Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
File: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft (raw, json)
Hash identifier: saZZxuUfwcjB//jVJTrdBkuZxhZCG5C/o0ub1pzbuHc=
Subject key identifier: 22:06:9F:78:D7:F0:79:31:FD:D3:C3:D0:A8:AF:A2:33:B7:2C:42:02
Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Certificate serial: 019CAF10B5E8A176AD153E67BF393E22F586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
Manifest number: 1855
Signing time: Mon 02 Mar 2026 15:00:33 +0000
Manifest this update: Mon 02 Mar 2026 15:00:33 +0000
Manifest next update: Tue 03 Mar 2026 15:00:33 +0000
Files and hashes: 1: 07kKKUMgBwNlGH8ItBg5huXyjBo.roa (hash: 0Db0rW3HyxMoZLKg3qDXyoGcyEgSvoFlGL2izdT+lqA=)
2: A3pW4f2Q0QCXW1ITF5-7J2AGJB0.roa (hash: 3GwoRHIKkL+M5kmrRcgNaVleZoRm14fgCgWnCbfdVU4=)
3: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl (hash: TAYhcgAoYFrLJ0PQH3LM7rtDqGiltiK1alnIQx8CJXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:10:b5:e8:a1:76:ad:15:3e:67:bf:39:3e:22:f5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Validity
Not Before: Mar 2 15:00:33 2026 GMT
Not After : Mar 3 15:00:33 2026 GMT
Subject: CN=22069f78d7f07931fdd3c3d0a8afa233b72c4202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:12:83:b5:0b:8b:5b:78:9a:e3:28:2f:e4:f5:
dd:18:f6:71:ec:fa:63:a5:66:9d:e0:ad:3b:41:46:
db:8a:1d:84:bd:3f:00:e4:bf:e6:1e:7a:58:85:26:
22:63:0a:32:71:fc:25:98:58:11:22:52:6a:bc:7c:
9b:8b:a4:27:3f:dc:0c:5a:cf:1a:ec:89:2e:4b:f6:
27:ab:13:47:41:20:4c:7e:45:a0:ab:af:b9:11:c9:
da:79:ff:d0:e4:21:c3:97:36:85:1e:f2:cc:34:8a:
98:f0:f6:13:29:b9:d8:7c:11:d8:6a:a4:6f:44:25:
16:4d:74:f0:d6:a5:7e:b7:49:10:03:1e:54:49:31:
4c:d0:db:a7:b2:57:bf:b3:18:04:ab:d3:a8:a6:ad:
ee:73:8f:39:0f:05:0f:57:e2:4e:a0:40:d5:1d:71:
50:f4:8b:6c:3c:7a:cf:71:9b:a5:8f:d2:2c:87:9d:
01:a9:75:da:b6:59:87:6a:2c:6e:e0:73:5a:98:5d:
a5:75:50:b0:a9:55:db:97:0c:0e:c8:8e:f7:b8:51:
68:bf:b7:7c:89:2d:cc:e2:bf:d5:f5:c1:48:b2:81:
dc:29:21:ac:94:bf:bd:12:5a:82:f2:6a:c3:a3:6d:
e7:90:fa:57:1f:45:fd:ef:c4:a5:00:1e:20:0a:46:
e1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:06:9F:78:D7:F0:79:31:FD:D3:C3:D0:A8:AF:A2:33:B7:2C:42:02
X509v3 Authority Key Identifier:
keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:50:75:54:7f:61:e1:9d:7b:60:27:76:89:d7:0f:ce:fb:fe:
33:b3:bb:fa:b6:cd:e8:35:fc:12:16:83:5d:8e:35:2d:e6:cf:
36:b8:e0:73:df:0e:30:2b:29:58:06:0e:d6:c4:e6:8c:cb:cb:
54:18:25:fb:10:91:79:42:0f:c0:74:ce:79:1a:5c:40:19:a9:
07:65:f5:78:3a:5d:9d:13:97:b7:aa:31:35:49:9f:0c:18:d7:
ae:ed:dc:d7:54:88:20:ea:58:f5:6e:6d:50:f5:7a:d9:97:d3:
46:04:81:f5:c8:c4:66:16:a4:a5:85:17:28:7c:b8:7c:35:11:
dc:fd:ba:9b:9f:09:fd:ed:69:8c:21:0a:1f:ba:12:a1:b0:0f:
59:82:70:8e:bc:2f:57:cd:fa:f6:38:83:62:99:d1:c1:78:13:
19:5e:b1:1f:6e:3a:fe:e8:15:2e:96:bc:fb:a2:dc:f0:7f:1e:
3a:c8:47:ec:06:c1:76:cc:53:02:61:dc:20:8f:f5:0d:5f:02:
ad:4a:cc:9d:fe:73:af:ae:5f:3e:d5:b9:36:c2:8a:c2:17:10:
c8:08:c5:d0:64:57:6e:21:71:41:49:cd:a8:42:c1:60:db:59:
11:ea:45:4c:2c:f0:f7:0a:90:83:09:34:89:1c:50:c1:98:02:
41:54:f3:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvELXooXatFT5nvzk+IvWGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NWZiM2ZlYjE1YzAzYzRkMzRkOWZmNDQ0ZDlhZDdlMzAw
NjcyMDgwHhcNMjYwMzAyMTUwMDMzWhcNMjYwMzAzMTUwMDMzWjAzMTEwLwYDVQQD
EygyMjA2OWY3OGQ3ZjA3OTMxZmRkM2MzZDBhOGFmYTIzM2I3MmM0MjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RKDtQuLW3ia4ygv5PXdGPZx7Ppj
pWad4K07QUbbih2EvT8A5L/mHnpYhSYiYwoycfwlmFgRIlJqvHybi6QnP9wMWs8a
7IkuS/YnqxNHQSBMfkWgq6+5Ecnaef/Q5CHDlzaFHvLMNIqY8PYTKbnYfBHYaqRv
RCUWTXTw1qV+t0kQAx5USTFM0Nunsle/sxgEq9Oopq3uc485DwUPV+JOoEDVHXFQ
9ItsPHrPcZulj9Ish50BqXXatlmHaixu4HNamF2ldVCwqVXblwwOyI73uFFov7d8
iS3M4r/V9cFIsoHcKSGslL+9ElqC8mrDo23nkPpXH0X978SlAB4gCkbhKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIGn3jX8Hkx/dPD0KivojO3LEICMB8GA1UdIwQY
MBaAFDRfs/6xXAPE002f9ETZrX4wBnIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkYtel9yRmNBOFRUVFpfMFJObXRmakFHY2dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hNDQyYzUtZDE0Zi00MjlmLWE1MTUt
YmM1NGIxMjExYjYwLzEvTkYtel9yRmNBOFRUVFpfMFJObXRmakFHY2dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9hNDQyYzUtZDE0Zi00MjlmLWE1MTUtYmM1NGIxMjExYjYw
LzEvTkYtel9yRmNBOFRUVFpfMFJObXRmakFHY2dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUFB1VH9h
4Z17YCd2idcPzvv+M7O7+rbN6DX8EhaDXY41LebPNrjgc98OMCspWAYO1sTmjMvL
VBgl+xCReUIPwHTOeRpcQBmpB2X1eDpdnROXt6oxNUmfDBjXru3c11SIIOpY9W5t
UPV62ZfTRgSB9cjEZhakpYUXKHy4fDUR3P26m58J/e1pjCEKH7oSobAPWYJwjrwv
V8369jiDYpnRwXgTGV6xH246/ugVLpa8+6Lc8H8eOshH7AbBdsxTAmHcII/1DV8C
rUrMnf5zr65fPtW5NsKKwhcQyAjF0GRXbiFxQUnNqELBYNtZEepFTCzw9wqQgwk0
iRxQwZgCQVTzdw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:35 2026 by rpki-client