Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
File: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft (raw, json)
Hash identifier: fUMUw4qU7TCtl5l7CcI9/qiwfGQGRKZMxJQEwk3UZIk=
Subject key identifier: 66:6C:53:CA:50:32:A9:A8:75:67:57:9E:1E:F3:FA:99:E1:93:91:54
Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Certificate serial: 01A13E9435CA756DEED1FA331BA3C022FE77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
Manifest number: 1AB2
Signing time: Thu 15 Oct 2026 08:01:02 +0000
Manifest this update: Thu 15 Oct 2026 08:01:02 +0000
Manifest next update: Fri 16 Oct 2026 08:01:02 +0000
Files and hashes: 1: A3pW4f2Q0QCXW1ITF5-7J2AGJB0.roa (hash: 3GwoRHIKkL+M5kmrRcgNaVleZoRm14fgCgWnCbfdVU4=)
2: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl (hash: qGqb+1KLsCE+8gQlTVczU4KgdZGpaYWdxVPXx3F+mXU=)
3: YsmjC0C0fqf9CY4wLhiPtFlxZEw.roa (hash: N0lxxgZ/gBnqbm0d/xg3YbjefGLIyBpN9+tqlNMsVRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:35:ca:75:6d:ee:d1:fa:33:1b:a3:c0:22:fe:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Validity
Not Before: Oct 15 08:01:02 2026 GMT
Not After : Oct 16 08:01:02 2026 GMT
Subject: CN=666c53ca5032a9a87567579e1ef3fa99e1939154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:76:37:f8:82:17:90:8d:24:83:75:2d:4c:11:
ab:e1:f4:d4:49:f7:3b:67:c0:cf:69:40:0d:25:39:
fe:9a:c1:d1:d6:b2:c8:e7:13:30:00:c3:ab:bb:4d:
7c:0d:bd:76:f7:45:3d:68:47:36:fa:82:1b:26:91:
3f:8a:f4:8e:bd:f3:78:31:46:5d:13:4d:fb:57:58:
38:d4:50:50:6f:5e:7d:8a:b5:a0:5d:ca:2f:47:a8:
8f:a5:42:a3:9b:5a:9a:25:b3:9c:a4:d0:5f:fd:42:
7f:fd:35:08:60:a5:e2:1e:39:57:eb:37:c9:f0:a3:
e6:27:ca:f0:16:38:fa:2c:c6:78:71:c4:95:49:f8:
e8:5a:08:d7:6a:66:1d:99:3c:eb:03:56:55:b0:5d:
44:8c:df:da:e9:05:33:15:a7:38:69:8b:db:24:73:
de:09:3d:67:65:7c:82:b9:71:eb:d9:96:23:31:36:
1f:ae:7b:0e:dd:8b:9e:a6:2b:40:d3:04:90:8d:4c:
39:53:c8:7d:18:0d:8d:1a:8f:b9:ba:51:de:5b:5c:
47:5c:f2:44:c0:35:74:10:7a:51:21:e3:90:23:30:
05:17:bb:61:45:de:2c:73:dc:ee:07:63:8d:15:14:
6d:16:4d:57:09:c9:9b:53:bb:cf:77:9b:20:ff:85:
88:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6C:53:CA:50:32:A9:A8:75:67:57:9E:1E:F3:FA:99:E1:93:91:54
X509v3 Authority Key Identifier:
keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:3a:bb:99:cf:f1:2c:44:1d:81:3d:35:58:10:0b:b6:04:49:
f5:f6:bf:a8:a5:62:57:93:f6:db:7c:f4:93:87:5f:17:59:06:
a3:a6:70:9c:af:b0:fa:01:1d:b1:40:a8:d9:32:b3:3e:f6:33:
51:29:4a:d1:11:2e:c6:57:2c:a1:2d:fa:76:1f:f9:a4:48:08:
a7:f7:32:bd:64:b2:7d:2e:29:cb:b2:20:00:97:74:5b:9e:46:
12:a6:85:47:6c:7c:46:37:80:94:9d:a0:e9:53:f1:7b:57:44:
f9:30:d3:e7:87:16:c2:e3:7a:be:94:39:cf:78:10:8b:fd:13:
f8:9d:db:6a:32:78:c0:3a:2f:9f:9a:a7:82:7b:3a:45:5d:e9:
db:2c:61:68:68:11:d0:6d:d5:a2:ae:9c:06:06:30:83:96:e0:
b1:94:ae:67:5c:c0:dd:c8:4c:df:3f:77:45:03:4f:55:5a:19:
73:22:2e:bd:1b:67:65:de:7b:a5:6d:23:f9:ca:c0:df:90:62:
2d:32:f8:6f:e1:de:12:5d:34:8e:d1:55:c6:2b:92:22:1b:36:
bf:4e:34:7c:30:11:41:2f:c9:6b:41:b9:7e:2f:7f:aa:aa:2d:
f8:1e:17:50:00:63:2a:21:af:4e:2f:73:af:ac:f7:2b:d4:72:
25:a6:ca:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:58:08 2026 by rpki-client