:20:62:9d:
95:ce:33:d6:c6:de:72:f5:2a:fb:fb:96:c7:fa:c5:64:ec:83:
77:6a:43:8e:34:92:b9:08:32:13:68:9c:9e:ee:3d:ee:f6:a0:
0b:e3:6d:a9:9a:89:37:cb:95:38:9f:e2:2a:2e:26:f6:5c:2e:
d0:b9:df:72:a9:22:fc:59:21:57:13:5e:08:f1:0b:2c:d8:bd:
7b:04:82:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:46:01 2026 by rpki-client