Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
File: nzcg6XD6oOB_UKY4nnrlOvpDnas.mft (raw, json)
Hash identifier: iTLxuIPYH185hqWQi9CSdbpyBeRr/G2G1b1IUwE2PjM=
Subject key identifier: FF:04:6C:CA:6F:8A:AF:B7:E9:19:78:54:49:6C:06:A3:C6:C4:61:D7
Authority key identifier: 9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
Certificate issuer: /CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Certificate serial: 019F9F28AA54BDE0E8534D5B78538897B880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
Manifest number: 19D3
Signing time: Sun 26 Jul 2026 16:01:10 +0000
Manifest this update: Sun 26 Jul 2026 16:01:10 +0000
Manifest next update: Mon 27 Jul 2026 16:01:10 +0000
Files and hashes: 1: DwjBds5b0bny3-dZb3jOPo6oE6o.roa (hash: Rkq+xz9kCRAZI1zfzUNT6Gu5M/oAmAXmbyM5y+/YH1I=)
2: nzcg6XD6oOB_UKY4nnrlOvpDnas.crl (hash: rje3P/0O2RLoz9tHojP5g/OVODDVOQULHWp70FmEGgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:28:aa:54:bd:e0:e8:53:4d:5b:78:53:88:97:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Validity
Not Before: Jul 26 16:01:10 2026 GMT
Not After : Jul 27 16:01:10 2026 GMT
Subject: CN=ff046cca6f8aafb7e9197854496c06a3c6c461d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d6:8a:02:52:0a:f9:f9:fa:a1:94:6b:76:be:
0e:39:49:df:14:58:c6:74:89:45:0c:1f:09:6a:91:
fd:8d:7f:a5:04:f0:a7:73:ca:72:12:ae:a9:2a:d8:
39:f4:3d:07:a0:0f:88:da:f3:82:cc:cf:06:5e:21:
69:a0:c7:fd:bb:ec:5e:f6:0b:66:1e:b8:ed:8d:de:
34:ad:97:84:f8:3e:12:30:37:e5:23:0f:e9:b2:bc:
61:0f:43:90:c9:44:18:4d:05:87:e1:ae:19:22:4a:
72:5b:6f:2e:e4:ae:07:42:45:8d:ba:1a:2f:d4:94:
b6:7a:47:8d:50:12:b2:f6:72:5b:b9:9f:f4:f3:b7:
2c:1c:a7:c8:11:fe:03:64:e8:f0:d6:c0:a0:6b:0f:
d0:ea:c7:7a:9c:90:09:19:ca:77:33:b4:cc:46:c8:
83:9e:c2:f9:e6:61:6c:6e:ee:d9:cc:53:41:34:74:
1d:40:f0:29:57:92:55:ee:b6:2b:67:70:47:eb:7c:
48:7a:44:7a:18:2a:a2:cd:22:93:d7:ae:45:f7:d6:
32:1d:ec:62:87:bf:d1:f6:e9:33:da:8e:97:a7:0c:
14:19:ff:ed:bb:12:62:ec:d2:c7:2d:19:8d:ba:1e:
e1:91:55:6f:f0:b8:d1:69:3e:b7:a8:ac:5d:1e:cd:
c7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:04:6C:CA:6F:8A:AF:B7:E9:19:78:54:49:6C:06:A3:C6:C4:61:D7
X509v3 Authority Key Identifier:
keyid:9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7d:18:26:b2:ea:a5:ee:5b:7e:74:af:9b:9c:6e:0a:1f:c3:
7a:39:fe:e6:82:6b:ce:a1:ca:36:bb:63:b1:3f:dc:f0:04:c9:
b1:e4:14:c6:d4:2a:51:f3:a9:5d:e4:4e:27:f9:88:43:6a:e1:
69:79:8d:b5:16:f4:fa:9b:a7:11:21:17:92:e8:15:57:b9:26:
7e:14:21:8a:59:5e:1c:55:35:ab:58:8e:47:fc:d2:7e:51:e8:
09:3a:0b:f8:f7:29:eb:47:4a:48:26:bc:31:9e:b6:f6:f7:e8:
b1:74:31:99:88:a7:2c:0a:67:c9:46:7e:14:90:a5:81:9f:93:
96:85:a6:a6:e9:b9:e4:87:99:e9:b0:35:89:dd:a7:65:e9:27:
8c:ab:ed:fe:2a:69:3c:a8:20:6b:ba:f6:24:44:5d:fd:7c:11:
8b:23:24:9e:b4:2a:ab:03:72:d7:7e:3d:88:59:16:6e:ef:2f:
67:78:5a:2b:67:04:4e:e1:a0:79:6b:de:5c:33:d5:be:75:76:
ca:04:ea:67:df:25:53:ec:50:e0:f9:2d:bf:eb:59:81:05:fa:
40:12:be:f7:5a:74:0a:11:9c:e2:b9:8e:94:93:78:c9:da:62:
8a:ec:a0:8d:ab:75:76:9f:11:79:a9:d4:20:17:32:92:a6:47:
0a:16:e4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:07:27 2026 by rpki-client