Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
File: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft (raw, json)
Hash identifier: 7FVaJ5mnU5y/3nVsyIn8etXHBS/9K0WSfqGvQo90+6Q=
Subject key identifier: 89:50:04:39:CC:C9:CE:08:EE:B4:FB:18:5E:AB:26:17:8A:FC:F5:4C
Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Certificate serial: 019D9AAB9DCD68950AF6DA5FB483DFD41592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
Manifest number: 18CF
Signing time: Fri 17 Apr 2026 09:00:31 +0000
Manifest this update: Fri 17 Apr 2026 09:00:31 +0000
Manifest next update: Sat 18 Apr 2026 09:00:31 +0000
Files and hashes: 1: 07kKKUMgBwNlGH8ItBg5huXyjBo.roa (hash: 0Db0rW3HyxMoZLKg3qDXyoGcyEgSvoFlGL2izdT+lqA=)
2: A3pW4f2Q0QCXW1ITF5-7J2AGJB0.roa (hash: 3GwoRHIKkL+M5kmrRcgNaVleZoRm14fgCgWnCbfdVU4=)
3: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl (hash: Cmogupiwg0Q4zJTdV2EhM024b1mmhCLHVCCltIYWoPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:9d:cd:68:95:0a:f6:da:5f:b4:83:df:d4:15:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Validity
Not Before: Apr 17 09:00:31 2026 GMT
Not After : Apr 18 09:00:31 2026 GMT
Subject: CN=89500439ccc9ce08eeb4fb185eab26178afcf54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:07:0c:62:3e:c3:00:8d:12:36:16:8b:85:
98:e8:57:6b:07:a6:a1:59:14:88:3b:73:59:87:b6:
85:82:ef:8d:e5:30:ee:f5:2d:8d:0f:72:8b:78:f1:
e0:3a:22:ad:61:df:bd:66:c5:da:aa:b4:5f:b8:d2:
54:ba:29:6f:dd:f0:4a:de:d4:3c:ce:b8:1d:8a:ad:
ee:5e:cb:51:c1:64:50:5e:28:1a:20:fb:3a:28:3e:
e7:11:5c:b9:55:1c:d3:d9:e6:23:73:99:7f:b7:b3:
b3:2f:00:8e:b5:f8:07:13:d5:2d:fa:26:08:79:e0:
e4:95:f5:4c:67:37:f0:f7:32:56:ae:f6:52:d0:b6:
12:cc:92:58:df:69:04:9f:3d:59:6b:81:92:46:a7:
79:d4:68:62:49:df:25:90:6d:2c:65:34:29:37:9d:
6b:0d:d1:dd:1b:dc:d2:63:db:04:dd:e3:d1:2e:d6:
5d:c7:b2:46:68:97:5b:7a:b4:b8:f3:b3:a0:74:34:
e9:71:b7:05:0c:4b:d8:9f:7a:a3:60:58:ba:c7:3b:
cd:45:b6:9c:40:04:c8:b9:1d:76:15:25:02:1f:5b:
d4:2b:d1:df:5e:de:88:45:95:31:9f:62:9d:10:9e:
5f:fa:19:a9:9f:11:b1:5f:db:ab:f8:e7:ed:ae:1f:
e7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:50:04:39:CC:C9:CE:08:EE:B4:FB:18:5E:AB:26:17:8A:FC:F5:4C
X509v3 Authority Key Identifier:
keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:48:5a:4c:32:58:0b:d7:15:01:7a:9f:cf:7f:94:b1:e2:a1:
e5:6e:a5:8d:2e:58:a1:2b:4f:98:77:44:91:8f:f7:3d:d5:11:
4b:61:c2:fe:4e:57:40:1e:30:e1:b0:1b:4e:a1:a3:67:ed:3d:
c3:b5:df:06:04:a5:74:31:9f:7e:ee:73:52:5b:e8:11:b9:36:
44:d6:01:fd:aa:cf:78:5b:a0:12:0e:d0:01:f6:16:b7:78:72:
76:d9:13:1c:c2:69:9b:96:e9:1e:c2:ef:18:4b:9d:82:3b:3f:
f6:99:de:9a:a9:5b:46:a5:e9:c4:e8:35:e3:d7:97:35:53:c2:
16:3f:22:49:6d:fd:b4:b4:06:29:01:bc:0b:ea:de:cf:62:49:
2b:e2:7e:6d:db:8c:d3:80:76:8d:96:ca:32:99:e0:21:af:e2:
d3:5d:a9:a0:a9:04:2b:c3:74:b6:58:85:5a:17:ea:74:96:97:
81:3f:31:3f:89:55:d4:87:4e:d4:fa:f4:2e:5f:ba:2c:a0:54:
af:44:9c:50:9d:7f:ed:08:44:61:cc:2d:50:1d:91:ec:9d:ee:
fe:ff:a7:78:f1:81:e2:57:87:70:6a:22:75:5f:8e:dc:95:87:
8d:e3:97:6f:5f:3f:2c:fa:47:e9:b9:dd:51:0d:f1:57:a5:87:
f6:07:87:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:40:26 2026 by rpki-client