Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
File: nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft (raw, json)
Hash identifier: 75t/fMD/7uz6E9hERaU4UvrANqBANYuZve6Wdb2R+Nc=
Subject key identifier: C0:5C:AE:C9:98:44:1F:EE:0B:ED:1A:88:C3:AB:AC:F8:78:CE:BB:57
Authority key identifier: 9F:33:CD:CE:77:B6:BF:02:09:D8:9C:99:B2:68:EA:08:53:57:6C:D3
Certificate issuer: /CN=9f33cdce77b6bf0209d89c99b268ea0853576cd3
Certificate serial: 01A1224189AC559CFD175917849013B6E750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzPNzne2vwIJ2JyZsmjqCFNXbNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
Manifest number: 0285
Signing time: Fri 09 Oct 2026 20:01:22 +0000
Manifest this update: Fri 09 Oct 2026 20:01:22 +0000
Manifest next update: Sat 10 Oct 2026 20:01:22 +0000
Files and hashes: 1: LL4V8sco-bLn6X62NhH7oSncxGQ.roa (hash: XyYD4raxZ15vCOfOVeQTnYj1yOHNjolcltnv8E/D12M=)
2: nzPNzne2vwIJ2JyZsmjqCFNXbNM.crl (hash: 6eGtcAW2a70VVltKp+F8CzWsWiaz+0TdbVmn6e3uyyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzPNzne2vwIJ2JyZsmjqCFNXbNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:41:89:ac:55:9c:fd:17:59:17:84:90:13:b6:e7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f33cdce77b6bf0209d89c99b268ea0853576cd3
Validity
Not Before: Oct 9 20:01:22 2026 GMT
Not After : Oct 10 20:01:22 2026 GMT
Subject: CN=c05caec998441fee0bed1a88c3abacf878cebb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:02:98:de:e2:2e:f7:96:b4:c1:90:7f:f3:5b:
c8:8f:b7:a9:77:29:a5:0c:d5:c5:93:99:d1:81:2a:
6d:96:6f:5b:01:81:91:fe:9e:5d:ff:3e:19:9f:5b:
f3:06:5e:d7:ea:6f:e7:1e:d1:83:9c:3c:17:66:86:
1c:e9:1f:88:f5:98:35:32:45:8f:20:3d:8d:96:1d:
52:ed:a0:61:37:dc:48:b7:c9:da:bc:c5:f2:eb:b2:
f9:27:d2:6c:21:be:d7:3c:b7:62:11:c5:b4:72:21:
9d:c9:e9:e0:08:e3:2b:c5:1e:74:39:18:c6:79:17:
e6:14:80:24:12:44:cd:e1:45:1b:da:5e:ca:cd:a2:
e2:85:7d:2f:ff:b4:17:72:95:42:62:6e:0e:32:86:
f1:d7:9e:cb:19:64:c6:52:d7:2e:d9:a1:e8:55:ee:
0e:1b:6e:68:2e:83:a0:09:62:62:ac:07:c9:28:06:
f0:67:43:59:e4:b5:0c:9b:31:6c:68:70:22:a0:94:
a8:9f:4d:98:5b:c6:88:b4:b0:21:60:95:1e:36:0b:
69:4b:7d:8a:44:f3:91:57:35:7f:ea:0e:65:5a:71:
9c:5b:52:4c:36:40:a9:b5:bb:e8:1e:82:86:d5:76:
7e:9e:d6:e7:53:e6:e9:e5:43:60:6c:f2:65:b4:20:
e5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5C:AE:C9:98:44:1F:EE:0B:ED:1A:88:C3:AB:AC:F8:78:CE:BB:57
X509v3 Authority Key Identifier:
keyid:9F:33:CD:CE:77:B6:BF:02:09:D8:9C:99:B2:68:EA:08:53:57:6C:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzPNzne2vwIJ2JyZsmjqCFNXbNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:1c:ef:49:f6:ed:1c:86:ef:a0:c7:44:d3:5d:20:98:6f:52:
1a:72:57:88:d8:9b:ce:1e:49:ef:05:57:a0:16:75:7f:a5:ae:
6f:f0:00:64:95:5c:de:71:df:85:ab:c2:7a:35:89:b4:c1:9d:
19:d4:a1:70:20:be:88:f1:50:98:d4:b1:1e:33:fd:c6:a6:f1:
ae:e4:75:21:1e:3c:08:2c:fe:47:0d:94:d6:cf:6e:d9:cd:33:
b6:65:c9:42:8e:d5:cc:90:1f:83:00:cb:c0:37:81:1c:55:cf:
14:4b:a4:31:8a:ed:df:e8:59:74:57:4e:30:3e:ad:99:f9:c1:
46:11:13:97:41:1e:19:f6:6d:f6:b9:87:a9:d7:d5:37:9f:f4:
62:4e:57:52:f3:ca:ad:13:4a:b2:fa:fe:e6:6b:0f:dc:63:cf:
78:00:0e:2e:d9:ab:6a:0c:97:49:24:b8:0b:35:a4:45:a0:62:
18:3e:fb:27:71:31:1f:5e:aa:81:0d:32:77:8d:54:51:2a:f7:
14:e5:29:c6:74:4a:38:5f:6a:6e:aa:0c:25:31:85:4b:26:a2:
03:2a:fb:f2:9b:b2:e1:e5:ff:94:23:dd:bf:75:73:b4:af:9e:
e8:d2:9f:7f:aa:69:9d:fb:c2:ff:cb:85:27:62:88:83:19:c4:
9d:0d:29:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEiQYmsVZz9F1kXhJATtudQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzNjZGNlNzdiNmJmMDIwOWQ4OWM5OWIyNjhlYTA4NTM1
NzZjZDMwHhcNMjYxMDA5MjAwMTIyWhcNMjYxMDEwMjAwMTIyWjAzMTEwLwYDVQQD
EyhjMDVjYWVjOTk4NDQxZmVlMGJlZDFhODhjM2FiYWNmODc4Y2ViYjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgKY3uIu95a0wZB/81vIj7epdyml
DNXFk5nRgSptlm9bAYGR/p5d/z4Zn1vzBl7X6m/nHtGDnDwXZoYc6R+I9Zg1MkWP
ID2Nlh1S7aBhN9xIt8navMXy67L5J9JsIb7XPLdiEcW0ciGdyengCOMrxR50ORjG
eRfmFIAkEkTN4UUb2l7KzaLihX0v/7QXcpVCYm4OMobx157LGWTGUtcu2aHoVe4O
G25oLoOgCWJirAfJKAbwZ0NZ5LUMmzFsaHAioJSon02YW8aItLAhYJUeNgtpS32K
RPORVzV/6g5lWnGcW1JMNkCptbvoHoKG1XZ+ntbnU+bp5UNgbPJltCDluwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBcrsmYRB/uC+0aiMOrrPh4zrtXMB8GA1UdIwQY
MBaAFJ8zzc53tr8CCdicmbJo6ghTV2zTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnpQTnpuZTJ2d0lKMkp5WnNtanFDRk5YYk5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9kM2VmZDItMDljYS00M2I0LWFiMGEt
NGI2NjZkZTJlOThmLzEvbnpQTnpuZTJ2d0lKMkp5WnNtanFDRk5YYk5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9kM2VmZDItMDljYS00M2I0LWFiMGEtNGI2NjZkZTJlOThm
LzEvbnpQTnpuZTJ2d0lKMkp5WnNtanFDRk5YYk5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArBzvSfbt
HIbvoMdE010gmG9SGnJXiNibzh5J7wVXoBZ1f6Wub/AAZJVc3nHfhavCejWJtMGd
GdShcCC+iPFQmNSxHjP9xqbxruR1IR48CCz+Rw2U1s9u2c0ztmXJQo7VzJAfgwDL
wDeBHFXPFEukMYrt3+hZdFdOMD6tmfnBRhETl0EeGfZt9rmHqdfVN5/0Yk5XUvPK
rRNKsvr+5msP3GPPeAAOLtmragyXSSS4CzWkRaBiGD77J3ExH16qgQ0yd41UUSr3
FOUpxnRKOF9qbqoMJTGFSyaiAyr78puy4eX/lCPdv3VztK+e6NKff6ppnfvC/8uF
J2KIgxnEnQ0pMA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 00:41:07 2026 by rpki-client