Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
File: r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft (raw, json)
Hash identifier: j5v2J2G3icI4ZdYAWYkGqluVS/Eim8MIVviFNyY/2PM=
Subject key identifier: 0C:96:D1:1D:AF:33:6B:DD:7E:05:DB:61:68:C1:E6:83:C7:EB:4E:13
Authority key identifier: AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99
Certificate issuer: /CN=aff3596546d4620b02a9642f08b77cfe6502ae99
Certificate serial: 019CAC46AFD1ADF90A42ABD57FDC0019B41D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 02:00:39 +0000
Manifest this update: Mon 02 Mar 2026 02:00:39 +0000
Manifest next update: Tue 03 Mar 2026 02:00:39 +0000
Files and hashes: 1: r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl (hash: WA5BLNhxjraC0drad5y6Y+9FhlPswAtwFXlLjDBlH2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:af:d1:ad:f9:0a:42:ab:d5:7f:dc:00:19:b4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff3596546d4620b02a9642f08b77cfe6502ae99
Validity
Not Before: Mar 2 02:00:39 2026 GMT
Not After : Mar 3 02:00:39 2026 GMT
Subject: CN=0c96d11daf336bdd7e05db6168c1e683c7eb4e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:eb:eb:15:63:49:b1:d8:5e:42:e0:4b:48:01:
ae:6f:4c:dd:55:c5:d4:51:a0:f1:5b:9b:4f:d5:4b:
21:11:41:06:0f:b6:17:0a:1e:0a:f0:f3:b0:1d:6b:
f2:65:cf:7f:1c:90:65:e0:48:03:cb:b1:e5:81:c5:
46:b5:15:f5:f2:52:ef:20:01:e5:fb:d8:0e:0b:75:
99:6f:7c:2b:4c:dc:43:dc:e1:e5:30:f5:44:a2:cc:
5c:0c:64:1b:35:2c:61:51:09:87:d7:4d:8b:fc:fa:
49:63:22:d4:81:af:db:f4:8d:bc:f8:5e:2d:5c:23:
c9:37:14:c8:bb:fb:df:5d:09:bd:86:af:22:22:1f:
25:83:aa:11:1b:6c:26:58:81:c5:e9:52:dc:51:9c:
23:b6:81:95:4b:92:b6:23:94:e7:ad:a5:ee:8f:25:
e9:cf:62:fd:03:e3:26:78:42:a1:38:11:4d:21:bf:
11:9f:6d:68:e2:49:07:5f:ec:79:f7:7a:02:b1:15:
36:7c:ca:57:ff:28:c2:ea:8b:d0:b6:9b:fc:a8:96:
74:af:99:e7:14:07:2b:37:78:f1:82:1a:9b:17:a3:
98:5b:52:c3:b1:40:80:0a:1a:29:b2:ea:c4:0f:7c:
4d:09:8d:f8:80:51:8c:90:b3:87:8f:b8:62:35:c0:
a0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:96:D1:1D:AF:33:6B:DD:7E:05:DB:61:68:C1:E6:83:C7:EB:4E:13
X509v3 Authority Key Identifier:
keyid:AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:89:d7:d5:27:15:25:6f:fa:7f:2d:18:06:45:c8:95:d9:2f:
36:29:20:92:c0:37:ca:9e:6f:d4:db:03:2e:e6:ff:b0:c2:0b:
09:8f:50:be:6f:89:6f:58:e8:9e:06:25:f6:67:4e:30:dc:66:
d6:ee:6c:a9:7c:42:8b:83:5e:44:14:dc:03:f0:dd:09:83:7b:
c6:fd:2f:a7:53:1c:3b:85:a9:93:77:5e:cd:c4:d1:60:fa:26:
13:98:04:c0:f3:15:24:1d:98:14:aa:e8:b0:36:07:14:eb:3f:
68:b9:c7:62:7b:e2:0f:30:43:0b:d2:86:a4:e8:7f:a8:48:11:
d9:53:62:db:4a:a8:f7:80:33:9a:08:38:ea:14:61:3e:9f:7f:
55:aa:74:2b:52:fe:dc:6d:69:42:1f:9a:19:de:1e:5c:ee:15:
42:25:6a:e9:85:cf:a6:3b:51:8b:6d:e6:7c:65:5b:e1:c2:91:
7e:45:90:aa:e4:95:e2:50:59:78:7f:2b:e8:d1:f0:26:36:71:
4d:93:77:2f:c6:05:74:7b:b9:c0:ca:98:27:ab:f3:b2:d0:d4:
ad:e8:35:ae:b6:1d:4e:22:6f:be:c5:87:f2:11:aa:22:71:8a:
1d:de:81:93:5f:4f:a9:92:49:4c:e6:20:f5:76:95:4d:a9:6c:
a7:db:88:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:24:26 2026 by rpki-client