Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
File: U_NZCAnRh_ezYfskzUP5P2ZLILM.mft (raw, json)
Hash identifier: iCppUVVCajAqW/xY/kn0lrbB8+P69TslEq/Kd80Htc4=
Subject key identifier: 29:29:97:61:FD:37:2A:98:7B:DF:9D:ED:6F:9D:6E:8F:ED:42:A3:E8
Authority key identifier: 53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
Certificate issuer: /CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Certificate serial: 019DB2EBEFFF60AAD7916E5AFAD087B34AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
Manifest number: 18D4
Signing time: Wed 22 Apr 2026 02:01:40 +0000
Manifest this update: Wed 22 Apr 2026 02:01:40 +0000
Manifest next update: Thu 23 Apr 2026 02:01:40 +0000
Files and hashes: 1: 1-UcYB_bC1Q74xvMeMptRl_v4GSM.roa (hash: CZsJE/C7u1KFT+BSHVUsJyL6cOqDP5qXckw/MXkpdZw=)
2: IADl1Gv9BuddIG-0OHvNCj39-5w.roa (hash: S9Dxk12pt58eWH9jO5GDFxrOLIjhAQo2JWChQTtOvm0=)
3: U_NZCAnRh_ezYfskzUP5P2ZLILM.crl (hash: rZ0/GIMY9Udmd0YN/uQIGNDzFBfN4DmVGJ3slA5g4w4=)
4: ctdO6KeqKtoQl8jil7v642rgLAY.roa (hash: 0Ysbxgr5wlnCLuuipo5HyI6PWUVSDIOqUxGUbxE7UC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:eb:ef:ff:60:aa:d7:91:6e:5a:fa:d0:87:b3:4a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Validity
Not Before: Apr 22 02:01:40 2026 GMT
Not After : Apr 23 02:01:40 2026 GMT
Subject: CN=29299761fd372a987bdf9ded6f9d6e8fed42a3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:db:71:da:50:94:97:b1:43:c8:89:43:60:41:
db:c3:0f:48:91:1b:81:7b:51:b2:19:97:06:43:40:
f9:4c:54:21:44:fc:4e:f4:0e:53:79:ba:fa:11:b4:
f0:82:bb:c1:b0:72:70:6a:25:83:4b:5d:ed:ca:98:
58:47:93:c0:26:56:a0:9c:7d:00:89:89:5c:6c:65:
47:cd:6c:f9:03:61:71:20:c0:4c:a1:78:7b:a2:3b:
d8:3b:fd:6f:05:1e:de:13:2f:76:90:b6:f6:78:bb:
9b:93:72:aa:e6:e4:ef:24:e3:2c:f6:8c:ad:47:24:
7b:25:fe:87:c5:01:3b:1d:9a:b4:57:3e:1d:09:24:
1d:58:7c:9d:46:38:10:cc:e6:17:de:ce:81:82:c6:
20:48:d0:bd:a7:aa:75:c3:3e:e1:f0:97:0d:5f:9a:
32:46:c9:6e:86:88:a6:00:61:d2:5d:7f:f4:4d:32:
78:4a:d5:2a:19:61:fd:91:f4:50:be:fa:db:bf:41:
61:aa:d5:e8:f3:00:19:b5:17:e2:50:c7:a7:d6:32:
f8:87:ad:7b:a7:9b:c8:ca:89:ac:87:c7:51:75:69:
09:ff:34:99:18:f5:d6:17:9d:57:63:6b:94:77:af:
4a:31:81:9f:b7:bc:31:7e:9d:3d:fe:9a:29:11:aa:
87:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:29:97:61:FD:37:2A:98:7B:DF:9D:ED:6F:9D:6E:8F:ED:42:A3:E8
X509v3 Authority Key Identifier:
keyid:53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:5f:d3:b1:4b:5d:05:b6:9a:e3:b6:ae:5e:4b:48:85:f4:f2:
71:8e:14:72:92:cd:ab:9b:eb:31:2f:8c:29:10:e1:c3:97:2f:
e3:2e:03:ce:a5:19:80:a4:28:dd:3d:fa:5e:2f:aa:e5:2b:75:
eb:1a:8e:0f:4b:4a:b8:eb:25:2e:4f:6a:be:52:25:e1:bc:6e:
0c:ad:cb:b6:2e:14:1d:73:c3:db:74:b2:1f:ea:cc:06:c8:e7:
ed:a7:3f:dd:fe:38:53:55:02:ce:24:6b:db:a5:56:02:cd:3f:
54:7f:71:ea:dd:89:4f:1f:aa:6b:95:9d:57:96:3a:ab:12:16:
f7:87:a1:58:0f:94:17:d2:15:57:f7:10:5e:d1:bc:33:45:6f:
14:87:8a:56:51:eb:5a:26:2d:e4:fe:d1:46:b1:f8:c8:ca:67:
2d:0f:91:2f:67:3c:39:a9:10:56:f7:20:29:8c:12:be:88:d6:
93:c0:f1:fb:f3:11:bb:9b:a5:fe:56:1a:f7:51:94:63:40:f5:
d3:d9:39:d2:11:f2:31:ad:19:99:82:94:71:52:a6:9a:ff:03:
3f:53:ce:15:31:60:de:0a:30:0c:79:e7:43:66:16:82:c8:a8:
a9:eb:bc:1c:b4:4a:e1:90:3c:4c:14:b0:0f:e5:6e:b6:2e:05:
da:c4:59:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 08:40:36 2026 by rpki-client