Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
File: nlzy-Led9mJBfsllbtEWbpGquAg.mft (raw, json)
Hash identifier: cqzvdve2SaA3jsDXpF/Ljdipz3s3yDZdu9KxHEu7ZgY=
Subject key identifier: CB:36:E6:C0:4F:D3:22:CA:99:70:EC:F7:9B:C9:07:99:28:9E:A3:02
Authority key identifier: 9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08
Certificate issuer: /CN=9e5cf2f8b79df662417ec9656ed1166e91aab808
Certificate serial: 019D99997B0C539E6DAEC02E4444772ABFD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
Manifest number: 1143
Signing time: Fri 17 Apr 2026 04:01:05 +0000
Manifest this update: Fri 17 Apr 2026 04:01:05 +0000
Manifest next update: Sat 18 Apr 2026 04:01:05 +0000
Files and hashes: 1: 5hcH1GzZhZ8O8qI4d4Zi7O_RjUE.roa (hash: dxTVG5tLErq0ptsL/SIuT5v8Akxf05W3YRl2mwfObes=)
2: nlzy-Led9mJBfsllbtEWbpGquAg.crl (hash: EXAVX/CalKkSS831DKUNDHmw0OY2JtBVFH/jgERW24A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:7b:0c:53:9e:6d:ae:c0:2e:44:44:77:2a:bf:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5cf2f8b79df662417ec9656ed1166e91aab808
Validity
Not Before: Apr 17 04:01:05 2026 GMT
Not After : Apr 18 04:01:05 2026 GMT
Subject: CN=cb36e6c04fd322ca9970ecf79bc90799289ea302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:88:39:a9:80:2e:a9:6f:90:d6:b3:5b:47:3a:
69:22:ef:c7:8a:78:49:1b:c6:e1:01:5e:da:ef:f6:
9f:9e:e2:c9:83:6f:23:97:ad:b2:1e:60:69:26:62:
53:17:57:67:80:5c:c0:44:3b:94:c5:29:3b:eb:ce:
2f:00:a3:a2:34:bc:53:cf:9f:99:b3:85:52:52:fd:
32:c6:6b:45:37:32:dd:fc:4f:17:8c:f0:0f:61:02:
87:6d:32:3b:91:d3:4a:94:4b:df:26:4c:b3:32:38:
0f:03:70:95:9a:1d:1c:db:01:1d:fb:14:82:b6:38:
d6:9f:05:2d:58:d5:11:be:a2:54:a8:1a:6d:cc:54:
43:84:49:d8:16:9b:0c:d8:a8:da:84:d6:28:a0:24:
bc:0f:19:43:21:8a:2f:a3:f3:f6:08:bb:b7:13:05:
57:de:9d:ad:d4:bd:68:d0:6a:a6:9e:a5:7e:0f:6b:
34:4f:18:e0:f4:3c:e0:5f:ba:e2:5b:3e:7d:fc:71:
d9:39:42:5b:e5:9d:6f:c4:2c:b7:c6:26:b5:90:a1:
19:85:31:a7:a1:df:77:e1:0d:05:d1:60:62:d1:ee:
55:d3:15:56:be:c3:23:36:2a:96:8c:3f:3a:8e:c7:
78:08:34:ad:da:3f:21:48:b7:98:7a:ec:35:60:6c:
45:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:36:E6:C0:4F:D3:22:CA:99:70:EC:F7:9B:C9:07:99:28:9E:A3:02
X509v3 Authority Key Identifier:
keyid:9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:7a:15:e6:f7:c5:ec:16:60:65:cc:e2:4e:2a:ac:14:1b:6b:
e6:6f:16:b7:a0:3d:a6:7f:3c:e1:37:b6:e0:c6:52:d2:a7:68:
b8:25:e0:97:28:72:26:ac:8b:98:13:c3:c9:ce:6b:19:17:75:
8b:8b:f4:73:01:b5:8b:f3:5a:f7:56:c8:16:97:0c:f8:09:a1:
94:fc:d9:ac:2d:a5:01:44:61:b4:be:c9:5b:5c:57:1c:59:2a:
9b:b9:4f:6b:6f:25:22:a8:80:e2:5e:34:97:96:1d:5c:97:cf:
31:b0:35:16:7a:1c:c5:46:8d:c3:1a:a0:76:56:9e:e7:d8:98:
7b:00:8b:55:bf:03:ab:c0:e8:26:5a:6d:ff:19:68:89:02:dd:
08:d2:12:0c:87:11:d9:38:bc:31:ae:ff:88:b6:b6:51:51:57:
0d:5f:97:f1:98:84:de:22:fe:c2:58:3e:d9:26:e0:ca:80:bd:
ef:ad:0c:06:3f:4f:98:4a:65:77:91:3e:6b:15:83:ee:bc:06:
51:18:65:14:b5:20:23:05:85:a3:36:30:38:10:89:7e:23:3c:
66:07:82:e6:29:b9:e1:ba:fa:44:47:5e:f9:af:ea:56:57:c7:
81:05:c8:fb:f4:d4:5f:6b:e4:70:3d:31:f5:0f:e1:95:1e:28:
bc:fb:93:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:26:36 2026 by rpki-client