Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
File: RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft (raw, json)
Hash identifier: j9i0qL30q4q4m5Pkd5HRPmyMu65jvU3k+eJnxdbun9E=
Subject key identifier: 4F:8E:11:C0:E7:C0:F3:BA:7F:A6:02:4E:36:D1:87:7E:7C:E1:C1:25
Authority key identifier: 44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
Certificate issuer: /CN=44d64dac03f1a57c1931667118048d82c43c5540
Certificate serial: 019D3909E831885CDF9633EB01EB1B475C24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
Manifest number: 0F0B
Signing time: Sun 29 Mar 2026 10:00:43 +0000
Manifest this update: Sun 29 Mar 2026 10:00:43 +0000
Manifest next update: Mon 30 Mar 2026 10:00:43 +0000
Files and hashes: 1: 6FlvO6wUgf9ecpKA1EuuoZxooB0.roa (hash: aEzLbUYuZvHpFrzr2sZaateqbjh/th5NR4O+uOuzOMQ=)
2: RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl (hash: hA/RfdweZVLbpmGt/1rWhNDOBIgPoxSZCWEnqMgFYSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:e8:31:88:5c:df:96:33:eb:01:eb:1b:47:5c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d64dac03f1a57c1931667118048d82c43c5540
Validity
Not Before: Mar 29 10:00:43 2026 GMT
Not After : Mar 30 10:00:43 2026 GMT
Subject: CN=4f8e11c0e7c0f3ba7fa6024e36d1877e7ce1c125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4e:72:5c:8f:c9:3c:aa:70:73:6d:8f:a3:9d:
28:c1:74:2f:a5:06:58:a9:79:bd:46:8f:70:49:2f:
99:d0:47:fa:72:9d:cc:05:9a:8d:57:13:5f:0b:7b:
40:e8:1d:59:62:02:42:d2:0a:d9:c8:2e:d5:72:3d:
90:65:54:b1:be:bc:e7:63:81:cb:d4:0f:1b:93:45:
73:66:0d:65:14:d9:93:2f:89:44:b4:f9:22:bb:26:
a9:8e:c4:9f:8c:63:60:74:99:27:5c:e1:27:43:20:
e9:1f:95:00:e4:f6:cc:93:c8:c6:34:b4:46:24:12:
95:71:a1:db:13:a1:20:15:99:89:fe:70:2d:9d:8a:
b3:19:a0:24:b8:42:89:aa:3b:fa:f2:fd:de:b6:79:
be:2f:75:54:71:b0:80:5d:6d:b8:aa:c4:37:fe:b5:
c3:17:d8:a4:21:9a:68:6c:6e:d8:2d:9e:de:af:d9:
9f:e1:6d:7e:d6:f2:20:48:1b:69:43:33:d0:cc:c1:
c7:26:66:b4:8d:e5:fd:d1:9c:df:38:8e:3e:e0:c3:
5e:a0:a5:9e:8d:45:f8:52:81:91:66:04:3c:16:a1:
70:5f:f0:4b:00:29:bc:80:bb:92:2c:c7:98:65:15:
d5:48:f5:30:46:42:0a:fc:f4:e4:e7:b9:c0:b6:b7:
a3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8E:11:C0:E7:C0:F3:BA:7F:A6:02:4E:36:D1:87:7E:7C:E1:C1:25
X509v3 Authority Key Identifier:
keyid:44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:cc:b7:a8:96:29:bc:e8:03:3f:e8:b9:b1:cc:41:f4:0c:77:
d5:54:1a:2a:fc:cc:20:f2:cb:0b:1a:00:6d:46:d4:11:18:d9:
d2:fb:d8:98:b2:ec:3c:81:ae:1b:9b:01:b4:d7:4f:25:ec:2a:
78:ef:7a:05:4c:7e:64:70:74:61:70:03:32:87:12:53:19:4a:
c8:20:4b:9f:44:c4:a6:b9:07:bd:50:69:d6:9b:45:cc:ed:82:
3d:31:11:5f:b1:fb:50:c9:02:70:f7:be:83:0d:11:5f:73:4c:
54:b7:84:a0:bd:16:74:b0:01:7d:4a:1a:28:3b:6a:20:62:b1:
a0:04:98:06:59:ef:b4:bc:93:fd:9f:36:a4:92:f9:51:02:62:
70:b9:f8:aa:83:b7:11:b5:4a:fe:36:da:b1:d6:92:4f:25:2d:
84:04:37:7f:85:92:e9:a0:13:ab:64:11:42:65:ae:07:23:82:
b8:5c:23:8b:74:ab:87:63:57:04:fd:df:3e:e3:91:e2:ca:3b:
b5:f5:c9:88:34:39:da:d1:9b:7c:30:a3:7b:b5:01:d1:e7:c3:
71:4b:4b:4c:7a:21:41:3d:19:dc:ee:ea:a2:49:09:ec:e7:a9:
0f:ea:8c:6f:84:81:a6:ed:fa:3b:40:65:ee:cc:c5:28:9e:62:
1b:92:90:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:56:06 2026 by rpki-client