Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
File: nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft (raw, json)
Hash identifier: tA4XhBMh003BLRq749HzUryKgaCKrfmLVQFzCnJyNjs=
Subject key identifier: B4:56:42:75:66:D6:13:5C:24:78:3B:BC:8F:CA:F4:E5:AE:47:BC:9A
Authority key identifier: 9F:33:CD:CE:77:B6:BF:02:09:D8:9C:99:B2:68:EA:08:53:57:6C:D3
Certificate issuer: /CN=9f33cdce77b6bf0209d89c99b268ea0853576cd3
Certificate serial: 019FFAC7F9C695AA080CF9AE3B5E6A4157EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzPNzne2vwIJ2JyZsmjqCFNXbNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
Manifest number: 01EC
Signing time: Thu 13 Aug 2026 11:00:37 +0000
Manifest this update: Thu 13 Aug 2026 11:00:37 +0000
Manifest next update: Fri 14 Aug 2026 11:00:37 +0000
Files and hashes: 1: LL4V8sco-bLn6X62NhH7oSncxGQ.roa (hash: XyYD4raxZ15vCOfOVeQTnYj1yOHNjolcltnv8E/D12M=)
2: nzPNzne2vwIJ2JyZsmjqCFNXbNM.crl (hash: InNFxLxy1hvERtmriwrcyllu0/5fDUycECyKwNRIzRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzPNzne2vwIJ2JyZsmjqCFNXbNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:c7:f9:c6:95:aa:08:0c:f9:ae:3b:5e:6a:41:57:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f33cdce77b6bf0209d89c99b268ea0853576cd3
Validity
Not Before: Aug 13 11:00:37 2026 GMT
Not After : Aug 14 11:00:37 2026 GMT
Subject: CN=b456427566d6135c24783bbc8fcaf4e5ae47bc9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:05:e5:86:bc:67:15:a0:2e:59:ab:fb:c1:50:
3d:69:f5:cc:5a:66:75:1a:b2:ef:31:9d:27:50:3b:
ed:9d:4e:2a:80:60:d5:11:ab:e6:3f:11:2d:e9:14:
1b:bc:dd:8c:ec:ae:4d:db:86:4b:43:22:28:c8:65:
61:eb:68:a0:ba:4f:ce:99:5f:3f:54:f7:24:af:0b:
0d:a2:59:b2:0d:71:97:7f:fe:ca:c2:c0:be:99:23:
13:d5:97:03:2f:c8:8a:48:b7:8a:df:13:cc:23:ea:
76:ab:af:71:f3:2a:9f:5f:a0:b3:69:31:49:b2:c6:
3b:b5:cf:ef:a8:12:39:da:9d:c4:6d:98:fd:7f:55:
bc:22:ce:9d:f5:78:2f:4e:e3:50:bc:29:85:8c:32:
2a:4b:4a:1a:7a:e3:cd:e6:89:8d:ba:c4:95:88:2b:
01:87:16:13:98:13:8c:aa:45:93:ea:4c:ac:3a:1c:
56:df:df:b6:e1:57:e0:7c:51:10:86:10:55:ec:e4:
56:db:60:19:79:80:aa:a4:57:a3:bf:27:10:88:8f:
e2:d8:c4:d0:f2:1e:76:9c:d4:19:df:38:33:20:51:
97:34:6c:8b:a1:8e:7b:7b:4b:e5:48:03:aa:a1:37:
ec:ef:0c:f9:55:56:58:8d:21:47:d6:95:c6:f7:2f:
a4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:56:42:75:66:D6:13:5C:24:78:3B:BC:8F:CA:F4:E5:AE:47:BC:9A
X509v3 Authority Key Identifier:
keyid:9F:33:CD:CE:77:B6:BF:02:09:D8:9C:99:B2:68:EA:08:53:57:6C:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzPNzne2vwIJ2JyZsmjqCFNXbNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:56:57:3f:da:b3:3e:ba:56:d3:38:dd:56:7c:72:9e:3c:73:
a9:02:e7:6b:bf:77:6b:1e:a1:ba:60:d0:a6:f1:1e:04:f5:b5:
3f:ba:78:96:9b:d3:5e:02:f7:c3:0b:08:c1:75:18:07:ab:cf:
32:8f:64:2d:76:d3:33:2f:33:b4:27:73:e6:9b:ee:fe:7c:9f:
86:77:b7:10:ef:2e:63:e9:d7:17:18:aa:e5:bb:9e:00:a2:9a:
b0:31:b3:97:ab:b3:ad:94:56:80:7b:4c:01:a6:31:ca:65:62:
30:f7:c5:3f:bd:0c:3a:11:15:de:2b:8a:1b:30:4d:9c:af:be:
ae:5b:b6:fc:62:fb:d8:dc:fc:08:47:ec:ff:13:cf:88:e6:3e:
e0:1c:d0:be:7d:1c:2e:a1:81:45:ca:e6:95:b2:39:48:ef:01:
1a:63:91:96:84:5b:76:5e:4f:1a:09:e8:3a:3a:8e:77:cd:b3:
ba:a5:8c:66:d2:9c:27:0d:b6:c4:86:31:3e:cb:05:ab:f5:8e:
a6:a0:0a:47:2c:23:77:43:47:d8:1a:f6:25:01:0f:4d:7c:9b:
5b:bb:d9:30:41:c6:85:96:1e:23:8e:e7:6c:ca:ce:e7:13:6a:
f1:ef:6a:9a:61:9f:fc:2b:2a:3f:c3:3d:b8:59:28:28:61:3f:
5e:d4:17:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 17:49:43 2026 by rpki-client