Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
File: nzEukpe8HSfr60dt6g7hXddWVC0.mft (raw, json)
Hash identifier: 8Spaj5ssllTvntB0mNMVDRgXN7CmMmUA1SS16yeoU5M=
Subject key identifier: 93:55:70:CA:4E:03:54:93:34:8B:55:54:9A:62:F5:16:3F:48:F6:6C
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 019CAC0FFE72C73A5CB6E485B834385B694C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
Manifest number: 0EE6
Signing time: Mon 02 Mar 2026 01:00:55 +0000
Manifest this update: Mon 02 Mar 2026 01:00:55 +0000
Manifest next update: Tue 03 Mar 2026 01:00:55 +0000
Files and hashes: 1: 9N0xJc7gte-XfDm1ppoFxs2ZNfE.roa (hash: hax45O+BVL2OtEofupJNael1wssJob4JJ/bpd8OtYEo=)
2: GPrNUgOp-yFfntRAITK46bjxYx8.roa (hash: tp3Wm0E6OeEViiyRYXktB8FqE/SyfwJ6JfvXOHg6tpE=)
3: JpjcVvpsRev2p10C3LQaIJ0kCAk.roa (hash: olGjGjOs+cbpB3gRjJy05Z6fBuTN4aPpcrK5updhkf8=)
4: MEHkcgqEJz7YFYdGUGWIvg3-cls.roa (hash: 1BYxRX72gkHZBwUAz+wy4Xb3C0tFku26Sl04kGiXOpw=)
5: _frEaY1XPz_zgvnWp1kKnyd22cQ.roa (hash: okh9WBzugciORKvFkzhGVKctYUsJYdr64nkB3piPl54=)
6: nzEukpe8HSfr60dt6g7hXddWVC0.crl (hash: p6B+85xgVHBBVVJXTIJhRq6ghpf/4Inow/LL1Iz1jLw=)
7: uNElo1bYBP4RtJsgE_31DZ35jNA.roa (hash: tDCdSTgFNoOH3KpQ7qCf+yWP+yhY5tZMjGcP8X0y8Zc=)
8: unsDtmwuVq6UnIoMMfgu4SomBNI.roa (hash: 42NQRABPwAdQZ7WOYRrg/k8mIJxEsdJlQLE5DRl74k0=)
9: yefHGqoy_vY6UIn_R3TQMREwj3k.roa (hash: B1VLvaZ4NnymL6VHVlSUOOS/upHHX90n9eExa5FLhNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:fe:72:c7:3a:5c:b6:e4:85:b8:34:38:5b:69:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Mar 2 01:00:55 2026 GMT
Not After : Mar 3 01:00:55 2026 GMT
Subject: CN=935570ca4e035493348b55549a62f5163f48f66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3f:f5:5c:3b:23:f6:51:f2:fe:3b:2c:d7:b9:
74:e9:27:6c:53:4a:e6:5b:e8:4d:7c:78:26:57:20:
7d:52:6e:d3:85:95:bd:5d:f6:60:77:0f:40:e0:fa:
8c:13:b4:fd:ef:9a:c4:f4:42:db:b2:5c:c9:dd:b7:
b4:ac:7a:e0:3f:e6:c9:5f:bb:bf:a3:af:30:72:53:
82:43:8b:ed:e2:06:49:0a:b0:f2:c0:86:de:19:01:
4f:d1:f3:ec:47:8c:5f:30:42:fe:a1:ab:8a:7b:11:
39:3d:01:98:20:ac:f1:31:ff:6b:ac:40:17:46:00:
d4:b8:98:30:2d:1f:64:55:2c:50:21:ff:65:82:fb:
84:d3:09:97:6c:5f:2d:b8:ba:e6:04:85:8a:b5:30:
90:26:82:ce:fd:af:b2:36:65:94:7a:08:ed:d1:7b:
08:e0:72:3d:35:6b:b3:d7:5b:58:2f:4e:cc:80:ff:
d5:38:b7:40:77:af:59:da:9b:09:64:e0:f9:e3:bc:
ad:ae:a7:8b:b8:24:3b:d4:13:60:1d:20:c3:e8:d4:
4b:5b:ee:09:98:15:3b:74:a1:5c:6d:c2:7e:cb:d7:
2b:f8:25:8c:fe:34:82:00:75:5d:1c:ca:ca:74:3a:
ef:f8:0b:b5:8f:c6:cb:7f:4d:2a:cd:f4:b4:c0:2c:
81:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:55:70:CA:4E:03:54:93:34:8B:55:54:9A:62:F5:16:3F:48:F6:6C
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:50:b2:8e:9a:0d:c2:bc:a7:89:35:4b:ef:73:51:54:73:05:
2d:93:48:37:36:6f:06:44:a8:3b:d0:23:f1:03:02:d7:c2:2a:
4c:da:22:48:e9:67:08:b7:8a:88:a7:5b:af:45:d1:dc:12:8d:
f4:38:18:f2:42:c5:24:1d:27:44:f3:24:4a:27:84:10:43:a1:
c6:f8:ba:f8:53:04:9e:ee:d8:2f:be:51:e7:27:f8:58:31:b6:
04:96:43:62:b4:88:4d:32:26:51:16:1c:c7:cc:6f:cb:41:55:
39:44:87:05:89:cc:d9:95:85:6b:37:c5:78:33:3c:45:fd:cb:
04:6a:e6:42:a6:c7:db:59:14:7a:bd:54:47:9e:55:6a:14:75:
2b:88:9b:fa:1e:1a:c2:dc:0e:dd:b2:34:77:b1:67:8f:6d:88:
6a:79:85:b2:f6:2b:4b:5b:7c:46:af:c6:ce:66:d4:47:b9:df:
79:bf:46:14:0b:7d:2f:2e:f3:c3:0a:21:b9:0f:f5:2f:e2:be:
1b:d8:83:e9:fe:00:7b:dc:74:3c:46:e4:b3:9a:91:19:9d:9d:
a3:dc:b3:6d:6a:3f:3f:d1:cd:f2:8f:25:7d:4e:49:ec:d4:b6:
49:23:6a:99:da:e4:0e:a2:5d:e3:32:df:f9:8d:c5:ac:94:0c:
00:19:be:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:39 2026 by rpki-client