Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
File: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft (raw, json)
Hash identifier: xprynmtdDitDuzcmTnGJEWSjlnkQuumg5OPwUq2r1us=
Subject key identifier: 0F:36:B7:E1:96:2F:1E:75:48:43:78:29:9C:55:D4:6D:64:B6:E9:95
Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Certificate serial: 01A1464D64A8E67DBA18F4C9D9A96AF0D170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
Manifest number: 1AB6
Signing time: Fri 16 Oct 2026 20:00:39 +0000
Manifest this update: Fri 16 Oct 2026 20:00:39 +0000
Manifest next update: Sat 17 Oct 2026 20:00:39 +0000
Files and hashes: 1: A3pW4f2Q0QCXW1ITF5-7J2AGJB0.roa (hash: 3GwoRHIKkL+M5kmrRcgNaVleZoRm14fgCgWnCbfdVU4=)
2: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl (hash: QGl2dcOMvSp4Au5L+r3Zz9AehN6HgSz1swdB9ng3oAE=)
3: YsmjC0C0fqf9CY4wLhiPtFlxZEw.roa (hash: N0lxxgZ/gBnqbm0d/xg3YbjefGLIyBpN9+tqlNMsVRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:4d:64:a8:e6:7d:ba:18:f4:c9:d9:a9:6a:f0:d1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Validity
Not Before: Oct 16 20:00:39 2026 GMT
Not After : Oct 17 20:00:39 2026 GMT
Subject: CN=0f36b7e1962f1e75484378299c55d46d64b6e995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:64:f2:b9:d0:76:92:1c:3e:22:86:6f:7e:e0:
30:3e:14:c0:2d:ca:b4:20:92:62:9a:c1:b5:dd:f6:
58:75:d9:a6:c4:97:6a:39:40:36:81:4c:c0:6b:cc:
2f:74:33:95:d5:15:1e:f2:8d:37:40:bf:e5:3b:87:
e5:6a:fb:b7:d8:6f:04:9a:8f:b4:8d:16:65:f6:87:
9e:6c:f3:91:20:87:11:b4:d0:01:7b:4b:f2:c9:58:
ef:09:85:3b:cd:95:76:a8:d9:db:82:6c:fb:42:7b:
c6:07:05:2f:bf:c3:75:8f:a0:6d:2a:52:b3:55:d5:
1e:57:70:6f:88:b4:d9:5f:ff:6c:83:ef:4a:94:d4:
ed:70:d3:f9:13:1f:5c:e4:01:66:2f:c5:c0:1c:79:
b4:f0:d1:98:e7:6e:93:9e:6a:97:2b:2f:a6:7f:89:
d8:6a:11:2f:00:aa:dd:71:92:05:52:1f:16:c0:1f:
f4:b2:3b:7a:c3:78:56:48:4b:d5:30:70:7f:77:1c:
37:55:ec:4e:00:02:f0:d2:53:d7:ca:43:99:e9:f4:
49:2d:43:a6:fd:e0:53:c6:1d:87:da:8a:7c:b2:af:
69:51:9d:d0:37:12:32:a9:31:2c:14:da:57:6c:cc:
0f:52:26:52:af:4a:55:c7:5a:2c:ce:2f:fa:3b:f5:
fe:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:36:B7:E1:96:2F:1E:75:48:43:78:29:9C:55:D4:6D:64:B6:E9:95
X509v3 Authority Key Identifier:
keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:6b:fa:11:09:30:ec:51:9f:6d:c7:07:d1:11:03:a2:62:65:
c8:80:e7:58:02:d7:1c:62:90:01:b8:c4:4d:7b:96:18:46:6a:
df:9e:ef:08:7f:be:a5:6f:f7:8e:f0:b4:d2:ae:6a:e5:10:b4:
ea:01:eb:4e:95:96:9c:6d:51:aa:2c:87:f1:43:b9:15:1e:2e:
cb:ef:05:c3:6f:a6:e3:1d:72:1a:03:e8:aa:ad:86:0f:05:c3:
85:c7:17:13:a1:83:1a:07:29:36:f7:13:0f:89:72:72:bd:88:
58:a4:8c:ea:a5:b0:47:cc:d9:2d:0d:0c:80:39:4c:87:6b:e7:
34:07:ce:12:26:2e:85:e7:83:30:bb:79:fc:07:af:47:1f:b0:
c3:78:d1:0e:66:cd:2d:f8:c9:e5:ed:fc:32:2d:d6:93:fe:09:
88:5f:4b:16:9f:b7:75:4a:cc:c6:14:f6:76:7f:00:59:5f:b0:
95:0f:c7:18:d1:25:85:39:c5:b7:dd:3a:45:c3:86:d8:9c:ec:
63:a8:09:59:36:75:55:82:08:cc:b0:cf:08:45:67:92:30:86:
36:3a:56:f2:0d:fa:7c:bc:64:88:48:18:e8:2f:44:61:8a:6d:
44:54:08:93:c1:7d:61:26:f2:ed:3b:7d:33:4f:25:03:09:4d:
48:bb:0e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:59:24 2026 by rpki-client