Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
File: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft (raw, json)
Hash identifier: jYrbB2C4nRYoh4LqYkCoQTKHK8aMIp3POS3lJGMF+DE=
Subject key identifier: EA:E3:0B:F0:50:A3:9E:E3:7C:1B:6A:50:58:4A:6D:5E:3C:32:89:57
Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Certificate serial: 019FFE00A555940D4C89019ECB45EBC82CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
Manifest number: 1A0C
Signing time: Fri 14 Aug 2026 02:01:22 +0000
Manifest this update: Fri 14 Aug 2026 02:01:22 +0000
Manifest next update: Sat 15 Aug 2026 02:01:22 +0000
Files and hashes: 1: A3pW4f2Q0QCXW1ITF5-7J2AGJB0.roa (hash: 3GwoRHIKkL+M5kmrRcgNaVleZoRm14fgCgWnCbfdVU4=)
2: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl (hash: Yam2zgv8vQilhiQ4clZ12i4+IaEQkj1Eja0bJwRDT4E=)
3: YsmjC0C0fqf9CY4wLhiPtFlxZEw.roa (hash: N0lxxgZ/gBnqbm0d/xg3YbjefGLIyBpN9+tqlNMsVRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fe:00:a5:55:94:0d:4c:89:01:9e:cb:45:eb:c8:2c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Validity
Not Before: Aug 14 02:01:22 2026 GMT
Not After : Aug 15 02:01:22 2026 GMT
Subject: CN=eae30bf050a39ee37c1b6a50584a6d5e3c328957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d2:a5:ef:6c:60:89:e5:a8:61:7e:0f:f6:55:
e2:63:ee:f0:ab:ff:c6:02:1a:36:e6:8a:b2:fb:86:
6e:37:f0:49:9e:a8:d2:5a:7a:9a:86:55:2e:a2:de:
ac:f3:09:49:6b:a9:c4:65:c6:9c:40:af:b6:20:41:
ab:37:00:92:5e:1d:ed:bd:63:1a:2d:08:af:a1:fb:
cb:94:1e:b6:06:40:39:ec:cd:47:98:12:2b:4c:6a:
58:be:93:38:ee:8e:54:02:43:7a:64:7a:97:c1:46:
1f:40:d7:e8:f2:8a:ec:75:f5:8b:98:0f:04:dc:6f:
09:f0:9d:92:b6:55:c6:c1:9d:e8:78:b0:36:92:a3:
ea:3f:00:81:16:71:cb:52:06:de:d8:d3:14:d2:05:
b2:f9:7b:6b:83:bb:da:2b:a6:32:a3:2e:87:a5:71:
51:ba:38:31:e8:3b:85:ba:46:c3:5b:9d:11:e1:17:
72:93:21:4f:40:b6:71:50:e2:e8:85:d5:5e:8e:ad:
24:f4:5f:4a:d5:e0:94:61:1e:23:d1:86:ff:f9:aa:
27:fc:9b:ad:e6:83:bc:dc:3c:cd:c9:f1:cf:44:18:
01:56:59:8a:7e:71:2b:8a:e9:04:0b:96:f0:ed:90:
72:51:00:c3:20:68:3b:ce:6e:29:a2:4b:f7:c0:92:
41:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E3:0B:F0:50:A3:9E:E3:7C:1B:6A:50:58:4A:6D:5E:3C:32:89:57
X509v3 Authority Key Identifier:
keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:05:17:1b:c4:ea:ec:13:af:ce:37:f5:ef:53:50:2e:d1:91:
d0:dd:f6:a5:cb:57:44:22:25:29:34:f0:2e:a3:ab:de:05:bf:
1b:fb:c2:e5:da:7c:61:66:4e:ac:2a:0f:5b:fc:86:35:11:b2:
ae:58:dc:09:69:04:9d:fe:2b:f3:fd:54:17:cb:82:1c:e6:75:
0c:8c:03:c1:4a:2e:3a:61:7a:9f:4c:b6:a8:9e:11:87:dc:6b:
a0:ad:c9:29:f2:16:b7:a9:14:8c:ef:38:f5:38:fe:16:3c:e2:
43:aa:53:a7:9b:25:13:95:3b:8f:7a:fa:2f:33:f0:ad:6b:e4:
11:e3:a1:cd:c9:b4:e4:e9:f0:72:ee:c3:22:58:c2:73:d7:a9:
b5:d9:d3:41:ef:11:0c:ba:f0:d8:0f:9c:38:92:c1:97:91:a4:
4f:24:f4:d7:7a:6f:39:49:63:f6:bb:57:36:e4:3c:cb:1d:6b:
59:00:da:4f:d1:05:a2:d0:4d:c1:07:56:47:77:53:45:36:62:
62:1d:19:d8:cf:a1:c7:cf:4c:0b:43:56:d7:a6:b8:d1:0f:85:
1c:4e:30:a1:36:31:8b:5b:fd:5f:c4:32:3a:d8:8a:92:36:7f:
60:40:61:b7:67:13:dd:83:86:e4:cc:10:8a:c9:26:e8:bd:7e:
67:2e:ea:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 03:35:12 2026 by rpki-client