Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
File: nz7CHhDzZG5NwOI_X37ERQFWDeM.mft (raw, json)
Hash identifier: wlWF8ADT9q5rMjOJRmGwnWOTONxSjm9pxfCQhZebzZ4=
Subject key identifier: 04:5B:AE:4C:56:55:24:2A:07:D3:56:C3:06:33:76:59:68:62:61:30
Authority key identifier: 9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
Certificate issuer: /CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Certificate serial: 01A02EB622668E31E30F834246265AA2F727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
Manifest number: 09EA
Signing time: Sun 23 Aug 2026 13:01:23 +0000
Manifest this update: Sun 23 Aug 2026 13:01:23 +0000
Manifest next update: Mon 24 Aug 2026 13:01:23 +0000
Files and hashes: 1: nUE0Oddv4YkeQI7iXvreM5ZLtJg.roa (hash: e35k/hWFhNoP6OXE0gOQ2vpFvd0hf+wf6J6udXQDs0w=)
2: nz7CHhDzZG5NwOI_X37ERQFWDeM.crl (hash: LYeqPXOTkJDz09y8S99dSazxYITHKfce52HsWPygiQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Aug 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2e:b6:22:66:8e:31:e3:0f:83:42:46:26:5a:a2:f7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Validity
Not Before: Aug 23 13:01:23 2026 GMT
Not After : Aug 24 13:01:23 2026 GMT
Subject: CN=045bae4c5655242a07d356c30633765968626130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:41:ee:93:3d:a5:93:e7:3d:66:66:2e:ed:a2:
85:f8:13:64:bd:1a:43:85:29:04:d8:f9:29:3b:c8:
37:3e:55:02:b8:fe:05:b5:22:37:68:03:f5:bd:5d:
13:3c:81:87:16:4d:da:19:86:26:b0:69:6b:07:03:
d2:76:14:03:5e:d5:3a:4c:f7:7d:83:62:82:bd:b0:
14:9b:fd:a3:e4:79:81:ca:4d:9b:a6:18:38:42:ab:
be:5d:44:f3:49:de:76:94:f0:37:19:ae:4e:7a:c0:
b8:7e:25:52:8d:ab:00:12:e9:af:66:30:4d:75:75:
56:83:95:44:9a:a0:2d:1a:99:22:fe:09:8c:41:bf:
ba:8d:68:6c:cc:a8:6a:0b:08:93:f8:e1:79:b1:fa:
eb:34:06:ad:04:56:9a:d7:ff:b5:66:22:b4:f2:69:
b1:1b:26:a8:48:9e:8f:8f:8b:11:84:04:86:3a:86:
73:f8:e2:08:46:d3:df:e0:41:f0:f3:cd:9e:79:c7:
19:cb:3b:97:c1:1e:04:7f:d5:78:a4:59:a2:e9:1e:
5e:cd:03:98:8e:54:22:76:81:77:ff:13:9d:53:3e:
63:1a:e2:2f:d0:e7:22:8f:77:9a:81:a9:7f:9e:de:
5c:14:19:af:f7:ff:04:63:0d:0f:01:2a:50:50:b1:
9e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5B:AE:4C:56:55:24:2A:07:D3:56:C3:06:33:76:59:68:62:61:30
X509v3 Authority Key Identifier:
keyid:9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:61:f6:dd:f4:fb:76:43:0b:e3:06:8b:af:48:38:fc:29:6d:
55:03:a6:20:d2:39:cb:74:fc:19:23:1c:d0:d0:38:8c:f8:03:
77:3c:f8:9c:25:c1:2e:80:ff:bc:d2:d1:55:6f:dd:fe:02:a2:
e5:54:74:2e:4c:7e:c7:07:92:ec:7f:3e:46:d2:81:9b:f9:df:
00:02:79:90:d1:ca:99:e0:db:4d:34:1f:3b:97:16:4a:dc:cd:
53:73:d4:05:85:22:9a:91:87:dc:6d:1e:29:68:66:35:70:0a:
03:26:01:26:ca:06:ff:fd:17:68:21:a6:28:8c:d2:ba:f9:2c:
72:db:9f:c5:4c:1b:d3:8d:fb:f7:fa:59:fa:4d:c1:4b:63:e1:
2d:d4:75:0f:41:1d:28:ff:2c:c9:25:74:6c:09:5e:65:4a:c1:
fe:c8:10:5a:e3:1f:0b:f6:fe:b3:db:53:f9:bd:8b:33:b5:66:
11:b0:c3:fe:11:f5:1f:69:3c:33:5e:23:9b:ae:98:d5:e2:25:
23:15:8f:56:7c:a8:84:e2:6f:2a:a0:29:15:a9:23:1a:57:06:
7b:99:4f:1a:a7:50:25:67:77:5f:67:ec:fa:bc:3e:85:e3:c1:
aa:38:65:c6:e7:4c:0f:eb:65:51:bb:6c:51:77:be:0b:4b:94:
80:83:ca:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 20:25:34 2026 by rpki-client