Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
File: NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft (raw, json)
Hash identifier: /feCLp2uDjrOvQiRnOBxgg0GKNPhY+skCAjUQJuJxrA=
Subject key identifier: 7C:E2:6B:3F:F1:4E:0D:A2:57:49:AE:4D:7D:6D:E2:B5:29:DB:53:80
Authority key identifier: 35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
Certificate issuer: /CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Certificate serial: 019CAA8F92E192A73D9B2A7FA9EFC1AFE7E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
Manifest number: 0D2A
Signing time: Sun 01 Mar 2026 18:01:01 +0000
Manifest this update: Sun 01 Mar 2026 18:01:01 +0000
Manifest next update: Mon 02 Mar 2026 18:01:01 +0000
Files and hashes: 1: 1p2ABoTmHppjIUEVK5pg2mIhNow.roa (hash: ECPu2qb2eGXD+sxXXw8nzOOHG8hI1ILJZKOoScd4Ul8=)
2: NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl (hash: kXqQj24UKq1t0+krjHHUd2VVCIH9Y/wvFixSjHCF4hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:92:e1:92:a7:3d:9b:2a:7f:a9:ef:c1:af:e7:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Validity
Not Before: Mar 1 18:01:01 2026 GMT
Not After : Mar 2 18:01:01 2026 GMT
Subject: CN=7ce26b3ff14e0da25749ae4d7d6de2b529db5380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:43:dd:ae:fb:34:bf:a1:48:0b:82:38:cf:89:
ce:33:7f:5f:f1:42:83:c8:66:72:44:00:88:9a:f6:
21:9e:9e:9f:72:e2:03:15:02:be:4d:c8:02:b0:27:
e1:fc:dd:8b:dd:14:b0:06:48:dc:66:24:f9:37:50:
6f:c2:9e:e0:80:97:81:7b:39:55:2b:1a:2d:1c:b8:
0e:0a:1e:e6:e3:3d:c1:ba:ca:d0:62:c5:f9:5d:64:
d8:9f:cc:74:ae:ed:fc:df:05:b9:d0:57:51:5f:a0:
e2:93:88:e8:a1:e2:73:84:dd:ac:0c:a2:5e:2f:d4:
58:d1:af:09:20:42:6f:8f:7c:a8:b7:1c:8d:d7:fd:
81:f2:63:05:40:be:3e:3d:0f:35:d6:3a:6f:0e:10:
5f:dc:97:0b:50:12:ee:8c:24:61:bc:95:33:9a:ac:
fa:49:1a:b6:9f:a0:b7:04:de:f3:de:7b:b5:0f:4a:
b4:40:ed:8a:a4:97:0a:d1:a7:c5:10:e9:11:5f:b9:
ec:bf:7d:8b:07:a7:99:9f:7e:8d:ca:ea:86:1d:ba:
5a:0e:99:a8:4a:2f:78:40:f6:c5:1b:4d:2b:14:99:
55:d8:15:25:0d:dd:ac:5c:21:ce:93:22:dd:6e:79:
2a:f4:88:2b:4b:24:ee:4c:fe:bb:03:a0:83:21:7c:
1f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E2:6B:3F:F1:4E:0D:A2:57:49:AE:4D:7D:6D:E2:B5:29:DB:53:80
X509v3 Authority Key Identifier:
keyid:35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:6f:8b:cc:b6:36:59:06:3e:24:81:49:27:b1:da:58:9a:4c:
25:ad:79:12:91:69:ed:bb:d5:d3:66:52:6c:86:c8:a6:2d:00:
17:e1:99:20:a3:57:db:83:36:9c:e3:5b:7c:d4:cc:cb:4b:c6:
20:57:bd:cc:cf:81:54:e1:8a:80:72:7f:bd:3f:63:1e:23:2d:
87:f4:a9:da:9a:b0:bf:d6:aa:1c:1c:0a:61:34:82:bd:f1:74:
2b:0f:a6:c9:b1:ad:3c:72:c6:3e:af:77:50:ba:4b:b8:cd:92:
95:05:8b:ce:cf:8c:c1:f1:8d:5e:34:25:0f:24:54:2d:3a:29:
01:88:af:9e:df:7e:7f:69:02:6e:e7:2d:ea:a4:8e:41:b5:75:
44:2f:95:ef:65:03:bd:f6:ad:87:43:c3:8e:41:6b:5e:5a:e9:
29:f3:58:9b:e6:84:77:ad:f3:ac:59:1e:46:a5:3b:3f:72:e3:
cd:7a:1c:c3:cb:e7:f1:fb:48:34:9f:ac:33:58:ab:5a:9c:f4:
eb:b1:1b:fe:ca:c2:b7:0c:60:25:83:bc:b2:12:45:ac:85:cb:
4b:09:e6:e8:f9:d4:ca:fc:3e:7e:d1:bf:c9:5a:e3:05:d4:c1:
a8:e7:52:97:62:bc:82:99:58:18:b1:2b:ec:ed:c1:cd:0f:b9:
dd:30:08:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj5Lhkqc9myp/qe/Br+fmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MTY1MmI4MzhmZjJkOTY3MmFjOGNhNjZiYTY2MGRkNGU0
NWQ2OTkwHhcNMjYwMzAxMTgwMTAxWhcNMjYwMzAyMTgwMTAxWjAzMTEwLwYDVQQD
Eyg3Y2UyNmIzZmYxNGUwZGEyNTc0OWFlNGQ3ZDZkZTJiNTI5ZGI1MzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0Pdrvs0v6FIC4I4z4nOM39f8UKD
yGZyRACImvYhnp6fcuIDFQK+TcgCsCfh/N2L3RSwBkjcZiT5N1Bvwp7ggJeBezlV
KxotHLgOCh7m4z3BusrQYsX5XWTYn8x0ru383wW50FdRX6Dik4jooeJzhN2sDKJe
L9RY0a8JIEJvj3yotxyN1/2B8mMFQL4+PQ811jpvDhBf3JcLUBLujCRhvJUzmqz6
SRq2n6C3BN7z3nu1D0q0QO2KpJcK0afFEOkRX7nsv32LB6eZn36NyuqGHbpaDpmo
Si94QPbFG00rFJlV2BUlDd2sXCHOkyLdbnkq9IgrSyTuTP67A6CDIXwfzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHziaz/xTg2iV0muTX1t4rUp21OAMB8GA1UdIwQY
MBaAFDUWUrg4/y2WcqyMpmumYN1ORdaZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJaU3VEal9MWlp5ckl5bWE2WmczVTVGMXBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi85Y2U2MGItY2JjNC00MGQ5LTk4YWQt
MWNkNTA2MDcwYmI1LzEvTlJaU3VEal9MWlp5ckl5bWE2WmczVTVGMXBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi85Y2U2MGItY2JjNC00MGQ5LTk4YWQtMWNkNTA2MDcwYmI1
LzEvTlJaU3VEal9MWlp5ckl5bWE2WmczVTVGMXBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAG+LzLY2
WQY+JIFJJ7HaWJpMJa15EpFp7bvV02ZSbIbIpi0AF+GZIKNX24M2nONbfNTMy0vG
IFe9zM+BVOGKgHJ/vT9jHiMth/Sp2pqwv9aqHBwKYTSCvfF0Kw+mybGtPHLGPq93
ULpLuM2SlQWLzs+MwfGNXjQlDyRULTopAYivnt9+f2kCbuct6qSOQbV1RC+V72UD
vfath0PDjkFrXlrpKfNYm+aEd63zrFkeRqU7P3LjzXocw8vn8ftINJ+sM1irWpz0
67Eb/srCtwxgJYO8shJFrIXLSwnm6PnUyvw+ftG/yVrjBdTBqOdSl2K8gplYGLEr
7O3BzQ+53TAIEA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:03 2026 by rpki-client