Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
File: nzcg6XD6oOB_UKY4nnrlOvpDnas.mft (raw, json)
Hash identifier: h9p/M8ikXAwhClv9b/m0WndZR5MbKBh16U6igq2OXQM=
Subject key identifier: 84:6D:38:FB:9C:69:49:72:BC:D9:00:C8:EE:6B:EF:4D:C6:8D:D8:4C
Authority key identifier: 9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
Certificate issuer: /CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Certificate serial: 01A08AC37B2136DC9B00BB6CAB7D6321589D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
Manifest number: 1A4D
Signing time: Thu 10 Sep 2026 10:01:01 +0000
Manifest this update: Thu 10 Sep 2026 10:01:01 +0000
Manifest next update: Fri 11 Sep 2026 10:01:01 +0000
Files and hashes: 1: DwjBds5b0bny3-dZb3jOPo6oE6o.roa (hash: Rkq+xz9kCRAZI1zfzUNT6Gu5M/oAmAXmbyM5y+/YH1I=)
2: nzcg6XD6oOB_UKY4nnrlOvpDnas.crl (hash: 5gwX7FjF7dVPnbdy1wlhorj1SsCYMc0gQAoYxcGlhPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:7b:21:36:dc:9b:00:bb:6c:ab:7d:63:21:58:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Validity
Not Before: Sep 10 10:01:01 2026 GMT
Not After : Sep 11 10:01:01 2026 GMT
Subject: CN=846d38fb9c694972bcd900c8ee6bef4dc68dd84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3b:c1:6e:be:f6:10:80:75:cc:03:71:68:74:
bf:ed:7a:36:11:d2:12:1c:9c:05:cf:4b:8a:5f:e1:
3d:1f:e4:34:26:f5:5c:12:d4:51:56:21:0e:1a:9d:
9b:8b:d7:df:97:02:40:72:7d:e8:59:be:ee:cd:6a:
8f:08:63:b1:15:4c:6e:b4:58:bd:f8:8b:f9:de:f8:
15:74:18:c4:65:1e:e3:72:45:1b:7c:6b:05:c1:dd:
c9:09:8c:bd:7c:40:9b:91:ac:b8:00:e6:0e:7a:37:
5b:88:29:e4:e7:fd:9d:ae:57:e4:6d:a8:d4:01:f9:
3f:8b:7c:d3:bf:37:33:8c:62:6d:f6:00:cd:02:95:
d9:46:79:39:94:76:8f:be:e3:8e:c3:b4:52:ff:c0:
f3:39:5e:20:21:43:2f:1b:53:53:a2:bf:36:ed:e6:
69:7c:a7:50:87:e4:13:92:a6:54:2e:04:87:79:c7:
c7:64:a1:12:86:83:98:28:3e:b8:a6:a9:71:72:70:
e1:b2:48:bc:62:2b:6a:00:09:0c:89:2a:f4:15:39:
5d:82:41:aa:9e:4c:50:d8:92:b9:50:5a:7d:22:25:
88:81:24:ee:5b:70:29:f2:50:cc:ba:09:26:50:2b:
e5:15:c8:7c:c8:43:e0:98:df:f2:eb:9d:9f:98:fb:
c4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6D:38:FB:9C:69:49:72:BC:D9:00:C8:EE:6B:EF:4D:C6:8D:D8:4C
X509v3 Authority Key Identifier:
keyid:9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c6:07:22:b1:90:48:6b:44:28:85:b7:11:60:82:2f:fb:30:
47:ca:e1:90:2c:01:6f:a2:93:71:60:93:db:54:81:6d:51:38:
39:0c:4d:96:80:ed:33:45:2d:6b:82:38:ff:c8:ed:f8:ea:e0:
fb:d4:66:be:d4:12:08:cb:30:b9:db:96:11:81:74:cf:de:ba:
34:7b:f5:20:a1:84:8d:68:c9:b3:eb:dc:41:f3:69:33:9a:e1:
c1:b2:15:f8:12:8a:d6:29:b5:53:c5:3e:ac:2a:66:4e:e5:00:
93:a1:b6:40:eb:d8:6a:ea:18:12:e1:f7:58:c0:7f:85:71:c2:
b1:ee:4f:88:2a:e8:76:e9:91:bc:af:87:3a:33:c1:84:76:4d:
7b:aa:30:64:23:66:01:86:90:dc:44:f3:1a:b9:94:c8:79:4f:
ba:e7:6f:25:30:9e:7a:cc:11:12:ed:85:57:93:fe:c7:99:36:
bb:40:0b:41:91:a6:95:f7:b2:4a:4c:2c:c3:4d:9d:7c:5e:80:
82:b5:2a:b6:cb:d9:e2:a9:fb:ba:85:ff:16:83:4a:c8:28:20:
d9:6a:3b:ca:09:1c:07:48:f3:23:60:dd:ce:02:80:80:ac:3c:
cc:c1:ea:44:d2:3b:fc:ae:36:74:53:b8:66:d4:95:39:2d:1a:
e3:86:d0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:55:15 2026 by rpki-client