Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
File: NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft (raw, json)
Hash identifier: Eyy8lKhe7uNhJ+DrtvuXqVba2k7aTxPOIQYUdSlMRmI=
Subject key identifier: 58:CE:B1:5A:58:E6:83:47:2F:89:F8:6C:F1:FD:A6:93:20:A5:12:9C
Authority key identifier: 35:90:2C:9B:64:0F:C6:D5:7C:23:77:14:ED:24:DA:17:F2:D3:E4:74
Certificate issuer: /CN=35902c9b640fc6d57c237714ed24da17f2d3e474
Certificate serial: 019D3789507C619EF162EE0C25290D6A6692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
Manifest number: 15C9
Signing time: Sun 29 Mar 2026 03:00:39 +0000
Manifest this update: Sun 29 Mar 2026 03:00:39 +0000
Manifest next update: Mon 30 Mar 2026 03:00:39 +0000
Files and hashes: 1: GxZT3TgjmIKtK7JQv_iwpTOXSpw.roa (hash: wlz5MW9CjtjeRzCliv1fAr4V5uA0E+YvY/dHxPuCPaY=)
2: NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl (hash: jnlJ6f5g9iOl2BbGW0WomWRjtic8wiQGiE6pmvsdfJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:50:7c:61:9e:f1:62:ee:0c:25:29:0d:6a:66:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35902c9b640fc6d57c237714ed24da17f2d3e474
Validity
Not Before: Mar 29 03:00:39 2026 GMT
Not After : Mar 30 03:00:39 2026 GMT
Subject: CN=58ceb15a58e683472f89f86cf1fda69320a5129c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7c:5b:e8:b1:0b:c7:51:ca:78:de:21:a2:68:
b2:36:c0:4d:76:e1:20:c0:0d:77:c5:c0:d6:49:13:
b1:56:94:c9:39:e2:a2:94:a8:57:b3:79:d7:9c:49:
48:98:22:e5:c7:e0:50:b0:97:ac:e5:e1:93:bb:73:
9b:d1:45:24:32:19:61:58:6f:97:1b:4a:d7:71:a4:
cf:2c:42:ba:95:d9:b5:fa:4a:95:db:e1:1f:ce:e4:
f0:66:5e:b1:4d:00:13:df:67:4c:2d:29:76:32:6a:
79:fb:61:56:82:54:6f:a5:45:12:36:ad:b6:68:e3:
a9:ae:b0:01:9c:fd:e1:51:82:da:5e:f5:3c:48:c4:
66:60:33:8a:9d:62:3e:33:d1:f5:22:a1:47:cb:3a:
63:24:9e:0e:f9:d9:ab:18:ae:a2:bf:5d:a1:20:4c:
d0:b6:d8:d4:d1:cb:3d:35:61:76:81:6c:35:cc:6e:
16:73:16:76:ab:c0:30:d3:f2:94:d6:63:fe:e8:8e:
7d:67:57:6e:19:c7:e9:e4:22:16:6b:51:6e:6a:80:
1b:64:64:81:d4:ea:b6:e3:9f:06:55:70:b6:84:80:
3b:cb:47:f7:d9:23:c1:32:77:67:27:c1:a5:e8:90:
e3:ac:a1:05:4b:4f:17:3b:a3:db:ea:7f:d3:c0:57:
44:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CE:B1:5A:58:E6:83:47:2F:89:F8:6C:F1:FD:A6:93:20:A5:12:9C
X509v3 Authority Key Identifier:
keyid:35:90:2C:9B:64:0F:C6:D5:7C:23:77:14:ED:24:DA:17:F2:D3:E4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:98:10:ed:12:35:29:c8:f7:57:d8:74:51:e6:65:26:64:1c:
83:9c:8e:bc:74:f2:f9:44:21:c5:12:1b:43:3e:78:8e:1c:3d:
4a:5f:36:0e:8b:49:d3:8d:48:b4:31:75:0b:6b:23:d8:4c:65:
f8:fd:ba:8a:a9:e4:c6:8b:7c:b3:2f:bc:1e:3a:37:ef:bd:6e:
20:8c:5e:80:13:a5:0a:81:10:c5:fe:b4:9e:52:9e:e2:b5:bd:
8f:40:1a:2f:21:b9:e7:ac:e4:56:39:74:18:d0:64:d6:34:06:
f5:4c:2e:9c:58:06:a1:5f:a7:fc:96:80:b1:55:c1:77:2b:6d:
7b:4d:8a:d0:ca:68:c1:42:5e:c4:7f:45:0d:70:7e:e1:1c:1f:
ef:de:9a:c3:0e:ae:1b:be:81:4c:c4:a0:82:00:f0:ca:8c:44:
59:be:eb:e8:d3:77:75:4e:8a:b0:31:bd:a2:e0:98:7e:89:f4:
bd:40:db:44:86:ee:c3:ea:b7:2a:8a:a9:13:14:f1:14:27:47:
0e:f2:71:2a:2c:08:e7:e9:9a:b0:e2:63:a8:57:7c:74:db:d5:
34:db:6d:5d:1b:27:20:3a:c2:79:85:8b:60:dc:13:7d:e9:eb:
79:88:da:70:1e:9b:7d:13:b8:fe:ad:23:51:ce:78:5b:f4:3e:
45:7f:f6:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iVB8YZ7xYu4MJSkNamaSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OTAyYzliNjQwZmM2ZDU3YzIzNzcxNGVkMjRkYTE3ZjJk
M2U0NzQwHhcNMjYwMzI5MDMwMDM5WhcNMjYwMzMwMDMwMDM5WjAzMTEwLwYDVQQD
Eyg1OGNlYjE1YTU4ZTY4MzQ3MmY4OWY4NmNmMWZkYTY5MzIwYTUxMjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Hxb6LELx1HKeN4homiyNsBNduEg
wA13xcDWSROxVpTJOeKilKhXs3nXnElImCLlx+BQsJes5eGTu3Ob0UUkMhlhWG+X
G0rXcaTPLEK6ldm1+kqV2+EfzuTwZl6xTQAT32dMLSl2Mmp5+2FWglRvpUUSNq22
aOOprrABnP3hUYLaXvU8SMRmYDOKnWI+M9H1IqFHyzpjJJ4O+dmrGK6iv12hIEzQ
ttjU0cs9NWF2gWw1zG4WcxZ2q8Aw0/KU1mP+6I59Z1duGcfp5CIWa1FuaoAbZGSB
1Oq2458GVXC2hIA7y0f32SPBMndnJ8Gl6JDjrKEFS08XO6Pb6n/TwFdEQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjOsVpY5oNHL4n4bPH9ppMgpRKcMB8GA1UdIwQY
MBaAFDWQLJtkD8bVfCN3FO0k2hfy0+R0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlpBc20yUVB4dFY4STNjVTdTVGFGX0xUNUhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mOTZiYWYtNDFmMy00OTg2LWI5M2Et
NDE3YjRmYTU2NGVhLzEvTlpBc20yUVB4dFY4STNjVTdTVGFGX0xUNUhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9mOTZiYWYtNDFmMy00OTg2LWI5M2EtNDE3YjRmYTU2NGVh
LzEvTlpBc20yUVB4dFY4STNjVTdTVGFGX0xUNUhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZgQ7RI1
Kcj3V9h0UeZlJmQcg5yOvHTy+UQhxRIbQz54jhw9Sl82DotJ041ItDF1C2sj2Exl
+P26iqnkxot8sy+8Hjo3771uIIxegBOlCoEQxf60nlKe4rW9j0AaLyG556zkVjl0
GNBk1jQG9UwunFgGoV+n/JaAsVXBdytte02K0MpowUJexH9FDXB+4Rwf796aww6u
G76BTMSgggDwyoxEWb7r6NN3dU6KsDG9ouCYfon0vUDbRIbuw+q3KoqpExTxFCdH
DvJxKiwI5+masOJjqFd8dNvVNNttXRsnIDrCeYWLYNwTfenreYjacB6bfRO4/q0j
Uc54W/Q+RX/29Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:47 2026 by rpki-client