Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.mft
File: nz-YcVNtYL90vfaQYMkNVBB9jjg.mft (raw, json)
Hash identifier: ceH/Jvm6HcMqcicEBjhoDh+76AP0k578+hqgnKN0SjI=
Subject key identifier: 3A:C7:DE:6B:7C:EF:32:04:FE:C8:19:18:BA:0C:6C:DF:F4:BE:76:C6
Authority key identifier: 9F:3F:98:71:53:6D:60:BF:74:BD:F6:90:60:C9:0D:54:10:7D:8E:38
Certificate issuer: /CN=9f3f9871536d60bf74bdf69060c90d54107d8e38
Certificate serial: 01A13335051CD2E836BEEE6C01E801779923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nz-YcVNtYL90vfaQYMkNVBB9jjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.mft
Manifest number: 131F
Signing time: Tue 13 Oct 2026 03:01:14 +0000
Manifest this update: Tue 13 Oct 2026 03:01:14 +0000
Manifest next update: Wed 14 Oct 2026 03:01:14 +0000
Files and hashes: 1: PYDato-ASu6UXDdHs5gP0K32nY4.roa (hash: yQRUA3xyuLF4WYI3cv0hMQ5bIo4W5JbDMtC9jfgPPDQ=)
2: nz-YcVNtYL90vfaQYMkNVBB9jjg.crl (hash: rmiMIN0OMC1FRQut8iY+nmUalxp1uzAWuHIM5A/L9XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nz-YcVNtYL90vfaQYMkNVBB9jjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:35:05:1c:d2:e8:36:be:ee:6c:01:e8:01:77:99:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3f9871536d60bf74bdf69060c90d54107d8e38
Validity
Not Before: Oct 13 03:01:14 2026 GMT
Not After : Oct 14 03:01:14 2026 GMT
Subject: CN=3ac7de6b7cef3204fec81918ba0c6cdff4be76c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0d:b4:78:c5:df:b2:04:0c:96:d1:20:6f:0a:
aa:39:b7:f7:0b:de:fd:97:7e:5b:3f:4e:45:62:d4:
95:76:65:f6:33:3d:15:1b:b2:cc:94:b1:e0:d7:47:
68:74:a4:01:42:02:97:f3:72:72:f9:2e:41:4d:cc:
ae:a5:a5:2b:a9:29:97:23:9e:aa:c1:19:1c:5c:96:
6f:94:ca:9d:fd:bf:85:63:38:cd:3a:ea:54:b8:c3:
76:45:00:38:c0:4c:50:d5:09:29:c9:44:f5:69:53:
53:1c:ca:b3:94:49:e1:c6:d5:fc:94:af:cc:50:b9:
75:27:b6:75:1c:f3:9a:c8:4a:48:63:24:4b:fe:2e:
88:45:02:66:4f:de:a9:ae:c0:80:ee:64:e0:25:53:
58:f3:b3:da:a7:c1:5a:31:6d:23:8d:e5:bd:cc:c5:
85:57:45:01:aa:41:0b:1b:c4:b0:45:48:ca:18:2f:
0e:fc:66:76:17:a0:bd:5b:e3:0c:34:f1:f4:99:18:
c8:d9:07:3d:8e:ba:90:3e:7b:40:3b:d2:6b:2a:f5:
94:c1:7c:b7:4a:d3:ec:4c:9d:eb:52:ba:13:b7:ec:
ed:78:9c:7c:99:a7:36:9b:b4:02:ec:51:f3:90:45:
3e:65:5f:e4:05:af:7e:96:28:0e:0e:75:9e:d9:b7:
b8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C7:DE:6B:7C:EF:32:04:FE:C8:19:18:BA:0C:6C:DF:F4:BE:76:C6
X509v3 Authority Key Identifier:
keyid:9F:3F:98:71:53:6D:60:BF:74:BD:F6:90:60:C9:0D:54:10:7D:8E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nz-YcVNtYL90vfaQYMkNVBB9jjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e7:5b:7d:99:98:d0:26:96:8b:8e:03:66:03:6e:11:da:9e:
ee:7e:09:44:bc:b0:3c:95:a2:c9:0b:d0:25:47:78:a7:e5:fc:
3a:57:b8:f3:a9:7b:ab:4b:14:ec:88:7e:99:04:a9:30:06:9b:
55:5a:d5:03:b2:b9:97:ea:ef:96:37:de:fe:52:c0:4e:3d:a2:
48:f0:97:b2:38:4d:72:6e:a6:19:8c:33:d1:5d:0d:1b:66:57:
61:2b:ca:3c:43:54:c0:16:c0:0f:3b:5b:5a:1a:3d:6d:a4:db:
2e:fd:e8:d0:4d:15:64:58:4a:cd:7a:bc:cd:78:35:83:0e:cd:
01:80:fa:45:1b:18:4d:70:6f:6e:96:f8:74:24:f5:91:c2:70:
a4:78:2f:ce:c8:31:bc:9a:27:5b:47:59:2d:14:c9:b1:2c:af:
42:cf:0c:9d:f4:f1:73:1e:28:95:f8:bf:93:2b:2f:90:01:30:
9b:07:48:f4:ec:b6:c7:db:c9:4a:cc:19:77:bf:3c:3c:c6:87:
68:6b:33:44:0a:af:a7:6a:75:a7:47:76:09:d6:38:cd:4f:25:
3a:8e:65:fd:c5:f8:b0:17:37:bd:e7:14:46:a8:e7:a7:1b:72:
9b:01:6b:48:eb:ac:70:5e:58:7d:06:34:07:3e:b4:a3:7f:a1:
92:a4:1e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 10:32:38 2026 by rpki-client