Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
File: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft (raw, json)
Hash identifier: PkKovQ927LDK8fPS/CNYgcEtwEbsWTNdcrtWSXQPjMY=
Subject key identifier: BC:BB:EB:F8:F9:15:13:70:3D:A3:AB:B9:C9:0D:6B:67:6E:20:E9:26
Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Certificate serial: 01A0DFF339DB4DE3E031F39A3EFD34F4D8F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
Manifest number: 1A81
Signing time: Sat 26 Sep 2026 23:00:54 +0000
Manifest this update: Sat 26 Sep 2026 23:00:54 +0000
Manifest next update: Sun 27 Sep 2026 23:00:54 +0000
Files and hashes: 1: A3pW4f2Q0QCXW1ITF5-7J2AGJB0.roa (hash: 3GwoRHIKkL+M5kmrRcgNaVleZoRm14fgCgWnCbfdVU4=)
2: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl (hash: CFOEBV89FpAZZhUR0rxjnJsqXi4XtdXPsMBSdAz+EPQ=)
3: YsmjC0C0fqf9CY4wLhiPtFlxZEw.roa (hash: N0lxxgZ/gBnqbm0d/xg3YbjefGLIyBpN9+tqlNMsVRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f3:39:db:4d:e3:e0:31:f3:9a:3e:fd:34:f4:d8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Validity
Not Before: Sep 26 23:00:54 2026 GMT
Not After : Sep 27 23:00:54 2026 GMT
Subject: CN=bcbbebf8f91513703da3abb9c90d6b676e20e926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:03:5e:fc:8a:a5:92:23:e8:27:34:78:fa:
cc:f6:dd:0c:fb:69:3d:d6:98:c6:6b:97:67:07:86:
d2:70:2d:95:15:42:07:ec:8e:53:01:8e:ba:ac:28:
81:e9:a7:2f:f9:e4:b9:0b:fa:a4:90:9a:6d:46:a2:
43:74:ff:5f:58:c4:94:4c:0a:09:1f:43:3e:c3:72:
7d:1b:21:a4:22:d4:b7:93:c9:52:24:a2:27:cc:f0:
45:02:f0:92:b5:3b:80:c7:ee:31:0a:bb:31:97:45:
b1:c1:cd:01:fc:3c:10:e0:d6:77:ea:40:0a:a8:8a:
3e:f4:a8:d3:72:68:fc:b9:39:36:1e:09:0f:bf:50:
b6:75:26:08:51:a8:43:c3:16:78:89:a0:ec:9f:0b:
8d:47:60:1b:8d:2c:d9:4a:fe:d9:d4:f5:d6:7a:b2:
b1:0d:ea:5f:1a:b3:32:81:8f:19:15:e8:65:bf:e4:
1d:98:a5:92:7c:69:d6:d4:63:d9:68:98:05:a1:b3:
67:91:06:b2:56:7b:97:98:a8:c5:95:9e:e0:c1:2a:
0b:a9:33:df:f3:22:e8:11:24:f7:d4:6a:a1:b1:22:
72:4f:24:a2:24:4b:59:6d:d8:bf:ba:93:f9:2c:5f:
5d:4c:eb:49:20:46:34:56:77:1e:32:29:48:9f:05:
0a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BB:EB:F8:F9:15:13:70:3D:A3:AB:B9:C9:0D:6B:67:6E:20:E9:26
X509v3 Authority Key Identifier:
keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a8:9d:52:3d:01:1a:e3:fa:ba:c5:e8:91:3a:87:52:ef:79:
bb:06:4e:d6:2c:1c:27:98:58:c5:15:f3:85:4d:1c:c9:1f:17:
23:45:31:60:e2:06:21:03:9f:9a:25:b4:27:f7:18:1b:a2:43:
a9:f9:5b:2e:8c:a7:64:3a:01:b6:4c:33:93:fd:b2:8d:ea:de:
ac:0e:61:9d:56:36:d1:87:f6:24:34:bf:3f:a8:5d:fd:a7:6a:
49:e0:17:17:62:23:4b:c8:23:07:db:4c:a5:96:ef:1a:b2:24:
7b:23:e8:28:ac:6a:45:1e:97:59:2a:31:91:01:96:48:19:f7:
ec:bf:64:f6:87:9f:1d:84:d3:00:d5:9e:c2:29:d4:7d:dc:90:
e8:70:59:2d:f0:2b:2f:90:fc:f6:50:45:0d:7f:0a:a9:64:7c:
dc:6d:91:6a:54:49:13:f6:7e:66:15:2b:3c:65:76:ba:71:04:
18:61:75:67:83:06:7b:67:a2:d0:03:08:b4:4c:02:6a:1f:26:
00:ee:7a:a9:7a:b1:56:e6:05:c9:6c:e7:05:18:cb:e6:fa:94:
61:56:95:0d:24:66:5f:3a:a6:b5:eb:97:10:29:2d:6f:6f:6e:
d0:84:66:fd:01:71:ab:cd:2c:99:ed:46:e7:a6:27:07:88:99:
19:60:4e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:50:43 2026 by rpki-client