Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/206d19-b4e7-43e3-b6df-73531630f15b/1/NZ5fBT651CnY61ARjkOdCXNGyrs.mft
File: NZ5fBT651CnY61ARjkOdCXNGyrs.mft (raw, json)
Hash identifier: TVSgEJZ3ggiaU9T8+6VcdZk7+wpyge50CF7rz3V9Pw0=
Subject key identifier: F8:A0:65:9C:08:C9:12:5C:3C:C6:5A:BA:98:19:C5:30:34:3A:DB:A7
Authority key identifier: 35:9E:5F:05:3E:B9:D4:29:D8:EB:50:11:8E:43:9D:09:73:46:CA:BB
Certificate issuer: /CN=359e5f053eb9d429d8eb50118e439d097346cabb
Certificate serial: 01A13B5C2B8433565A764A8B9147FCC2C755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ5fBT651CnY61ARjkOdCXNGyrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/206d19-b4e7-43e3-b6df-73531630f15b/1/NZ5fBT651CnY61ARjkOdCXNGyrs.mft
Manifest number: 19
Signing time: Wed 14 Oct 2026 17:00:58 +0000
Manifest this update: Wed 14 Oct 2026 17:00:58 +0000
Manifest next update: Thu 15 Oct 2026 17:00:58 +0000
Files and hashes: 1: NZ5fBT651CnY61ARjkOdCXNGyrs.crl (hash: 3GIPHjhRVLf+oo73WM/cepvPFegDUckFYKNCVNw6mSM=)
2: wJHAsZqoYWUK-F5eoTxUudhZ0hQ.asa (hash: Z+kjRIHloWgQuWfaEpSQ/CVu4Yukz0ns8AiOc09V0/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/206d19-b4e7-43e3-b6df-73531630f15b/1/NZ5fBT651CnY61ARjkOdCXNGyrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/206d19-b4e7-43e3-b6df-73531630f15b/1/NZ5fBT651CnY61ARjkOdCXNGyrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ5fBT651CnY61ARjkOdCXNGyrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:5c:2b:84:33:56:5a:76:4a:8b:91:47:fc:c2:c7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359e5f053eb9d429d8eb50118e439d097346cabb
Validity
Not Before: Oct 14 17:00:58 2026 GMT
Not After : Oct 15 17:00:58 2026 GMT
Subject: CN=f8a0659c08c9125c3cc65aba9819c530343adba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:09:e1:d4:9a:c6:0c:a1:1a:5f:87:08:ec:c9:
1e:59:e8:da:f4:83:f5:6f:5e:bb:3d:e1:af:f4:40:
f2:73:e0:d5:7a:2a:a9:16:aa:a2:bb:3b:f9:f3:2f:
20:d3:08:77:42:9e:3e:ca:4e:75:2d:29:fd:07:74:
be:c1:3e:6b:ea:94:3d:35:bc:f8:6d:4f:2c:a3:36:
48:b8:6b:73:29:f5:f0:81:bc:8c:b6:86:8f:18:b7:
70:be:34:c2:cf:2b:1c:39:b8:e0:13:30:14:6d:33:
42:d9:07:b6:b9:a1:2a:63:d9:8c:1e:85:18:7a:dd:
7f:cf:4d:b5:a2:51:e0:45:07:51:ee:1e:e5:c0:ac:
77:52:f2:ab:61:b3:f9:25:e3:d6:11:15:ee:55:ad:
13:3c:3e:8d:75:61:92:ea:18:6b:e8:55:4a:56:e1:
5c:b8:ff:cf:ac:83:4c:b6:ae:86:a6:46:48:ad:63:
3c:0b:3f:ba:7e:a7:0a:b2:ac:79:2a:49:0b:d8:3d:
c4:41:ff:e5:73:77:d3:8f:71:e4:3b:14:f7:e0:a0:
f7:e8:12:a3:9e:df:71:e7:3e:68:e5:d0:9b:f2:ad:
d2:66:df:63:79:8a:56:0a:8b:b8:92:52:c1:5d:fa:
c6:fd:ae:81:d4:82:15:e8:a0:20:91:f1:6b:9f:a1:
79:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A0:65:9C:08:C9:12:5C:3C:C6:5A:BA:98:19:C5:30:34:3A:DB:A7
X509v3 Authority Key Identifier:
keyid:35:9E:5F:05:3E:B9:D4:29:D8:EB:50:11:8E:43:9D:09:73:46:CA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ5fBT651CnY61ARjkOdCXNGyrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/206d19-b4e7-43e3-b6df-73531630f15b/1/NZ5fBT651CnY61ARjkOdCXNGyrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/206d19-b4e7-43e3-b6df-73531630f15b/1/NZ5fBT651CnY61ARjkOdCXNGyrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b5:6a:3c:e9:53:41:e5:18:25:ae:39:89:24:0f:8a:52:c9:
05:fd:66:ac:9b:1f:14:ad:f9:7b:0b:c4:18:a9:39:2c:a1:2c:
f7:e3:74:a1:5e:39:c6:20:ab:5e:72:7e:85:3c:40:f0:b0:ae:
0d:3d:18:ed:6c:57:e3:3d:43:54:cb:b1:82:67:41:97:06:04:
39:fc:8c:3a:f8:57:af:77:01:71:76:80:c7:82:5a:35:bf:d4:
71:28:ca:de:d3:a0:27:00:4b:22:c2:6d:e4:04:ec:72:11:9b:
a5:a1:32:18:25:71:c7:bb:97:1a:8d:49:17:8b:ad:21:78:f0:
e7:89:58:e0:bc:ac:33:87:56:2f:83:a5:b8:c9:6a:65:7f:5d:
98:f1:36:5d:99:f8:86:90:87:3b:63:f1:2f:40:1f:f8:7b:44:
20:6c:45:ec:0a:12:fd:ec:a6:f0:93:66:19:04:54:ab:40:6b:
ad:8b:0c:ca:a7:cd:95:f3:5d:d3:09:23:53:88:71:6d:d8:3a:
d8:70:56:bd:92:f2:70:a2:ce:05:2d:a1:f7:27:27:68:4e:38:
68:aa:de:e0:42:f5:35:95:0b:41:37:90:d9:d0:6e:43:77:6c:
79:fb:81:8c:3c:36:d1:bd:c4:d6:e6:be:8c:6e:43:b3:e9:08:
1f:5d:38:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:23:00 2026 by rpki-client