Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
File: NZTKzdk15Fz3HGFngKGx1Kpox7U.mft (raw, json)
Hash identifier: 8Ko6R1G9w/lGgz2WYF6SWmYysyz5aqYvNJtxai2m2kc=
Subject key identifier: 56:DF:C3:C0:BF:B9:5F:B0:54:6A:BE:59:B7:40:24:8E:27:1D:E1:25
Authority key identifier: 35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
Certificate issuer: /CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Certificate serial: 019E8D92488868B83FC61B42592E63D90CED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
Manifest number: 1941
Signing time: Wed 03 Jun 2026 13:00:34 +0000
Manifest this update: Wed 03 Jun 2026 13:00:34 +0000
Manifest next update: Thu 04 Jun 2026 13:00:34 +0000
Files and hashes: 1: NZTKzdk15Fz3HGFngKGx1Kpox7U.crl (hash: JLQTz24xksu1WWBsdXSDOgtavk0MmoYhhPr8Qf/CsyM=)
2: Wdq9UIvFzgDqiYju4znORuRnk4A.roa (hash: eltS6TqFGo2PicugCL3Z+e5ML3gTGzg3RZI9Plv8FIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:92:48:88:68:b8:3f:c6:1b:42:59:2e:63:d9:0c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Validity
Not Before: Jun 3 13:00:34 2026 GMT
Not After : Jun 4 13:00:34 2026 GMT
Subject: CN=56dfc3c0bfb95fb0546abe59b740248e271de125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d0:0a:fc:69:f9:91:76:35:6b:34:3f:e5:28:
35:27:2c:8b:07:c6:17:f8:5c:0a:df:d5:88:40:a3:
87:53:b0:a7:23:da:10:79:c4:e8:9c:5e:12:e1:29:
7e:5e:e6:1b:59:da:15:93:84:6d:72:dc:72:60:3a:
fa:af:f1:1d:0c:f1:fb:d5:94:b9:6a:dd:80:69:18:
6a:69:fd:42:7b:ca:d3:6f:9d:8a:c9:a5:df:7b:e7:
bb:77:a9:6b:5b:24:a4:ab:ee:45:ea:87:15:35:34:
e4:70:68:70:ac:38:f4:73:8f:24:64:17:c5:02:2f:
8c:85:c9:99:16:01:b3:4c:b2:1f:88:a5:1b:30:67:
dd:ad:9f:25:76:60:7d:5c:a7:a2:95:5f:7b:c9:7d:
86:f1:28:d1:ec:4d:dc:39:45:40:c5:4c:c1:12:de:
74:f7:a3:47:5c:d1:5b:30:49:4d:58:dd:5c:9f:15:
85:06:cd:fa:51:f7:ae:d0:b2:84:92:8b:1d:24:95:
a6:11:8e:36:0a:79:93:5e:8a:40:c6:dc:ba:66:8f:
aa:dc:f2:01:68:70:0d:d8:2c:81:05:fd:f8:7c:a1:
c8:8a:ba:48:b7:cb:b4:92:72:6f:cf:a4:23:bf:bb:
6d:27:1e:1f:51:da:aa:c7:c0:67:54:55:c5:ab:79:
16:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DF:C3:C0:BF:B9:5F:B0:54:6A:BE:59:B7:40:24:8E:27:1D:E1:25
X509v3 Authority Key Identifier:
keyid:35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:54:4a:7e:41:5f:76:a9:e3:76:78:26:66:ab:a9:dc:5e:b3:
aa:3b:32:6c:89:e5:d7:4f:24:94:29:7b:39:77:21:1b:78:e5:
fb:19:3f:df:1d:eb:67:af:67:3d:92:43:7b:0f:74:79:f7:2d:
2d:01:7f:53:32:7c:5c:1c:e7:b7:f1:3c:aa:eb:bd:eb:a3:99:
bb:bb:5b:26:6d:df:1c:0d:3f:18:f8:ff:d8:fe:83:40:c7:bb:
6b:9e:9d:02:62:0c:d2:3b:c8:7b:15:81:ec:31:d0:94:1c:b0:
d7:87:aa:ba:1a:c6:21:3c:e3:28:02:4a:8a:b4:b7:8a:bf:ec:
1b:99:42:2a:63:6e:21:13:fd:14:3e:f2:f4:fb:1a:8b:f9:98:
a6:fe:84:3e:f7:7a:c0:48:53:1b:cc:14:60:a8:3f:db:d2:c0:
01:eb:95:d7:86:d0:6c:5d:14:43:17:30:38:fd:08:40:ba:9a:
3e:bf:55:d6:f5:57:2b:2b:e6:da:9a:25:03:0c:40:e9:ad:0b:
bc:17:7b:89:e6:6e:77:50:4b:74:6d:9c:94:9d:95:cd:ae:e2:
d5:75:ed:ed:76:7d:eb:2e:b7:7e:52:67:ad:85:00:48:23:aa:
c4:f3:7d:6f:71:c6:67:e2:d5:56:c5:57:02:d5:2b:00:87:b2:
de:0e:19:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:52:51 2026 by rpki-client