Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
File: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft (raw, json)
Hash identifier: i9R5BhGUTsOMRe0ySx+mHFUnS5O4Bw0F6OfF1hZ5i7c=
Subject key identifier: AB:EC:92:D6:B1:6B:94:1A:26:B0:A6:87:DD:08:35:2A:7A:A2:9F:41
Authority key identifier: 35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48
Certificate issuer: /CN=359ddc737684ce041754a95b56b5a076d8851048
Certificate serial: 01A03F04B404A786DECD262ABDBCAD2665B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
Manifest number: 19F5
Signing time: Wed 26 Aug 2026 17:01:07 +0000
Manifest this update: Wed 26 Aug 2026 17:01:07 +0000
Manifest next update: Thu 27 Aug 2026 17:01:07 +0000
Files and hashes: 1: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl (hash: BN3USp1yZc1MVKxmy8gR2EXaaBs1tYSxgACOcSATk34=)
2: XlSDqc4huU4T5pBV_rhm_39vHOA.asa (hash: y6lBqHLFbjHu8Lg/fkhH89s17tcMPV1sgWAsdIlsdfg=)
3: jMbXfYwQDm8CjXt4xxwnq70JuMY.roa (hash: FXNV3Qmyjy1ONKJk6QzKO0EfhVvk4xc2mM2Ngz7Mp/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:04:b4:04:a7:86:de:cd:26:2a:bd:bc:ad:26:65:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359ddc737684ce041754a95b56b5a076d8851048
Validity
Not Before: Aug 26 17:01:07 2026 GMT
Not After : Aug 27 17:01:07 2026 GMT
Subject: CN=abec92d6b16b941a26b0a687dd08352a7aa29f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:41:a4:d5:dc:ef:42:63:6c:ec:0c:e1:ba:8b:
25:bf:b7:62:27:0c:e6:c8:df:04:c3:f3:45:aa:e9:
f4:f0:4e:72:41:cc:46:4a:56:63:97:c1:81:56:42:
5a:63:d9:a6:8f:d2:93:c7:7a:a9:3a:f7:f7:dc:d1:
b2:e0:68:0e:09:9d:64:70:ce:3e:01:ef:fb:bb:fa:
19:fb:6e:65:73:e1:eb:d4:9f:78:eb:68:41:58:08:
7e:2b:c0:06:40:12:3a:af:8a:d9:3b:50:1c:47:38:
ca:e3:e0:2b:a0:f1:de:43:68:30:04:10:7e:d6:c8:
c9:80:41:3c:0f:46:0f:55:a6:98:52:63:13:7b:77:
75:8f:ab:07:17:d3:86:18:63:85:34:b1:0f:20:c9:
e7:cf:50:2a:40:3b:b9:37:a8:1f:db:61:5a:10:21:
5a:8b:04:07:c1:48:54:d1:e1:2a:75:b9:12:42:05:
c0:40:c7:52:59:02:90:9f:68:88:ee:99:98:ae:cc:
8b:a9:1d:53:ec:20:90:e8:84:91:7a:8c:6c:78:d3:
f8:cc:1b:dd:43:63:a7:b4:e6:cf:3c:57:3c:f4:bf:
ab:f1:2f:ae:2d:5b:6b:f2:8c:20:a7:62:44:81:25:
a7:0f:3a:7f:e4:89:46:b4:eb:05:97:d6:ed:e6:4a:
c4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:EC:92:D6:B1:6B:94:1A:26:B0:A6:87:DD:08:35:2A:7A:A2:9F:41
X509v3 Authority Key Identifier:
keyid:35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f5:34:bb:c5:fd:5b:88:b9:e2:5e:75:71:47:f5:da:6a:c3:
b4:5f:f1:00:34:09:68:82:38:52:eb:cf:f4:19:ed:69:9f:fb:
48:b8:9d:66:7f:f1:5a:71:85:80:02:ac:32:4e:49:8c:fd:a4:
a2:29:65:7a:1d:d1:7c:b9:6b:51:ad:55:f0:7f:a4:69:57:2f:
1d:f2:e4:b5:b3:15:69:95:b7:cf:f6:0b:14:76:ff:c1:df:a3:
0c:0c:d1:94:29:56:ab:ee:83:7f:3b:eb:e1:97:62:87:18:c9:
ba:f2:30:12:a6:ce:13:e7:e2:04:f8:64:62:4e:e7:02:ac:01:
10:2f:95:f1:62:d1:34:56:56:03:f4:68:6a:82:30:68:b2:40:
6c:8d:2e:55:58:0a:92:7a:5a:7f:3c:fc:43:b0:4d:c1:8e:64:
7a:0f:45:d1:79:2d:93:f9:9e:42:12:e2:9e:9c:60:aa:ec:c3:
14:b6:17:f0:db:c0:4d:25:e4:4e:94:8f:f5:d4:8e:b0:b9:ec:
29:2a:70:de:31:2d:06:78:ba:61:79:78:15:3b:2c:0e:fc:73:
b2:ab:ca:70:42:2b:eb:a3:15:2e:4e:0a:21:8e:eb:91:d4:75:
1b:e2:8c:1b:d5:7e:74:87:90:77:7d:ed:04:71:72:00:d7:15:
a9:f4:89:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA/BLQEp4bezSYqvbytJmW5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OWRkYzczNzY4NGNlMDQxNzU0YTk1YjU2YjVhMDc2ZDg4
NTEwNDgwHhcNMjYwODI2MTcwMTA3WhcNMjYwODI3MTcwMTA3WjAzMTEwLwYDVQQD
EyhhYmVjOTJkNmIxNmI5NDFhMjZiMGE2ODdkZDA4MzUyYTdhYTI5ZjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUGk1dzvQmNs7Azhuoslv7diJwzm
yN8Ew/NFqun08E5yQcxGSlZjl8GBVkJaY9mmj9KTx3qpOvf33NGy4GgOCZ1kcM4+
Ae/7u/oZ+25lc+Hr1J9462hBWAh+K8AGQBI6r4rZO1AcRzjK4+AroPHeQ2gwBBB+
1sjJgEE8D0YPVaaYUmMTe3d1j6sHF9OGGGOFNLEPIMnnz1AqQDu5N6gf22FaECFa
iwQHwUhU0eEqdbkSQgXAQMdSWQKQn2iI7pmYrsyLqR1T7CCQ6ISReoxseNP4zBvd
Q2OntObPPFc89L+r8S+uLVtr8owgp2JEgSWnDzp/5IlGtOsFl9bt5krEJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvsktaxa5QaJrCmh90INSp6op9BMB8GA1UdIwQY
MBaAFDWd3HN2hM4EF1SpW1a1oHbYhRBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlozY2MzYUV6Z1FYVktsYlZyV2dkdGlGRUVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iMmUzZDMtMzJlZC00YmIyLWFjZjYt
MjA0MTQ4YzVhMDE3LzEvTlozY2MzYUV6Z1FYVktsYlZyV2dkdGlGRUVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9iMmUzZDMtMzJlZC00YmIyLWFjZjYtMjA0MTQ4YzVhMDE3
LzEvTlozY2MzYUV6Z1FYVktsYlZyV2dkdGlGRUVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPvU0u8X9
W4i54l51cUf12mrDtF/xADQJaII4UuvP9BntaZ/7SLidZn/xWnGFgAKsMk5JjP2k
oilleh3RfLlrUa1V8H+kaVcvHfLktbMVaZW3z/YLFHb/wd+jDAzRlClWq+6Dfzvr
4ZdihxjJuvIwEqbOE+fiBPhkYk7nAqwBEC+V8WLRNFZWA/RoaoIwaLJAbI0uVVgK
knpafzz8Q7BNwY5keg9F0Xktk/meQhLinpxgquzDFLYX8NvATSXkTpSP9dSOsLns
KSpw3jEtBni6YXl4FTssDvxzsqvKcEIr66MVLk4KIY7rkdR1G+KMG9V+dIeQd33t
BHFyANcVqfSJcQ==
-----END CERTIFICATE-----
Generated at Wed Aug 26 20:54:35 2026 by rpki-client