Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
File: U_NZCAnRh_ezYfskzUP5P2ZLILM.mft (raw, json)
Hash identifier: ISY90Ih0ZnFjOwBYD9SVpWojrzJ0bzOdliru8Hzvsug=
Subject key identifier: AF:8C:3F:EA:73:4D:B6:56:7B:2D:DC:93:A6:BF:00:A4:55:17:84:0C
Authority key identifier: 53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
Certificate issuer: /CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Certificate serial: 019E9C97EC2A85DBE31AC3EBE64F04E93BCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
Manifest number: 194D
Signing time: Sat 06 Jun 2026 11:01:02 +0000
Manifest this update: Sat 06 Jun 2026 11:01:02 +0000
Manifest next update: Sun 07 Jun 2026 11:01:02 +0000
Files and hashes: 1: 1-UcYB_bC1Q74xvMeMptRl_v4GSM.roa (hash: CZsJE/C7u1KFT+BSHVUsJyL6cOqDP5qXckw/MXkpdZw=)
2: IADl1Gv9BuddIG-0OHvNCj39-5w.roa (hash: S9Dxk12pt58eWH9jO5GDFxrOLIjhAQo2JWChQTtOvm0=)
3: U_NZCAnRh_ezYfskzUP5P2ZLILM.crl (hash: /7+HUU6J2mHJx/w1Hs3iAg+UavAoTTspmONe/kFtk20=)
4: ctdO6KeqKtoQl8jil7v642rgLAY.roa (hash: 0Ysbxgr5wlnCLuuipo5HyI6PWUVSDIOqUxGUbxE7UC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:97:ec:2a:85:db:e3:1a:c3:eb:e6:4f:04:e9:3b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Validity
Not Before: Jun 6 11:01:02 2026 GMT
Not After : Jun 7 11:01:02 2026 GMT
Subject: CN=af8c3fea734db6567b2ddc93a6bf00a45517840c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a8:e1:16:83:e9:27:20:72:10:2e:c1:86:5f:
5e:89:3e:00:6e:de:a1:c7:fe:e5:15:d3:68:0f:4c:
9f:53:27:3c:33:0f:31:c0:16:5e:d2:31:f1:7d:f9:
e9:83:1e:9b:ec:25:b9:e7:af:5d:1a:d0:9b:5a:b9:
6f:2c:90:a2:e0:2b:ca:c8:4d:e1:36:30:7d:e6:de:
9d:6d:31:d1:36:1f:2f:72:ce:45:af:e4:ef:6f:60:
a9:27:56:d0:1c:85:f3:28:7b:1d:20:9c:fb:0d:f8:
1d:a6:ce:9d:28:22:8d:44:e5:e5:00:7a:d5:79:08:
9a:20:02:2f:06:79:ee:e4:a2:46:9d:24:8f:ce:0f:
c9:33:fa:2f:bc:24:0d:d3:cb:2a:27:2a:c9:36:55:
f5:3d:d1:38:57:4e:60:5f:a2:a9:9b:6b:5f:3c:fb:
fe:ef:f7:ef:40:ba:ff:a9:5c:60:cf:94:a3:d2:c0:
58:7b:9a:e3:13:2f:51:9a:bc:fb:4f:01:6d:5c:46:
28:5c:4d:bd:1a:f0:2b:83:c6:56:66:c2:00:d1:e4:
2b:9b:a3:39:84:ea:f7:92:96:1e:16:f8:c4:c6:15:
66:0d:cb:98:cf:ff:b2:89:ca:1c:bc:49:67:bc:3d:
50:52:12:fc:4b:d1:3e:e6:96:e7:ba:a4:90:50:ae:
f3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8C:3F:EA:73:4D:B6:56:7B:2D:DC:93:A6:BF:00:A4:55:17:84:0C
X509v3 Authority Key Identifier:
keyid:53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d9:20:18:30:c5:f0:3d:63:aa:2b:0b:f5:84:cd:1b:39:4c:
30:21:43:cd:07:49:c0:c9:57:17:fb:a4:8a:35:41:56:f7:85:
9a:09:a7:8f:b6:cf:b7:26:ea:44:90:3e:4c:df:be:5d:3a:a4:
48:37:06:6a:1a:75:36:6c:d7:e0:fb:4e:42:4c:5e:a6:1c:23:
6e:b1:37:5c:12:2d:41:37:39:ca:3c:f1:1d:c2:49:9e:85:d3:
d0:10:de:93:e3:e1:84:af:df:47:64:f7:6f:16:2e:b5:a1:05:
1f:06:6d:31:a2:fd:d4:d9:68:76:50:2b:3a:ae:0d:ca:ac:b4:
a5:0c:46:4d:5e:59:f4:12:2e:a6:54:e2:60:14:e4:1e:56:66:
e5:a5:49:fe:47:c9:25:fc:ee:af:c6:16:db:14:22:37:e1:2b:
53:c0:fc:17:1e:b7:d8:6b:ac:27:7d:ae:f6:af:f8:65:b4:60:
f7:b9:e6:df:a1:06:60:00:55:be:51:e7:d5:aa:d7:ab:b4:c8:
bb:a6:52:da:1d:74:05:9b:c9:5c:a5:4a:c8:b2:cb:c3:b4:ea:
f5:16:9d:b2:94:b4:0e:52:9b:f1:be:3c:c7:65:25:62:dd:6e:
26:68:27:59:52:d1:9b:f6:da:b7:d2:6f:19:88:75:4d:9a:14:
f4:a0:8c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:36:26 2026 by rpki-client