Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
File: NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft (raw, json)
Hash identifier: RmQxDcIiliaV6VM4aIHCh2IvcS0kuiQ/lihDB+drncE=
Subject key identifier: 82:72:72:A8:6F:EC:93:36:E6:BF:7B:21:9E:58:B1:75:55:CE:EE:D7
Authority key identifier: 35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
Certificate issuer: /CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Certificate serial: 019D9A07486F43468A0C621EC6C9129D40A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
Manifest number: 0DA6
Signing time: Fri 17 Apr 2026 06:01:01 +0000
Manifest this update: Fri 17 Apr 2026 06:01:01 +0000
Manifest next update: Sat 18 Apr 2026 06:01:01 +0000
Files and hashes: 1: 1p2ABoTmHppjIUEVK5pg2mIhNow.roa (hash: ECPu2qb2eGXD+sxXXw8nzOOHG8hI1ILJZKOoScd4Ul8=)
2: NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl (hash: a7l6fEcGQrdF05o2sOnJpcV8paeOGMWa+YGoFX25omw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:48:6f:43:46:8a:0c:62:1e:c6:c9:12:9d:40:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Validity
Not Before: Apr 17 06:01:01 2026 GMT
Not After : Apr 18 06:01:01 2026 GMT
Subject: CN=827272a86fec9336e6bf7b219e58b17555ceeed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d5:a9:f5:8e:05:55:46:64:e2:e5:8e:2f:a7:
e5:53:37:d7:21:fb:f6:8c:a9:10:fd:65:ff:38:d7:
c4:ee:d9:29:54:06:60:2d:aa:2b:c2:3b:e2:af:db:
ef:20:19:26:8c:6a:6c:df:5d:46:c6:7b:74:63:72:
4f:2d:82:59:1b:5d:22:59:d6:db:d5:e6:a3:57:84:
c2:e0:da:3f:f0:69:86:62:5f:fd:d9:95:df:ff:00:
5a:de:9f:1b:7b:86:40:7f:0f:68:ca:d2:e9:b1:b0:
b6:3b:a4:97:20:af:9e:03:08:18:77:4e:b8:6c:57:
af:89:e7:af:80:dc:f0:8e:d6:71:a5:2f:1c:02:5e:
52:68:5d:c4:4f:6a:af:0d:ff:c1:52:53:c2:80:b1:
75:07:ed:ba:3e:b2:2d:13:94:42:6d:35:3f:24:43:
e0:a2:43:42:34:cc:ba:32:d4:23:3c:d2:f1:2a:45:
e0:f9:8d:52:32:0f:32:a6:3c:a1:05:d1:9e:28:59:
fd:98:17:da:ea:d3:24:23:be:97:30:ae:54:26:3c:
d4:04:56:4a:5f:13:85:22:d6:6e:b7:42:0c:54:75:
3d:d9:19:ee:95:e5:55:46:8b:f9:0c:4c:47:01:b5:
b7:a3:a4:d2:80:d5:7a:cb:5c:b1:8a:49:a2:c6:11:
69:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:72:72:A8:6F:EC:93:36:E6:BF:7B:21:9E:58:B1:75:55:CE:EE:D7
X509v3 Authority Key Identifier:
keyid:35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f2:68:22:8f:2a:fd:a8:c8:f9:20:4c:4c:0e:19:91:e0:b0:
98:10:ba:ba:ff:e4:6f:07:ce:e4:83:a0:3c:f4:4e:a6:00:28:
77:a9:e2:5d:b9:bd:54:d7:d2:81:dd:c0:53:22:ae:10:5b:e8:
ac:6c:6c:c6:bd:24:8f:31:6a:9e:d6:6e:2a:f3:d6:02:d9:51:
d7:a4:a9:1a:7a:0e:fb:cb:57:79:ea:e3:31:d6:f0:74:7f:c0:
9c:1e:09:11:04:92:06:ce:e5:d3:33:44:9c:76:8b:c6:6c:37:
43:2a:25:5d:7a:5c:71:a2:f5:34:af:5b:82:f9:e7:87:f0:04:
b9:5c:0e:50:9f:0b:68:f9:31:64:7f:25:d4:e8:f9:dc:be:95:
0a:26:17:2a:66:2c:53:80:39:ba:cf:75:31:fa:a2:1c:d6:e3:
fc:f0:ec:81:49:1a:23:ca:51:50:e9:50:4d:e9:57:a3:aa:ea:
a2:1a:91:0e:e2:01:ec:4b:b5:4b:d1:11:ad:5f:9c:d2:75:16:
a6:6b:53:1a:d4:e4:1a:d6:4b:fa:50:4a:d5:53:b3:0a:e6:31:
af:b6:d7:01:64:f1:a8:77:ce:3b:3d:a9:8f:dc:7b:7a:91:6a:
24:f7:a0:a0:e4:0c:4e:c9:33:4a:45:46:2b:bc:44:36:f8:ee:
79:31:23:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:11 2026 by rpki-client