Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
File: NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft (raw, json)
Hash identifier: xsIZGCMBKd6ROl1/Dif0YfX91p+yVCQAj0mnAw8f8Tk=
Subject key identifier: 65:0D:F7:09:08:2E:3E:9D:D8:6C:F7:84:96:2C:EB:A1:9F:60:83:74
Authority key identifier: 35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80
Certificate issuer: /CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080
Certificate serial: 019DD050A06E920381BAE1C372346A446FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
Manifest number: 1243
Signing time: Mon 27 Apr 2026 19:00:37 +0000
Manifest this update: Mon 27 Apr 2026 19:00:37 +0000
Manifest next update: Tue 28 Apr 2026 19:00:37 +0000
Files and hashes: 1: 0KXcrZCfQQCMUJ-Oh6SKIaYBOxQ.roa (hash: gzxW7vQjQaL5VdH2MwBQ91tWqChVH7iFvHzc5ySCf74=)
2: NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl (hash: XoiLbqa0Bn3IK63lR4+paR7ziFFMt5hPa+iERHx+EWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 19:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:50:a0:6e:92:03:81:ba:e1:c3:72:34:6a:44:6f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080
Validity
Not Before: Apr 27 19:00:37 2026 GMT
Not After : Apr 28 19:00:37 2026 GMT
Subject: CN=650df709082e3e9dd86cf784962ceba19f608374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:25:f8:49:1e:bd:82:07:27:ac:e7:51:c8:5d:
74:55:48:5e:c2:3b:2b:79:e9:3d:6a:42:08:34:54:
cf:63:6c:12:53:1a:ea:c3:9f:d6:6b:da:0e:73:20:
d7:7a:09:23:b8:1a:4f:34:35:db:5a:a9:4e:e4:79:
d4:92:07:74:bb:79:7d:3c:da:63:60:2c:06:bf:7d:
1d:7c:45:e6:76:80:3c:75:d6:3c:8b:54:51:7e:07:
8d:a2:02:4b:9e:46:21:58:8c:02:90:43:e6:c3:05:
0e:7b:75:bb:3f:aa:fd:05:79:5c:92:6a:dd:b2:2c:
76:d1:77:6b:87:4d:4b:c3:f6:f5:60:bc:cb:94:70:
1d:ba:e3:8d:7c:2c:95:40:9f:83:0e:a6:f8:6f:2f:
ec:0f:d5:ae:ae:95:d0:e0:52:e6:93:7c:44:2c:c8:
e9:42:98:a8:bf:49:3c:d6:89:ce:1e:b7:a7:ee:06:
99:63:ae:28:11:b5:82:a2:a1:d6:7f:76:06:73:20:
7d:18:7d:38:8b:3a:d1:0e:6d:2d:0d:a8:66:ac:33:
40:d4:db:5c:39:03:9c:9d:d9:87:02:02:8e:5d:92:
80:eb:1f:48:30:ef:70:89:b9:7c:99:62:fe:ba:46:
29:92:db:d9:40:31:c9:9c:e7:b2:1b:21:c9:c9:d0:
94:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0D:F7:09:08:2E:3E:9D:D8:6C:F7:84:96:2C:EB:A1:9F:60:83:74
X509v3 Authority Key Identifier:
keyid:35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:fd:3a:1d:91:14:82:40:ec:03:56:1b:32:31:95:5f:c0:fc:
7b:db:32:14:b3:0e:6d:05:cb:d3:19:fa:72:8c:dc:b6:fb:42:
1b:e7:37:fb:c3:d4:eb:ab:c4:1c:0f:fb:e5:3b:ea:22:7b:36:
0c:d8:b3:1e:ee:19:0e:98:4d:bc:46:63:be:e5:8e:cc:ac:36:
94:df:3d:7a:65:cd:fa:60:95:23:c0:02:f0:e1:41:64:f9:a2:
b1:ab:05:c0:d5:cb:29:8c:5b:61:d2:e9:a6:98:5f:ac:52:2c:
ea:e4:5f:6e:67:5e:10:9e:e8:3c:c2:8f:97:6a:d4:41:dc:95:
80:a3:6a:f3:c9:7a:52:6f:53:ee:c1:6d:a0:8b:b3:47:68:35:
81:94:92:13:7c:f1:6a:de:37:90:02:4d:c1:0e:0c:d5:30:82:
24:a6:05:1b:f2:ca:56:26:ef:e5:a5:c9:d3:cd:ed:93:62:eb:
b8:6a:66:21:14:94:9d:be:71:d2:4e:77:8b:f0:c2:90:59:eb:
16:e4:6e:f7:ea:95:9b:06:65:a9:14:99:8f:66:fb:1e:fe:a2:
1e:fc:e0:70:fc:f4:6a:38:ac:41:3b:d6:98:0b:0b:2b:d3:cd:
01:7d:3c:df:0a:ad:a6:24:71:d2:a1:59:37:ab:be:a8:b9:05:
3f:21:db:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 04:31:53 2026 by rpki-client