Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
File: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft (raw, json)
Hash identifier: mqSVnuglr9i2SGVMX3sTk3YbU1tU5CtlaNVUXKlX07I=
Subject key identifier: DC:2A:36:03:94:FF:9F:E5:EE:21:D3:42:7A:0A:51:CD:24:84:79:B0
Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Certificate serial: 019CAD22FDE0C9BD130151ABE270524B0AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
Manifest number: 1854
Signing time: Mon 02 Mar 2026 06:01:17 +0000
Manifest this update: Mon 02 Mar 2026 06:01:17 +0000
Manifest next update: Tue 03 Mar 2026 06:01:17 +0000
Files and hashes: 1: 07kKKUMgBwNlGH8ItBg5huXyjBo.roa (hash: 0Db0rW3HyxMoZLKg3qDXyoGcyEgSvoFlGL2izdT+lqA=)
2: A3pW4f2Q0QCXW1ITF5-7J2AGJB0.roa (hash: 3GwoRHIKkL+M5kmrRcgNaVleZoRm14fgCgWnCbfdVU4=)
3: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl (hash: OirB8sGTOuE+9OM87dIbwizkfpa42ZzwI0Pb6Ga5xHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:fd:e0:c9:bd:13:01:51:ab:e2:70:52:4b:0a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Validity
Not Before: Mar 2 06:01:17 2026 GMT
Not After : Mar 3 06:01:17 2026 GMT
Subject: CN=dc2a360394ff9fe5ee21d3427a0a51cd248479b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:34:87:e3:43:aa:b7:0b:3e:70:53:95:4e:53:
56:51:28:c2:5e:7f:45:03:ab:3a:6b:7c:76:1f:ce:
2b:94:4b:e2:98:d1:23:f2:62:3e:24:90:0c:b5:c9:
00:1d:c8:98:f2:66:95:ab:90:45:4b:9c:d0:55:ab:
cb:b4:c9:d7:1f:e2:13:cc:19:78:8d:97:d4:80:62:
2e:85:b1:a6:8f:7c:e0:e3:b0:ae:51:8a:39:b2:63:
ec:b1:17:78:56:a7:ea:78:7d:21:b3:a0:20:b5:4d:
f1:14:ef:10:1a:a2:d3:7f:8a:29:aa:c5:60:97:98:
85:b4:99:10:53:8e:a1:5b:32:a5:42:bd:6b:b0:ab:
0b:86:d9:7c:28:b7:c5:da:9f:02:da:d3:ad:3c:31:
e4:4a:b8:c8:7b:83:30:cf:fb:d8:5a:b0:14:53:7f:
38:a5:92:11:4e:01:0d:5c:65:d7:11:70:68:60:63:
75:02:65:e6:44:9a:75:27:7d:67:de:a6:c0:f4:38:
8e:0f:e1:d6:0a:15:35:d0:0b:9a:33:c9:58:cf:19:
ee:f2:1a:53:3a:22:1f:6c:9b:91:d5:a5:67:bf:15:
47:b9:1b:f6:b0:1e:08:23:0b:5d:51:0a:5c:91:b3:
53:8e:89:06:69:60:9b:1c:9a:a7:51:b1:6a:57:51:
0c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2A:36:03:94:FF:9F:E5:EE:21:D3:42:7A:0A:51:CD:24:84:79:B0
X509v3 Authority Key Identifier:
keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:dc:b7:c5:c3:2b:85:e1:51:e9:24:40:10:3d:aa:1e:d8:d2:
cf:b7:59:8a:0d:f8:c7:86:8c:41:c2:26:85:a5:38:53:6b:a0:
4c:a6:84:a2:89:4b:f0:dd:e5:a6:3e:1d:9b:39:0d:28:7a:5b:
27:ec:8e:b8:6a:40:30:0d:f2:06:8a:b1:2c:be:1d:19:52:29:
e2:47:ff:b1:56:ab:8d:7c:80:a9:fb:88:78:9f:20:d7:60:0f:
19:25:fa:ed:79:f1:8a:59:48:cd:80:c9:56:17:07:50:69:61:
fe:6d:12:9e:94:73:dc:c9:f3:f6:96:b6:ae:87:f6:7d:32:4f:
13:db:c3:e8:15:b3:ec:19:7b:34:a8:20:5e:f4:f6:77:f9:74:
8f:c8:62:b2:10:3c:24:4d:ee:a4:34:56:ac:62:ed:f6:1c:65:
c9:ac:dc:9c:5c:46:6d:22:72:51:4d:64:3c:31:1b:a1:29:28:
d4:dd:e8:31:ed:1b:a3:b4:ff:24:90:34:30:33:86:27:dc:b5:
1f:11:f2:85:ed:d0:0d:ca:bb:5d:a4:8c:da:0a:37:f4:64:f3:
0a:73:9d:8a:32:25:51:45:ba:fc:d8:4f:ed:0d:b6:b2:44:7f:
27:18:12:9a:6a:13:30:6c:1f:3a:f3:62:51:3c:b6:9c:b1:3e:
88:4d:e8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:30:29 2026 by rpki-client