Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
File: nzEukpe8HSfr60dt6g7hXddWVC0.mft (raw, json)
Hash identifier: EXrWrghtQopQ0q6OzNcmYepT0nkBKKaKGgf06d+wTKo=
Subject key identifier: 62:56:99:32:D4:18:63:96:C0:F5:91:0C:5F:7A:C8:29:7A:C1:71:72
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 019DA37808370F65A1C69B9C15BDA9126850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
Manifest number: 0F6A
Signing time: Sun 19 Apr 2026 02:00:45 +0000
Manifest this update: Sun 19 Apr 2026 02:00:45 +0000
Manifest next update: Mon 20 Apr 2026 02:00:45 +0000
Files and hashes: 1: 8UzfUWJvn8I9_AC0AqDko2JvNLk.roa (hash: 0Vz8FiIdw8A6JBB2ikazw0zl4TrRKvJ5OhWokpICGeU=)
2: GPrNUgOp-yFfntRAITK46bjxYx8.roa (hash: tp3Wm0E6OeEViiyRYXktB8FqE/SyfwJ6JfvXOHg6tpE=)
3: Ia5LqxC4UDeU94BXdFGGowiTk-Q.roa (hash: trfEQgzbUlz1xLGTVPmFL6RW2N2kOG1uK8fwtE/nm/0=)
4: JpjcVvpsRev2p10C3LQaIJ0kCAk.roa (hash: olGjGjOs+cbpB3gRjJy05Z6fBuTN4aPpcrK5updhkf8=)
5: MEHkcgqEJz7YFYdGUGWIvg3-cls.roa (hash: 1BYxRX72gkHZBwUAz+wy4Xb3C0tFku26Sl04kGiXOpw=)
6: ZUJhUNmgGj_YHmbRa8-Vde0Gm6Y.roa (hash: W7TJ+QEiqoirOPiCGWDS+nKtWjHZnufX8l6Fd8kt268=)
7: nzEukpe8HSfr60dt6g7hXddWVC0.crl (hash: JXzY/Ecf3nSG27sgtK6sf9DY/Rv9b1c2JnTTpBPykqU=)
8: unsDtmwuVq6UnIoMMfgu4SomBNI.roa (hash: 42NQRABPwAdQZ7WOYRrg/k8mIJxEsdJlQLE5DRl74k0=)
9: yefHGqoy_vY6UIn_R3TQMREwj3k.roa (hash: B1VLvaZ4NnymL6VHVlSUOOS/upHHX90n9eExa5FLhNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:08:37:0f:65:a1:c6:9b:9c:15:bd:a9:12:68:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Apr 19 02:00:45 2026 GMT
Not After : Apr 20 02:00:45 2026 GMT
Subject: CN=62569932d4186396c0f5910c5f7ac8297ac17172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:da:fc:7f:78:0f:9e:cb:40:bd:fb:7c:40:74:
22:00:a3:54:90:78:ad:8a:e3:6c:13:75:a6:0f:90:
0c:52:e7:e5:01:d9:1b:2e:a4:51:59:ba:05:bd:c8:
5d:a2:ae:3e:8e:08:fe:58:1e:ad:4b:cc:88:f0:5f:
6f:3c:56:42:04:d4:f1:21:dc:2e:9a:c3:99:96:53:
24:15:f4:c8:12:31:5e:dc:2d:2a:10:8a:d4:4f:50:
5d:a5:f3:d7:69:65:57:20:60:b8:1c:18:d4:fc:a9:
77:17:76:20:68:b1:74:de:7e:23:ae:b2:ff:4a:23:
e8:65:d2:bd:02:a2:1c:8b:f0:2a:2c:6c:69:34:4a:
22:a5:c3:89:67:fa:0b:cf:ef:02:af:29:e9:63:8a:
ce:c4:a2:cd:ef:69:e0:a2:1b:87:d1:9e:e7:b0:88:
ee:9b:4c:52:cd:47:09:c1:f7:5b:fe:fc:b2:d4:f4:
7a:3c:7c:64:47:1e:91:21:f9:c6:37:1c:20:a0:65:
ca:3e:5e:75:7d:c5:79:b7:39:d1:06:fa:65:5f:12:
0f:65:b8:ad:44:c2:a2:76:6c:30:d6:62:ff:b7:fd:
3f:4a:3b:66:81:8b:21:c9:46:8b:6b:c7:1b:e3:1f:
22:2b:8d:53:2b:6c:45:bc:75:53:98:6b:34:05:fb:
01:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:56:99:32:D4:18:63:96:C0:F5:91:0C:5F:7A:C8:29:7A:C1:71:72
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c8:f3:57:89:3c:7d:11:18:a5:45:de:c1:a9:80:6a:ef:55:
06:87:aa:ab:f7:b0:53:f0:09:2b:a8:9b:c6:87:d9:e5:53:f8:
00:a3:b7:1c:00:7a:61:88:f4:ad:a3:df:74:43:bc:36:2c:ab:
f3:b5:d8:1f:95:66:d3:2e:f9:39:a0:e0:72:01:d7:38:30:90:
c1:59:2e:38:3e:21:c9:3d:a3:af:21:61:36:26:5c:c4:82:5b:
5c:65:96:a6:1b:9c:1c:9c:08:78:9d:a6:0d:46:b9:84:1e:40:
eb:58:6e:fe:23:3d:b1:99:4e:57:98:cd:e4:d1:08:b4:c4:7f:
ce:bb:8a:e1:0c:91:84:62:53:9d:4c:b6:b3:57:89:bf:fa:5b:
03:61:98:7c:51:ec:ba:87:65:37:3c:db:a4:cd:5c:07:40:af:
30:d4:4e:b0:2d:bd:bc:fd:46:2e:b5:cf:1a:a8:fd:41:28:71:
0a:fd:0e:f0:d2:3c:a7:da:aa:b4:93:de:53:b9:38:82:06:17:
00:f2:bf:a8:74:cf:e1:bb:ee:05:46:c0:45:d2:fc:ed:64:cf:
bc:ac:e3:6a:30:33:1f:a7:c5:96:00:3e:29:a2:cb:02:79:a3:
68:96:43:77:29:f5:62:f8:55:69:ed:37:9c:61:ad:6a:dd:ad:
b6:88:b0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:12:09 2026 by rpki-client