Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
File: nzcg6XD6oOB_UKY4nnrlOvpDnas.mft (raw, json)
Hash identifier: KrALVeK+yP5f1p/Pc6oDeoPU8aVgFyCTRV/OaldlR2U=
Subject key identifier: FB:81:93:1D:3A:AB:CA:EE:EE:73:41:ED:38:7A:D3:BD:29:A9:0C:B5
Authority key identifier: 9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
Certificate issuer: /CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Certificate serial: 01A19355C358372E67AD64616A30A332BC0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
Manifest number: 1AD6
Signing time: Sat 31 Oct 2026 19:00:33 +0000
Manifest this update: Sat 31 Oct 2026 19:00:33 +0000
Manifest next update: Sun 01 Nov 2026 19:00:33 +0000
Files and hashes: 1: DwjBds5b0bny3-dZb3jOPo6oE6o.roa (hash: Rkq+xz9kCRAZI1zfzUNT6Gu5M/oAmAXmbyM5y+/YH1I=)
2: nzcg6XD6oOB_UKY4nnrlOvpDnas.crl (hash: vvUdKDVmhnl0EV6ErUFGUTwnOjv2R0Aq3qngs1PwBu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:55:c3:58:37:2e:67:ad:64:61:6a:30:a3:32:bc:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Validity
Not Before: Oct 31 19:00:33 2026 GMT
Not After : Nov 1 19:00:33 2026 GMT
Subject: CN=fb81931d3aabcaeeee7341ed387ad3bd29a90cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:43:61:3c:65:8b:d6:83:6e:f0:cf:bf:22:e8:
79:59:8a:c9:84:10:76:c8:b3:39:61:eb:9b:f7:3d:
82:b8:ee:c3:57:34:62:0a:02:63:02:5f:59:00:46:
63:10:67:a7:46:9e:f0:30:fe:0b:28:a6:ee:90:34:
e2:2a:9d:e7:60:c0:19:df:24:31:63:b8:8a:a7:98:
f2:04:a1:f7:38:6c:8d:ed:8d:07:94:4d:3e:0c:e4:
02:9b:91:b9:27:05:f0:5a:3f:be:e8:cc:ff:c1:6b:
ff:28:04:16:eb:68:37:66:b5:30:78:9a:1e:09:a4:
7c:a2:45:75:ac:f0:a3:eb:55:9e:72:81:a4:36:b2:
ec:8f:1b:f2:a9:4e:f7:7d:28:ae:7e:2c:8d:0f:2d:
9d:1c:9a:a2:33:90:6b:6c:78:ef:f0:39:d7:40:de:
07:e1:4d:6a:84:9a:85:06:b2:3d:c5:40:94:41:ff:
94:1e:89:ad:36:77:6e:07:de:fa:6f:96:cb:87:42:
81:ef:07:29:a2:f5:ad:98:2f:c3:32:0b:f3:b1:79:
b8:41:70:17:cc:64:3a:70:db:e6:c8:02:52:8d:32:
9e:1b:ab:72:ca:72:37:26:8c:a3:96:b3:f8:27:31:
dd:56:6d:04:c4:59:26:f2:cd:b1:28:d1:04:9d:c6:
f3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:81:93:1D:3A:AB:CA:EE:EE:73:41:ED:38:7A:D3:BD:29:A9:0C:B5
X509v3 Authority Key Identifier:
keyid:9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e2:7d:2f:d2:1e:5a:a1:a1:ec:1a:32:63:c3:de:57:17:2a:
c1:43:7b:72:cc:03:36:ba:fa:07:2a:98:26:94:2a:1b:03:3c:
d4:ed:1c:cf:fa:9a:37:82:f0:96:1f:51:d6:f2:d0:b7:58:15:
49:f6:b5:8a:95:75:88:e9:8b:e5:62:37:65:a8:15:e1:27:14:
d7:a8:a7:4e:99:bd:cb:b1:da:d8:b9:d4:56:9f:72:da:7b:4c:
cc:36:69:c0:35:0f:5a:10:fe:69:15:44:8f:14:d6:5d:d8:61:
21:ed:f1:fa:53:f9:c6:4f:c9:49:ff:b7:21:7e:7f:07:24:51:
12:32:31:3d:27:b0:50:10:ae:f3:43:b7:65:04:ec:89:6a:14:
7a:9d:f5:c5:e7:06:9b:e7:ad:8a:83:1c:1d:53:02:e0:32:06:
24:61:11:3a:c5:ec:24:2d:23:c7:8d:b7:0f:df:c9:0c:2c:52:
84:fb:99:f2:dd:63:63:61:be:00:c2:b9:0b:2c:28:9f:a7:44:
e2:43:ca:c8:50:cc:9d:2d:f4:f0:a9:27:68:a7:6a:fc:dd:aa:
84:82:34:5f:28:4b:ba:28:de:66:ab:e3:01:b1:90:27:28:ad:
9f:93:e9:cd:28:a2:46:3e:c8:3d:bb:6d:c7:33:09:aa:e5:41:
4e:44:0b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:56:38 2026 by rpki-client