Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
File: NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft (raw, json)
Hash identifier: N5IeqWPrVQ9SaLmTjM/GriNYzWH3ZW/KF3zfsF7CqAY=
Subject key identifier: 0D:CE:1A:38:B7:D5:6A:22:A2:26:22:45:4F:7E:9E:38:04:C8:46:22
Authority key identifier: 35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
Certificate issuer: /CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Certificate serial: 01A0CAEB35A247BF62DA8E02B846D42E6EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
Manifest number: 0F4D
Signing time: Tue 22 Sep 2026 21:00:07 +0000
Manifest this update: Tue 22 Sep 2026 21:00:07 +0000
Manifest next update: Wed 23 Sep 2026 21:00:07 +0000
Files and hashes: 1: 1p2ABoTmHppjIUEVK5pg2mIhNow.roa (hash: ECPu2qb2eGXD+sxXXw8nzOOHG8hI1ILJZKOoScd4Ul8=)
2: NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl (hash: 0iHqol6GmutkqtQThaRBUaj0u+Xufzw/k2IS8K7DoLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:35:a2:47:bf:62:da:8e:02:b8:46:d4:2e:6e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Validity
Not Before: Sep 22 21:00:07 2026 GMT
Not After : Sep 23 21:00:07 2026 GMT
Subject: CN=0dce1a38b7d56a22a22622454f7e9e3804c84622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0b:7e:3e:f3:12:91:ed:c0:4a:16:95:31:8d:
8c:0f:2d:28:66:11:5d:ae:2b:52:15:11:6f:f2:32:
38:78:c5:03:4a:47:15:01:38:00:ef:2e:37:fa:90:
3c:4a:d3:a0:a1:e3:09:8e:21:b3:f7:66:2f:7e:2e:
5a:1b:ec:13:a8:c5:f9:60:7b:53:4e:ab:4a:92:4e:
16:08:d1:9b:da:b6:7b:ee:c2:c4:ef:38:f9:78:3e:
c2:39:2e:42:37:ef:e9:66:52:cd:b6:5c:f6:df:d5:
f3:64:37:74:85:9a:b5:20:c6:5a:c8:f5:bb:0e:ac:
57:02:71:d3:5f:71:93:59:4e:d5:4b:ef:b1:a0:ab:
1b:1c:27:7f:9b:09:ea:34:ee:e8:cd:09:cd:90:ee:
ff:d5:58:6a:85:63:0a:b3:fb:a0:4c:97:6e:57:3c:
00:b7:7f:d2:5f:a6:91:06:67:a9:21:74:60:e4:22:
68:02:82:2e:1d:79:6f:59:bd:ea:b5:31:6a:1c:85:
b0:b9:f8:1a:8d:a0:43:07:b4:8a:a4:37:5f:84:64:
fa:22:a8:09:36:45:ec:4f:c6:7f:6a:fe:16:04:fe:
0b:4a:a7:ef:b6:b5:ec:d1:55:ad:e2:60:a8:7d:d7:
dd:16:ff:d4:f6:c0:35:85:c4:63:25:52:00:e7:0d:
82:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CE:1A:38:B7:D5:6A:22:A2:26:22:45:4F:7E:9E:38:04:C8:46:22
X509v3 Authority Key Identifier:
keyid:35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:10:08:03:e7:07:a0:18:aa:dd:ac:64:a4:6c:93:b7:29:5e:
ba:4a:c1:32:86:55:36:c7:19:22:3e:da:e5:39:a9:ae:aa:79:
7e:e6:33:03:7f:88:43:e3:65:5c:67:78:13:b5:de:7c:25:80:
ba:28:4e:8a:40:19:0d:ab:a8:2a:f0:af:94:30:c5:de:97:78:
fc:4c:d3:d1:73:b4:d1:7f:c4:14:92:0d:fe:8c:a4:fa:72:4b:
87:3d:a0:1b:d1:32:df:02:57:00:8a:60:a5:ba:e8:cf:e0:f6:
6b:70:dc:b0:e0:a9:25:e4:13:52:eb:f0:94:4f:0f:52:30:2e:
ee:54:c9:2e:ef:9c:27:47:d7:a9:aa:ab:4c:7d:14:dc:b3:71:
67:d4:10:dc:b3:be:58:c1:7c:13:53:d9:88:1c:1c:5d:c4:db:
24:a4:1d:72:6d:77:2b:56:9c:39:3c:a4:3b:60:4a:6e:c1:5f:
4e:36:3a:87:6f:44:f5:93:ad:87:3d:e1:6c:eb:ac:36:6a:bf:
0d:8f:14:52:b9:d9:63:cd:ea:86:ac:0f:8e:f3:fa:f7:13:c2:
87:d9:d5:84:c7:2d:f9:9f:10:14:ff:3d:e0:4a:c3:2a:0a:f1:
d1:a3:b9:62:2b:30:d7:48:75:48:8a:d5:da:87:c7:44:00:85:
d1:e5:53:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDK6zWiR79i2o4CuEbULm7lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MTY1MmI4MzhmZjJkOTY3MmFjOGNhNjZiYTY2MGRkNGU0
NWQ2OTkwHhcNMjYwOTIyMjEwMDA3WhcNMjYwOTIzMjEwMDA3WjAzMTEwLwYDVQQD
EygwZGNlMWEzOGI3ZDU2YTIyYTIyNjIyNDU0ZjdlOWUzODA0Yzg0NjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwt+PvMSke3AShaVMY2MDy0oZhFd
ritSFRFv8jI4eMUDSkcVATgA7y43+pA8StOgoeMJjiGz92Yvfi5aG+wTqMX5YHtT
TqtKkk4WCNGb2rZ77sLE7zj5eD7COS5CN+/pZlLNtlz239XzZDd0hZq1IMZayPW7
DqxXAnHTX3GTWU7VS++xoKsbHCd/mwnqNO7ozQnNkO7/1VhqhWMKs/ugTJduVzwA
t3/SX6aRBmepIXRg5CJoAoIuHXlvWb3qtTFqHIWwufgajaBDB7SKpDdfhGT6IqgJ
NkXsT8Z/av4WBP4LSqfvtrXs0VWt4mCofdfdFv/U9sA1hcRjJVIA5w2CuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3OGji31WoioiYiRU9+njgEyEYiMB8GA1UdIwQY
MBaAFDUWUrg4/y2WcqyMpmumYN1ORdaZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJaU3VEal9MWlp5ckl5bWE2WmczVTVGMXBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi85Y2U2MGItY2JjNC00MGQ5LTk4YWQt
MWNkNTA2MDcwYmI1LzEvTlJaU3VEal9MWlp5ckl5bWE2WmczVTVGMXBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi85Y2U2MGItY2JjNC00MGQ5LTk4YWQtMWNkNTA2MDcwYmI1
LzEvTlJaU3VEal9MWlp5ckl5bWE2WmczVTVGMXBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThAIA+cH
oBiq3axkpGyTtyleukrBMoZVNscZIj7a5Tmprqp5fuYzA3+IQ+NlXGd4E7XefCWA
uihOikAZDauoKvCvlDDF3pd4/EzT0XO00X/EFJIN/oyk+nJLhz2gG9Ey3wJXAIpg
pbroz+D2a3DcsOCpJeQTUuvwlE8PUjAu7lTJLu+cJ0fXqaqrTH0U3LNxZ9QQ3LO+
WMF8E1PZiBwcXcTbJKQdcm13K1acOTykO2BKbsFfTjY6h29E9ZOthz3hbOusNmq/
DY8UUrnZY83qhqwPjvP69xPCh9nVhMct+Z8QFP894ErDKgrx0aO5Yisw10h1SIrV
2ofHRACF0eVT6w==
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:48:04 2026 by rpki-client