Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
File: NZTKzdk15Fz3HGFngKGx1Kpox7U.mft (raw, json)
Hash identifier: yqrZHfV11vPvoW2OTrQwzXt719TQxSRp9blsSZUJSaI=
Subject key identifier: CC:49:8D:A7:8B:07:0D:2E:89:6C:2E:99:6A:C9:2A:B5:88:04:89:CD
Authority key identifier: 35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
Certificate issuer: /CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Certificate serial: 01A06C8312C0AE718E7AE544D228232F51B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
Manifest number: 1A39
Signing time: Fri 04 Sep 2026 13:02:04 +0000
Manifest this update: Fri 04 Sep 2026 13:02:04 +0000
Manifest next update: Sat 05 Sep 2026 13:02:04 +0000
Files and hashes: 1: NZTKzdk15Fz3HGFngKGx1Kpox7U.crl (hash: JWmB1HcaRebCyJvBbMMzf3e8y2S88QmoeTtI4LrZ8oQ=)
2: Wdq9UIvFzgDqiYju4znORuRnk4A.roa (hash: eltS6TqFGo2PicugCL3Z+e5ML3gTGzg3RZI9Plv8FIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 13:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:83:12:c0:ae:71:8e:7a:e5:44:d2:28:23:2f:51:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Validity
Not Before: Sep 4 13:02:04 2026 GMT
Not After : Sep 5 13:02:04 2026 GMT
Subject: CN=cc498da78b070d2e896c2e996ac92ab5880489cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6f:b2:58:e1:3a:f5:cd:7b:e6:a9:ae:5f:9e:
93:a2:06:aa:03:f9:a3:4c:85:e5:95:ac:85:f7:02:
c7:0e:c8:a2:95:b6:db:cc:93:90:41:cd:cc:1e:44:
37:b0:c5:3b:71:4e:9c:5c:70:29:3d:1e:db:e9:00:
1b:0d:cb:0e:63:a2:e1:d5:a1:24:b0:19:57:05:0f:
6c:70:09:5e:1e:3d:48:c7:65:e0:6a:a0:d4:94:de:
e7:64:79:78:3a:2c:c1:de:c5:33:4b:9d:0a:66:3f:
c4:41:ec:62:5d:93:38:9e:0b:cd:c4:4c:e4:a9:a7:
06:9b:ff:73:08:ca:dc:7b:dc:2e:57:2a:66:c7:9b:
dd:c2:ee:c5:89:b5:53:81:7d:ab:49:c6:29:be:78:
af:63:4b:c9:41:07:41:6a:40:ff:b4:2e:fb:08:e9:
20:c0:76:49:05:f3:c0:08:e4:e0:d2:40:e3:3c:08:
4e:b3:ff:14:8f:55:c9:67:97:93:f5:65:14:e3:6f:
e6:be:de:ea:11:f9:58:24:75:d6:b9:73:ae:c6:ae:
6c:df:39:e3:a2:cb:14:4e:eb:9c:06:fb:24:4a:d2:
a0:d2:14:b1:d1:47:7f:52:62:91:6c:d1:fa:5a:d0:
73:18:c4:dd:db:37:27:f2:ba:3f:69:b4:3e:2c:8d:
46:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:49:8D:A7:8B:07:0D:2E:89:6C:2E:99:6A:C9:2A:B5:88:04:89:CD
X509v3 Authority Key Identifier:
keyid:35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:df:2d:68:9b:c3:de:4c:d2:ad:c7:b0:6f:17:96:de:33:ba:
12:2a:55:cd:67:25:19:5b:4b:97:b0:33:13:87:a0:10:35:8d:
72:c2:58:c7:96:2d:a5:0b:ba:82:9e:12:75:96:84:47:70:1b:
aa:5d:f3:2b:39:a6:7c:7e:dc:9b:1d:ce:4d:8e:bc:e6:ea:cb:
2b:bb:6a:a6:0d:d9:62:6b:fc:88:33:43:20:1e:57:3d:93:2a:
ea:1d:ea:30:3a:3c:01:85:12:b4:de:a7:0e:b8:56:ef:26:ab:
1d:73:4e:54:bd:ad:43:5d:b7:9e:97:a5:ba:a6:e8:57:8e:10:
c5:8c:55:a8:5c:ee:b9:f1:1f:07:71:ff:bf:8b:97:dd:10:16:
a2:80:33:35:9a:bd:05:b7:b5:67:f7:a0:48:27:56:36:3a:f4:
80:0a:53:f7:75:57:f9:1a:ce:3a:b5:aa:01:b6:dd:da:3b:30:
e2:2e:b5:13:ad:32:9c:80:a9:16:4a:4e:30:1b:c3:87:f8:56:
a2:24:08:59:8a:e4:56:f2:9a:99:75:e0:9e:75:a9:ff:3c:43:
98:3a:7c:bb:83:1b:f7:42:6f:35:3a:48:1d:7f:bd:4b:39:6b:
d4:d4:d1:3d:f0:09:90:4c:60:6c:03:77:52:89:ad:1b:6a:36:
ec:a2:da:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:45:16 2026 by rpki-client