Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
File: U_NZCAnRh_ezYfskzUP5P2ZLILM.mft (raw, json)
Hash identifier: zMvdy/TqCCI4hMaEorZTHPR1ic9wcnUBkiZwR1G213U=
Subject key identifier: 25:9C:41:18:06:03:77:B2:0E:A8:BD:5E:B4:00:18:0C:A1:E0:0B:A8
Authority key identifier: 53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
Certificate issuer: /CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Certificate serial: 019CC5618405F0C9F8B63FC902E1299ED248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
Manifest number: 1859
Signing time: Fri 06 Mar 2026 23:00:28 +0000
Manifest this update: Fri 06 Mar 2026 23:00:28 +0000
Manifest next update: Sat 07 Mar 2026 23:00:28 +0000
Files and hashes: 1: 1-UcYB_bC1Q74xvMeMptRl_v4GSM.roa (hash: CZsJE/C7u1KFT+BSHVUsJyL6cOqDP5qXckw/MXkpdZw=)
2: IADl1Gv9BuddIG-0OHvNCj39-5w.roa (hash: S9Dxk12pt58eWH9jO5GDFxrOLIjhAQo2JWChQTtOvm0=)
3: U_NZCAnRh_ezYfskzUP5P2ZLILM.crl (hash: e178EE6seo40shzi+SyvCM74xedkaBYhB9o7rx2QPKM=)
4: ctdO6KeqKtoQl8jil7v642rgLAY.roa (hash: 0Ysbxgr5wlnCLuuipo5HyI6PWUVSDIOqUxGUbxE7UC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c5:61:84:05:f0:c9:f8:b6:3f:c9:02:e1:29:9e:d2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Validity
Not Before: Mar 6 23:00:28 2026 GMT
Not After : Mar 7 23:00:28 2026 GMT
Subject: CN=259c4118060377b20ea8bd5eb400180ca1e00ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:87:0f:49:2c:0b:e4:62:ae:bd:6a:36:04:05:
9c:e6:1d:6b:d7:c7:67:c0:3d:74:3c:af:4a:d2:a5:
86:fb:fe:10:61:4f:f5:3c:f8:eb:6f:95:bd:84:ad:
6c:3e:9a:4a:84:cc:df:90:09:fb:67:30:4d:a7:9a:
60:0d:c5:64:71:65:92:d6:d5:89:93:74:11:74:6e:
ca:ec:5c:37:fd:cb:2f:76:eb:77:0b:04:1e:23:e4:
09:1a:d6:3f:9e:ed:34:e8:bd:6a:3b:33:7d:21:e1:
19:15:91:27:f5:79:8d:c9:98:57:b9:fc:a8:13:8b:
5b:46:58:92:36:17:c0:80:d0:e8:bf:7e:2c:90:00:
55:26:f3:06:65:a6:60:7a:e8:6e:97:fe:d9:bf:ae:
08:79:c3:bc:97:86:3b:fc:30:fd:d6:2c:d8:59:8e:
71:86:dd:d0:30:4f:58:e7:f0:07:56:cd:69:35:f3:
ef:16:24:ef:96:1c:59:d9:15:41:27:b2:c1:45:a0:
a0:a5:71:e4:f4:d9:39:c5:0e:89:54:eb:bb:55:d7:
04:07:c8:3e:36:07:71:58:92:47:1f:d7:b2:44:27:
c3:26:07:67:71:04:85:35:db:d0:7c:9c:46:ce:10:
1a:a7:7d:f8:99:2e:c8:d7:27:fe:f6:2c:44:f0:1c:
a4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9C:41:18:06:03:77:B2:0E:A8:BD:5E:B4:00:18:0C:A1:E0:0B:A8
X509v3 Authority Key Identifier:
keyid:53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8e:8d:ef:96:0b:79:5d:82:72:6d:8d:ba:82:db:21:2d:a4:
ed:a9:e8:0a:70:5e:80:43:80:e0:6a:72:8d:2f:d9:83:ef:d0:
3f:6a:64:99:0f:97:16:af:6f:65:ce:96:85:b2:17:9c:5c:88:
a4:a9:43:2b:5a:f8:34:8f:e0:a6:52:41:b4:a7:09:d8:4b:82:
3a:31:b4:6f:f7:df:a1:33:8d:e4:1c:50:2a:98:a6:98:6d:98:
1a:e1:0f:90:e5:e2:9f:b7:97:15:9a:df:b0:23:24:57:ae:fb:
53:e5:c9:45:a3:90:db:b1:32:c2:22:40:d8:8f:78:f4:93:3e:
22:96:b4:5e:65:c5:2f:6f:71:54:45:be:81:d6:0f:b1:59:a4:
ef:5c:07:00:ab:3c:9e:f8:cf:ba:36:7f:6b:35:cc:3f:8f:91:
ad:ed:0f:b7:88:ce:d4:98:30:f0:1a:c1:6e:e8:f6:77:ea:bd:
c0:e7:6d:a5:8b:62:56:51:33:0b:2d:27:47:2d:b9:ee:a0:37:
9f:6e:ce:97:63:11:3b:af:e8:57:8b:66:bb:ad:79:76:30:c8:
96:e9:55:96:90:8b:ae:47:fd:5a:07:5a:93:33:6e:3a:7f:21:
b6:91:d0:32:07:e2:f3:3d:c3:4b:b1:ac:85:8e:e0:d1:91:4a:
93:80:f4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 06:33:30 2026 by rpki-client