Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
File: nlzy-Led9mJBfsllbtEWbpGquAg.mft (raw, json)
Hash identifier: 7ra3ehrGRUI77jljDbi4Vf0aU6PqjwLSTwEgHiCvqOw=
Subject key identifier: FA:8A:FB:40:D0:EE:CD:F1:AA:46:9B:89:D6:00:C6:80:48:52:60:CE
Authority key identifier: 9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08
Certificate issuer: /CN=9e5cf2f8b79df662417ec9656ed1166e91aab808
Certificate serial: 019CAC0FE27B3A9595CD0B7E8F633E9B89D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
Manifest number: 10C8
Signing time: Mon 02 Mar 2026 01:00:47 +0000
Manifest this update: Mon 02 Mar 2026 01:00:47 +0000
Manifest next update: Tue 03 Mar 2026 01:00:47 +0000
Files and hashes: 1: 5hcH1GzZhZ8O8qI4d4Zi7O_RjUE.roa (hash: dxTVG5tLErq0ptsL/SIuT5v8Akxf05W3YRl2mwfObes=)
2: nlzy-Led9mJBfsllbtEWbpGquAg.crl (hash: r1ZzSadwdoufF/zDoKz3PQzXZUBszAl34k3MroIbwcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:e2:7b:3a:95:95:cd:0b:7e:8f:63:3e:9b:89:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5cf2f8b79df662417ec9656ed1166e91aab808
Validity
Not Before: Mar 2 01:00:47 2026 GMT
Not After : Mar 3 01:00:47 2026 GMT
Subject: CN=fa8afb40d0eecdf1aa469b89d600c680485260ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:96:5b:20:a5:25:56:17:d8:b5:59:a9:8d:6a:
6a:8f:39:e7:b4:00:52:eb:1d:eb:4a:8c:d9:41:f2:
39:28:ab:4b:62:2d:dc:f5:df:1b:8b:19:c5:92:8c:
2b:b9:b8:61:06:83:09:4a:cb:77:b8:21:7f:f7:a3:
ec:a2:2b:e3:bc:a9:c7:c1:f5:2a:04:27:be:91:b5:
4b:a0:c2:cb:9e:0e:44:45:7d:00:c4:3b:f5:ae:71:
fa:a7:58:77:85:00:7f:c1:13:c4:0e:f8:11:8d:cc:
09:d2:6c:4c:c6:5e:1d:54:70:99:1b:4a:f9:ce:0b:
46:93:ab:ba:c0:48:07:f6:6c:bc:18:fd:ef:db:03:
e0:b9:6a:d0:65:1f:f6:13:1f:13:dc:e9:48:5e:e6:
2b:bd:b7:5d:9f:12:75:0d:91:1b:90:c8:6f:7c:8e:
9f:40:a7:9f:d2:ed:f2:3a:ff:32:89:8f:d5:07:9b:
62:d7:d8:31:51:e1:7f:2f:bf:74:67:c6:04:f9:99:
fb:f2:59:1e:e5:40:af:8b:b2:85:9a:8c:c6:37:19:
89:15:38:ae:b1:99:1b:07:14:cb:79:46:51:c9:c6:
cd:84:1d:6a:b4:a2:be:9f:da:8c:c8:b6:50:9f:44:
27:7a:7d:6c:61:38:86:fe:09:e2:11:ed:f8:42:f8:
3e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8A:FB:40:D0:EE:CD:F1:AA:46:9B:89:D6:00:C6:80:48:52:60:CE
X509v3 Authority Key Identifier:
keyid:9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:76:06:57:15:e4:d5:e5:93:50:7d:1f:6d:96:45:9f:dd:a3:
48:b6:b2:23:45:45:72:3b:18:7b:bd:4d:aa:c3:1f:4e:5b:f0:
9e:5b:af:97:40:d8:7f:64:65:22:aa:2a:d4:87:1c:58:d4:1a:
46:bb:b6:16:51:e2:57:fc:b1:41:fc:2c:77:2a:45:de:3d:81:
be:a4:00:c8:7a:e3:12:65:27:7e:85:b4:75:d7:3b:96:1f:43:
4f:94:53:dc:d2:40:91:21:a7:33:a3:0c:d6:54:a5:8e:21:ad:
8b:56:80:9a:de:e7:30:bc:48:b1:69:58:21:9d:c5:c0:8f:a1:
62:41:bc:25:ca:d3:2d:c1:3d:ba:9a:6d:30:32:b5:9e:b6:82:
8b:c1:5e:09:af:f2:e6:65:b0:00:39:16:2d:86:a1:fe:00:98:
87:3c:b4:79:6f:74:cc:94:53:f2:f9:19:70:ca:7c:5b:34:49:
29:ba:b9:ce:45:49:70:e9:07:d1:84:bc:47:e2:48:5f:4f:82:
90:41:f7:24:00:d1:f2:69:6c:e9:4c:48:7e:f6:dc:2b:a7:f6:
b5:3a:1c:a8:fd:40:62:1f:6d:38:7f:d3:eb:33:d1:c3:30:ce:
a8:ec:c3:e5:a4:db:c9:26:e6:b4:6a:0a:d8:ec:f8:99:1a:48:
07:71:2a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:25:15 2026 by rpki-client