Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
File: nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft (raw, json)
Hash identifier: 5qW1OQ0kYy9dxmZOVjm5Mz1IhrTRriprvSi6Bb5M5DI=
Subject key identifier: E8:42:A5:90:96:B0:CE:5F:55:38:D6:7C:E5:B6:9C:DE:60:DA:69:1E
Authority key identifier: 9F:33:CD:CE:77:B6:BF:02:09:D8:9C:99:B2:68:EA:08:53:57:6C:D3
Certificate issuer: /CN=9f33cdce77b6bf0209d89c99b268ea0853576cd3
Certificate serial: 019D341ABF55888B01D9BD67450FE59C36A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzPNzne2vwIJ2JyZsmjqCFNXbNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
Manifest number: 7C
Signing time: Sat 28 Mar 2026 11:01:01 +0000
Manifest this update: Sat 28 Mar 2026 11:01:01 +0000
Manifest next update: Sun 29 Mar 2026 11:01:01 +0000
Files and hashes: 1: LL4V8sco-bLn6X62NhH7oSncxGQ.roa (hash: XyYD4raxZ15vCOfOVeQTnYj1yOHNjolcltnv8E/D12M=)
2: nzPNzne2vwIJ2JyZsmjqCFNXbNM.crl (hash: CkLYnEkkCsdH5L+npiKLCA6lF+uK6+xsPSy5UJuN8kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzPNzne2vwIJ2JyZsmjqCFNXbNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:1a:bf:55:88:8b:01:d9:bd:67:45:0f:e5:9c:36:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f33cdce77b6bf0209d89c99b268ea0853576cd3
Validity
Not Before: Mar 28 11:01:01 2026 GMT
Not After : Mar 29 11:01:01 2026 GMT
Subject: CN=e842a59096b0ce5f5538d67ce5b69cde60da691e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:43:60:73:35:bc:e7:a0:f5:1c:64:e1:fc:c8:
38:02:c1:bf:72:18:24:e1:3f:44:c6:31:73:a8:81:
d2:cf:d1:9f:de:0f:6e:b4:1b:d7:6f:87:50:13:56:
77:e2:5a:92:a6:bd:e2:87:51:f2:2b:aa:00:ad:82:
97:4b:d8:52:19:cf:94:db:39:8f:b9:26:db:05:16:
6d:51:71:51:f4:1b:03:f3:29:50:72:fd:84:95:aa:
d9:e1:8c:dd:4c:02:48:52:9e:7e:11:95:2b:75:49:
ee:7e:84:24:86:ea:22:a5:0d:83:8c:6d:7f:f8:90:
25:09:04:5e:54:d7:a2:6e:62:0b:b3:f9:c6:d6:f4:
41:ce:2a:da:49:68:03:ce:c8:29:34:cb:69:38:b8:
20:5e:fd:e4:7e:7e:de:22:31:b4:94:cd:16:1a:0a:
d4:c7:92:dc:14:11:f2:66:01:4a:76:cb:35:46:83:
72:00:75:93:d1:5e:55:aa:03:f9:b6:06:08:02:f9:
eb:c7:6c:87:71:5a:ed:03:ca:ec:55:8c:0a:91:eb:
50:45:a5:3c:c3:9f:7d:9a:96:5f:b3:6f:27:54:31:
31:cb:bf:d4:6a:18:a1:23:d3:02:da:aa:33:17:46:
e1:6d:bf:fe:b6:7b:c1:74:6f:a8:01:1a:36:3d:42:
93:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:42:A5:90:96:B0:CE:5F:55:38:D6:7C:E5:B6:9C:DE:60:DA:69:1E
X509v3 Authority Key Identifier:
keyid:9F:33:CD:CE:77:B6:BF:02:09:D8:9C:99:B2:68:EA:08:53:57:6C:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzPNzne2vwIJ2JyZsmjqCFNXbNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:10:bb:48:42:5f:93:d2:d6:80:93:d1:75:b5:b8:04:a0:c2:
04:eb:38:cc:e7:c2:03:c5:6a:0f:f1:75:68:57:4f:28:48:8f:
58:e4:cf:13:81:f2:3b:af:c5:f8:bc:1a:fa:5b:85:6a:03:81:
a4:06:65:d6:65:0d:28:ab:ee:61:e5:a6:8c:18:d7:62:b0:49:
0c:17:1e:48:3d:95:8e:59:70:1c:61:af:75:49:68:82:c8:51:
1f:78:db:98:85:87:1a:76:fa:6b:a2:9b:b1:c0:8f:ee:58:f8:
78:53:88:b5:01:aa:bf:e2:57:43:12:9b:aa:44:78:fb:2d:9c:
a5:66:70:e0:9f:fc:c4:0b:31:3f:8c:c8:3b:53:db:04:5a:58:
70:e7:8c:5e:b2:1b:e3:d3:9c:38:34:ad:4f:13:08:b2:af:35:
09:c0:1f:3e:c9:a8:58:1b:da:b6:57:d0:4e:d1:26:00:81:8d:
d5:e4:10:aa:36:02:c5:2a:79:6d:be:ba:1c:b0:4d:ab:fb:33:
c7:2f:22:e1:df:86:bb:0b:8d:99:a3:3c:84:4c:9c:44:1a:3a:
b0:6b:9c:6e:f6:a9:8e:22:1f:f0:11:a2:00:cd:52:87:06:09:
f4:14:38:4d:f5:b6:3b:ea:00:a4:51:64:cc:c3:34:e9:34:ce:
e5:1d:44:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ00Gr9ViIsB2b1nRQ/lnDamMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzNjZGNlNzdiNmJmMDIwOWQ4OWM5OWIyNjhlYTA4NTM1
NzZjZDMwHhcNMjYwMzI4MTEwMTAxWhcNMjYwMzI5MTEwMTAxWjAzMTEwLwYDVQQD
EyhlODQyYTU5MDk2YjBjZTVmNTUzOGQ2N2NlNWI2OWNkZTYwZGE2OTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0NgczW856D1HGTh/Mg4AsG/chgk
4T9ExjFzqIHSz9Gf3g9utBvXb4dQE1Z34lqSpr3ih1HyK6oArYKXS9hSGc+U2zmP
uSbbBRZtUXFR9BsD8ylQcv2ElarZ4YzdTAJIUp5+EZUrdUnufoQkhuoipQ2DjG1/
+JAlCQReVNeibmILs/nG1vRBziraSWgDzsgpNMtpOLggXv3kfn7eIjG0lM0WGgrU
x5LcFBHyZgFKdss1RoNyAHWT0V5VqgP5tgYIAvnrx2yHcVrtA8rsVYwKketQRaU8
w599mpZfs28nVDExy7/UahihI9MC2qozF0bhbb/+tnvBdG+oARo2PUKTGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhCpZCWsM5fVTjWfOW2nN5g2mkeMB8GA1UdIwQY
MBaAFJ8zzc53tr8CCdicmbJo6ghTV2zTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnpQTnpuZTJ2d0lKMkp5WnNtanFDRk5YYk5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9kM2VmZDItMDljYS00M2I0LWFiMGEt
NGI2NjZkZTJlOThmLzEvbnpQTnpuZTJ2d0lKMkp5WnNtanFDRk5YYk5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9kM2VmZDItMDljYS00M2I0LWFiMGEtNGI2NjZkZTJlOThm
LzEvbnpQTnpuZTJ2d0lKMkp5WnNtanFDRk5YYk5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHBC7SEJf
k9LWgJPRdbW4BKDCBOs4zOfCA8VqD/F1aFdPKEiPWOTPE4HyO6/F+Lwa+luFagOB
pAZl1mUNKKvuYeWmjBjXYrBJDBceSD2VjllwHGGvdUlogshRH3jbmIWHGnb6a6Kb
scCP7lj4eFOItQGqv+JXQxKbqkR4+y2cpWZw4J/8xAsxP4zIO1PbBFpYcOeMXrIb
49OcODStTxMIsq81CcAfPsmoWBvatlfQTtEmAIGN1eQQqjYCxSp5bb66HLBNq/sz
xy8i4d+GuwuNmaM8hEycRBo6sGucbvapjiIf8BGiAM1ShwYJ9BQ4TfW2O+oApFFk
zMM06TTO5R1ETg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 21:40:12 2026 by rpki-client