Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
File: RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft (raw, json)
Hash identifier: n8mrpgf22H+fRzYS6tf1ZNZdbEFpaNDxjBdlwBFtQIU=
Subject key identifier: E0:34:5F:26:12:DE:0A:81:DD:24:02:DB:91:6B:87:AD:8E:84:6D:25
Authority key identifier: 44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
Certificate issuer: /CN=44d64dac03f1a57c1931667118048d82c43c5540
Certificate serial: 01A115CEE3D6AFB1DB05BF95FA0A7DE42935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
Manifest number: 110B
Signing time: Wed 07 Oct 2026 10:00:42 +0000
Manifest this update: Wed 07 Oct 2026 10:00:42 +0000
Manifest next update: Thu 08 Oct 2026 10:00:42 +0000
Files and hashes: 1: 6FlvO6wUgf9ecpKA1EuuoZxooB0.roa (hash: aEzLbUYuZvHpFrzr2sZaateqbjh/th5NR4O+uOuzOMQ=)
2: RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl (hash: Wc/8iEXHBE2wBf9OB63TLaJBeHo5v78IEMFovDWtmmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:ce:e3:d6:af:b1:db:05:bf:95:fa:0a:7d:e4:29:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d64dac03f1a57c1931667118048d82c43c5540
Validity
Not Before: Oct 7 10:00:42 2026 GMT
Not After : Oct 8 10:00:42 2026 GMT
Subject: CN=e0345f2612de0a81dd2402db916b87ad8e846d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:37:ca:e4:e7:b4:3e:a8:df:6a:25:19:e5:cc:
09:02:f4:a5:ab:76:af:e0:9e:68:18:ea:dd:9f:38:
9b:4c:c8:3e:ea:75:1d:66:9c:d9:cd:9e:87:17:22:
62:20:74:9c:bc:f0:5b:a6:a8:a1:14:5c:d7:86:85:
95:8e:18:fa:da:ad:8c:9a:8c:b3:b5:2f:bc:93:f7:
3c:20:1e:31:83:ef:cf:4d:b3:2d:eb:80:3e:7a:8a:
f8:3d:6c:e8:20:ae:ea:c6:cf:c6:53:8e:7c:3e:3c:
7f:6b:00:ba:c3:e0:bd:bb:6a:71:40:49:e8:0d:46:
c4:59:b4:b8:73:4d:6e:9c:f6:bb:49:63:ad:82:aa:
b7:82:2e:1e:24:86:55:5e:3c:d1:95:37:ed:cc:36:
32:79:ac:d6:96:1f:88:18:53:16:77:f3:63:10:39:
f0:db:ed:4d:37:a5:a0:f0:fd:e2:b2:27:30:fe:07:
8c:35:ea:76:73:66:1e:b3:25:96:86:38:c3:5b:1e:
0a:1d:4f:0a:fd:56:d0:52:ca:57:19:fc:af:30:a2:
a0:13:ed:3e:c1:ae:2e:12:83:ec:21:7e:f3:14:23:
fd:e5:ef:02:21:84:3c:15:e2:0c:7d:6a:8b:f7:de:
0c:41:b1:6f:15:46:89:1d:0f:e3:db:1e:38:c0:b8:
5a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:34:5F:26:12:DE:0A:81:DD:24:02:DB:91:6B:87:AD:8E:84:6D:25
X509v3 Authority Key Identifier:
keyid:44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c2:03:c9:35:62:cd:61:7e:fb:98:95:50:26:d3:e0:a6:88:
c4:bb:11:d9:d3:43:62:b0:d0:9b:73:38:ce:a9:c5:2b:51:8e:
ae:25:35:24:ff:f0:66:63:a4:14:23:80:15:2b:14:2f:dc:3e:
2c:53:0f:eb:6a:97:69:3c:df:d5:1a:81:b5:5f:81:f2:3c:b3:
98:08:aa:e6:1c:e1:92:70:9a:1f:65:ed:de:22:9a:5d:81:39:
cf:de:eb:08:0b:85:ab:a2:aa:e1:c3:6b:28:d8:16:87:99:32:
0a:33:e0:d6:68:b3:f8:4c:19:35:07:a8:fe:9b:7c:c2:ed:91:
3a:23:d9:ec:69:a4:2a:df:2e:d6:56:30:77:18:3f:a6:83:f1:
d1:2f:62:b4:bb:fd:21:e0:9f:12:e9:fd:f9:79:42:87:7a:17:
bc:9d:3b:26:36:05:bf:3c:e0:0d:41:bd:31:07:20:da:2a:6a:
6f:ec:12:b8:da:1b:fa:c2:f2:5a:c4:23:cc:31:5a:82:b0:9d:
aa:f3:14:bb:b0:52:fb:45:fd:d8:5a:89:61:c6:7e:39:9a:41:
12:eb:ab:94:5d:39:f2:5b:65:e8:d9:2c:b2:ee:71:de:94:3b:
99:a7:4d:44:99:a2:ce:05:bb:f1:d5:6e:44:51:f6:a3:58:1b:
1b:31:00:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:06:40 2026 by rpki-client