Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
File: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft (raw, json)
Hash identifier: 2lnTLbXG8FkhOOB0K4M/spwezzAPAxO1LryFCSar3JE=
Subject key identifier: 3E:4A:FA:E1:96:01:3F:68:79:33:7F:47:66:D9:60:08:E7:4C:42:0D
Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Certificate serial: 019D382E90885D159C0F1E643A0E3B01FCEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
Manifest number: 189C
Signing time: Sun 29 Mar 2026 06:01:08 +0000
Manifest this update: Sun 29 Mar 2026 06:01:08 +0000
Manifest next update: Mon 30 Mar 2026 06:01:08 +0000
Files and hashes: 1: 07kKKUMgBwNlGH8ItBg5huXyjBo.roa (hash: 0Db0rW3HyxMoZLKg3qDXyoGcyEgSvoFlGL2izdT+lqA=)
2: A3pW4f2Q0QCXW1ITF5-7J2AGJB0.roa (hash: 3GwoRHIKkL+M5kmrRcgNaVleZoRm14fgCgWnCbfdVU4=)
3: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl (hash: eudfCY6xsECJtVBqgKq2poqxqxknWEL1npMokKN1A2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:90:88:5d:15:9c:0f:1e:64:3a:0e:3b:01:fc:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Validity
Not Before: Mar 29 06:01:08 2026 GMT
Not After : Mar 30 06:01:08 2026 GMT
Subject: CN=3e4afae196013f6879337f4766d96008e74c420d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:12:c9:9e:ae:64:29:25:f4:fc:48:4d:59:6e:
80:c8:d2:be:8b:ed:3a:3f:2c:69:03:01:65:01:30:
79:4c:ef:94:1f:b8:38:10:b9:6e:db:84:42:47:49:
9f:31:3e:52:3b:19:cd:9f:02:21:c4:7b:34:41:c6:
eb:52:1f:04:5e:5c:a5:04:7c:33:ec:67:74:b2:0b:
9a:7d:ec:0a:b8:94:f7:bc:af:ed:70:8c:f3:34:90:
cc:48:c5:d6:bd:7b:37:1d:7a:7a:50:c1:02:a8:55:
d0:84:90:3f:7f:fe:0f:f5:7a:68:ae:05:0b:95:9b:
1c:f7:c5:5c:52:ae:5f:0b:28:c2:92:53:51:68:13:
ff:d5:2a:ad:60:a5:83:bd:45:77:f2:e3:c5:8c:0d:
fe:40:22:fb:b3:e3:ab:3d:d9:43:ff:59:58:2e:69:
ca:de:fa:69:67:b4:5e:1d:1b:1d:85:8a:5f:8b:df:
75:7a:df:e8:93:c1:fe:2b:0e:f4:88:1a:98:8d:9b:
e0:5e:89:df:ec:d0:b0:cb:7a:e0:6c:18:aa:cb:09:
df:b1:1f:37:54:11:c0:09:8b:f3:ac:95:ed:d8:39:
fe:d6:78:75:02:fb:76:0a:40:6a:ff:12:57:cf:79:
83:3e:71:56:24:36:c6:be:cb:01:e4:15:f6:07:de:
1a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4A:FA:E1:96:01:3F:68:79:33:7F:47:66:D9:60:08:E7:4C:42:0D
X509v3 Authority Key Identifier:
keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:2f:de:14:15:be:93:c8:08:28:83:c8:27:b3:a4:e4:1f:91:
e4:39:ce:32:ef:4e:d8:98:20:27:84:90:2b:d5:27:71:a5:b4:
4a:53:54:3c:d7:70:31:e8:01:8f:ae:e0:61:af:c3:ee:8f:0f:
91:29:59:76:61:0a:f3:06:e4:19:36:b8:8e:47:d4:b4:94:67:
20:f1:34:c4:3d:b4:4c:ed:05:1e:92:d3:dc:72:f6:53:29:63:
23:13:a2:e7:37:4a:8a:5b:de:72:69:94:d3:7d:7d:20:14:d2:
9a:f9:2f:e7:d9:42:c5:bf:65:4d:9b:28:4c:0a:ff:5d:86:e3:
3c:92:ad:23:d5:3b:51:ab:fe:d6:36:28:a8:63:a9:75:44:2f:
7d:ce:57:dc:aa:8f:db:e0:62:87:04:ea:88:02:68:55:98:c0:
a4:8a:48:bb:1c:3b:bd:46:e6:87:bf:af:be:8b:9e:c9:9b:a7:
05:57:ee:62:df:f1:46:ca:e4:ee:13:92:3f:e6:91:6b:92:2a:
ab:8f:0c:26:a5:20:82:18:3f:3b:8d:5a:2a:92:9b:bc:4e:cf:
54:9c:2f:d7:86:cb:83:69:c7:8e:58:0e:91:a1:3c:5b:07:a9:
ab:dd:99:c4:e0:23:59:13:20:db:1b:e8:b2:bc:ea:4b:a1:78:
d5:72:ef:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:19 2026 by rpki-client