Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
File: NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft (raw, json)
Hash identifier: 7g9kfjR7LbTWFKv4MGgN9k6/VPhLDgBzqXYIiJ8DtEE=
Subject key identifier: 63:04:85:8D:09:5B:37:34:D6:34:43:33:61:27:49:D8:C4:FE:FC:7A
Authority key identifier: 35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
Certificate issuer: /CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Certificate serial: 019FA93E536FC62461E0211ECFE90FCBEA94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
Manifest number: 0EB7
Signing time: Tue 28 Jul 2026 15:01:01 +0000
Manifest this update: Tue 28 Jul 2026 15:01:01 +0000
Manifest next update: Wed 29 Jul 2026 15:01:01 +0000
Files and hashes: 1: 1p2ABoTmHppjIUEVK5pg2mIhNow.roa (hash: ECPu2qb2eGXD+sxXXw8nzOOHG8hI1ILJZKOoScd4Ul8=)
2: NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl (hash: Z4m6AK9la6DsrCdXS4sYSZjANB99SrEn2KLfL3sATt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:53:6f:c6:24:61:e0:21:1e:cf:e9:0f:cb:ea:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Validity
Not Before: Jul 28 15:01:01 2026 GMT
Not After : Jul 29 15:01:01 2026 GMT
Subject: CN=6304858d095b3734d6344333612749d8c4fefc7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a1:74:67:0e:0f:4d:63:1f:77:94:97:66:7f:
96:25:91:b1:e1:b0:88:9a:76:8e:41:a3:d5:ab:ee:
82:07:d0:fd:2c:86:f6:71:81:7c:94:82:4b:12:a4:
67:59:f1:a7:f2:e9:2d:55:01:96:0d:6c:35:6c:a8:
5b:24:8d:b2:ef:ee:ae:09:f4:2e:5f:03:10:6d:d8:
75:23:d5:fc:95:59:20:92:4a:ac:1d:04:1c:fc:27:
b1:69:49:8a:eb:07:a5:01:bc:a5:ee:45:65:85:c7:
f9:02:c3:cf:e1:5f:d5:48:01:2e:5d:99:4e:4c:99:
b0:96:8a:c9:ce:7b:92:46:c7:36:bd:de:ec:7d:29:
39:18:d3:59:0a:be:79:16:1e:3f:48:25:65:03:9a:
39:55:e6:3a:f6:5f:5c:aa:4a:c8:37:ad:4f:60:96:
03:56:5c:ac:dc:3d:b6:93:cb:c0:45:3f:b4:fd:59:
06:43:be:c3:39:df:d9:d7:93:dc:84:84:b8:ed:02:
d8:91:08:36:b4:f7:a8:28:42:ba:d2:e8:39:49:cd:
9b:b3:e2:9b:8d:72:82:b8:05:a2:d8:0f:6e:29:9e:
c5:bc:e4:43:81:45:74:4e:90:c5:3f:e2:ca:ee:c8:
f4:bc:12:27:de:da:0a:c9:90:62:0a:41:39:ce:c0:
64:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:04:85:8D:09:5B:37:34:D6:34:43:33:61:27:49:D8:C4:FE:FC:7A
X509v3 Authority Key Identifier:
keyid:35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d0:f6:f3:94:bf:2d:ff:d5:f2:2a:3c:72:69:e5:b9:22:55:
c4:d2:16:3a:84:1e:4a:4a:0c:7b:95:d0:68:f5:2b:d3:86:a9:
45:a7:82:86:6b:c4:c7:c2:ff:9f:00:0d:2d:b2:0d:e3:af:48:
ae:d5:e2:77:34:46:08:16:14:ce:d3:e3:95:ea:57:b6:f6:79:
c7:1d:ea:26:02:12:fd:a7:85:c8:ab:05:56:b3:25:47:80:5b:
6b:9d:30:42:41:ec:1a:88:0a:2b:35:13:01:fe:4f:50:11:3f:
ab:24:5b:34:5e:03:75:fb:ab:b9:79:ba:e6:8f:be:73:0d:10:
f6:4e:d6:85:af:22:d6:48:f4:82:bd:50:14:3e:52:fb:32:d3:
64:8d:a1:a6:63:9d:99:44:ef:30:cf:97:e8:b6:d1:3c:59:28:
88:d3:a3:c4:20:1e:77:27:82:4e:57:e1:d5:0b:66:dc:8b:a1:
4e:bd:7d:28:82:d3:ad:33:d7:f2:b9:a8:89:38:69:b0:48:4c:
9d:83:ef:44:f9:09:fe:50:5a:b2:99:0a:ee:63:c1:79:0e:5a:
37:37:f4:bb:d5:a6:71:2f:80:9f:4a:f2:5d:66:af:76:37:53:
dc:a0:ec:8c:9c:e1:64:d4:27:0e:23:c5:a8:42:d4:a3:fc:6f:
0c:d4:0a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:43:35 2026 by rpki-client