Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
File: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft (raw, json)
Hash identifier: klbb3Cvl1py4eCZPY4Npx/Q9eVySh3HmGByAUbTlP6A=
Subject key identifier: BF:35:0B:2D:9E:68:B2:74:BB:08:B4:5C:5F:BB:57:1F:49:36:5E:1A
Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Certificate serial: 019F14544EDE28D1190B94089BFCFB704C3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
Manifest number: 1993
Signing time: Mon 29 Jun 2026 17:01:37 +0000
Manifest this update: Mon 29 Jun 2026 17:01:37 +0000
Manifest next update: Tue 30 Jun 2026 17:01:37 +0000
Files and hashes: 1: A3pW4f2Q0QCXW1ITF5-7J2AGJB0.roa (hash: 3GwoRHIKkL+M5kmrRcgNaVleZoRm14fgCgWnCbfdVU4=)
2: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl (hash: kNng34T4nxmhIfT08WF7iTBYW973bu3jADENhz2mm2E=)
3: YsmjC0C0fqf9CY4wLhiPtFlxZEw.roa (hash: N0lxxgZ/gBnqbm0d/xg3YbjefGLIyBpN9+tqlNMsVRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 17:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:54:4e:de:28:d1:19:0b:94:08:9b:fc:fb:70:4c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Validity
Not Before: Jun 29 17:01:37 2026 GMT
Not After : Jun 30 17:01:37 2026 GMT
Subject: CN=bf350b2d9e68b274bb08b45c5fbb571f49365e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:90:32:48:51:0f:32:4a:ba:a6:99:ff:6f:82:
4c:86:b5:38:6e:cc:79:5e:ec:a8:a6:7b:32:a8:c2:
b7:21:02:23:e8:e2:be:9c:99:96:c6:91:1d:ea:7c:
5a:75:9b:15:7e:45:2f:4e:bd:28:68:cc:0d:89:f9:
0e:9c:f7:28:a2:2d:74:86:47:2b:2f:3d:a8:f7:f9:
95:0e:cc:ad:0d:c3:1c:cc:c2:66:77:52:47:1b:22:
c0:e2:f4:69:31:de:3f:f7:3c:cf:80:ae:10:31:f3:
ec:90:d0:25:33:1d:3f:1b:c5:f8:1c:36:d7:d5:9f:
28:e7:b3:28:13:73:39:36:aa:59:40:bb:a5:ec:f5:
d7:5c:e3:03:5c:86:70:fa:7a:4d:a9:c0:6d:a2:8a:
9a:9a:88:bf:0f:f0:e9:a8:f6:39:80:0e:61:4a:a8:
e9:77:01:76:6d:0a:8a:52:04:bb:37:83:04:c2:be:
21:96:e9:e2:31:a4:a6:ef:91:1e:8a:66:1d:56:f0:
f1:d5:00:54:c2:fb:3a:83:d6:6f:47:9d:24:cb:c8:
78:cf:d0:07:35:7b:b2:16:33:29:c8:f3:18:7e:85:
88:08:7d:7c:d7:d6:20:73:fe:e9:93:53:0d:3a:9b:
c2:a1:5d:ee:ad:0f:c1:d7:ed:19:69:36:2c:ec:04:
ca:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:35:0B:2D:9E:68:B2:74:BB:08:B4:5C:5F:BB:57:1F:49:36:5E:1A
X509v3 Authority Key Identifier:
keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:63:46:90:13:49:8b:eb:e7:d0:7a:48:38:85:68:66:76:98:
1a:76:f0:1b:8f:50:79:16:bb:2f:e7:56:8d:34:a5:30:92:04:
62:de:fc:3d:6e:9b:f3:74:1f:62:be:c8:cc:6c:7f:8b:66:a6:
3c:ee:aa:23:ff:71:89:e5:3f:92:30:c6:4c:99:27:6d:f8:c7:
ad:c5:8c:61:31:a7:92:15:c0:23:14:7a:70:98:a8:87:07:82:
ab:f2:39:2b:6f:94:1b:10:ad:a8:ab:43:3f:f5:dd:68:bb:df:
8a:d9:03:10:0d:66:1e:ad:f2:04:f8:0e:45:12:4a:a1:0b:cb:
2f:0b:17:54:21:5e:cd:02:8e:78:d1:46:be:d4:5b:42:24:12:
98:dc:be:7e:43:5c:55:2a:b2:7d:ed:7e:0b:65:75:a5:fc:86:
bd:d9:ad:92:50:6d:b1:1d:1e:6e:46:a3:d0:e5:4f:b7:af:cd:
d7:fe:1b:16:71:8c:c1:b4:a7:56:b5:94:05:9c:b8:45:e4:82:
97:4f:6c:6c:a3:c1:f3:e0:6d:3d:ab:48:9d:b2:7d:a8:dd:30:
c9:c0:3d:60:2a:51:58:3a:06:83:cb:ef:af:e6:ff:d3:65:28:
81:be:de:f2:75:3f:a3:c1:53:80:f8:dc:ef:a7:93:6f:46:92:
f3:66:d5:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8UVE7eKNEZC5QIm/z7cEw/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NWZiM2ZlYjE1YzAzYzRkMzRkOWZmNDQ0ZDlhZDdlMzAw
NjcyMDgwHhcNMjYwNjI5MTcwMTM3WhcNMjYwNjMwMTcwMTM3WjAzMTEwLwYDVQQD
EyhiZjM1MGIyZDllNjhiMjc0YmIwOGI0NWM1ZmJiNTcxZjQ5MzY1ZTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppAySFEPMkq6ppn/b4JMhrU4bsx5
XuyopnsyqMK3IQIj6OK+nJmWxpEd6nxadZsVfkUvTr0oaMwNifkOnPcooi10hkcr
Lz2o9/mVDsytDcMczMJmd1JHGyLA4vRpMd4/9zzPgK4QMfPskNAlMx0/G8X4HDbX
1Z8o57MoE3M5NqpZQLul7PXXXOMDXIZw+npNqcBtooqamoi/D/DpqPY5gA5hSqjp
dwF2bQqKUgS7N4MEwr4hluniMaSm75EeimYdVvDx1QBUwvs6g9ZvR50ky8h4z9AH
NXuyFjMpyPMYfoWICH1819Ygc/7pk1MNOpvCoV3urQ/B1+0ZaTYs7ATKwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL81Cy2eaLJ0uwi0XF+7Vx9JNl4aMB8GA1UdIwQY
MBaAFDRfs/6xXAPE002f9ETZrX4wBnIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkYtel9yRmNBOFRUVFpfMFJObXRmakFHY2dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hNDQyYzUtZDE0Zi00MjlmLWE1MTUt
YmM1NGIxMjExYjYwLzEvTkYtel9yRmNBOFRUVFpfMFJObXRmakFHY2dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9hNDQyYzUtZDE0Zi00MjlmLWE1MTUtYmM1NGIxMjExYjYw
LzEvTkYtel9yRmNBOFRUVFpfMFJObXRmakFHY2dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtWNGkBNJ
i+vn0HpIOIVoZnaYGnbwG49QeRa7L+dWjTSlMJIEYt78PW6b83QfYr7IzGx/i2am
PO6qI/9xieU/kjDGTJknbfjHrcWMYTGnkhXAIxR6cJiohweCq/I5K2+UGxCtqKtD
P/XdaLvfitkDEA1mHq3yBPgORRJKoQvLLwsXVCFezQKOeNFGvtRbQiQSmNy+fkNc
VSqyfe1+C2V1pfyGvdmtklBtsR0ebkaj0OVPt6/N1/4bFnGMwbSnVrWUBZy4ReSC
l09sbKPB8+BtPatInbJ9qN0wycA9YCpRWDoGg8vvr+b/02Uogb7e8nU/o8FTgPjc
76eTb0aS82bVhQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 02:27:05 2026 by rpki-client