Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/206d19-b4e7-43e3-b6df-73531630f15b/1/NZ5fBT651CnY61ARjkOdCXNGyrs.mft
File: NZ5fBT651CnY61ARjkOdCXNGyrs.mft (raw, json)
Hash identifier: QvHpip/YRfyEEavzRzihxXLXLppYUiukpyc2E4nHH1w=
Subject key identifier: A2:24:FD:66:5A:9B:F6:E8:D8:EE:F1:97:30:3F:F9:19:AA:1F:8B:8B
Authority key identifier: 35:9E:5F:05:3E:B9:D4:29:D8:EB:50:11:8E:43:9D:09:73:46:CA:BB
Certificate issuer: /CN=359e5f053eb9d429d8eb50118e439d097346cabb
Certificate serial: 01A12BE8D23D56523DBA6B7CA37E5261C032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ5fBT651CnY61ARjkOdCXNGyrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/206d19-b4e7-43e3-b6df-73531630f15b/1/NZ5fBT651CnY61ARjkOdCXNGyrs.mft
Manifest number: 10
Signing time: Sun 11 Oct 2026 17:00:40 +0000
Manifest this update: Sun 11 Oct 2026 17:00:40 +0000
Manifest next update: Mon 12 Oct 2026 17:00:40 +0000
Files and hashes: 1: GAan2WSNwDwNOZhBnumKjAue39U.asa (hash: /a8EjBa5XpMrlIoJiss4QJ6do5ij3kyP1B0Oh3gQUSY=)
2: NZ5fBT651CnY61ARjkOdCXNGyrs.crl (hash: ekXlKFlhg5yEnGbwluUoHhW/+syPHjMb9uKHbMsKueE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/206d19-b4e7-43e3-b6df-73531630f15b/1/NZ5fBT651CnY61ARjkOdCXNGyrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/206d19-b4e7-43e3-b6df-73531630f15b/1/NZ5fBT651CnY61ARjkOdCXNGyrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ5fBT651CnY61ARjkOdCXNGyrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:e8:d2:3d:56:52:3d:ba:6b:7c:a3:7e:52:61:c0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359e5f053eb9d429d8eb50118e439d097346cabb
Validity
Not Before: Oct 11 17:00:40 2026 GMT
Not After : Oct 12 17:00:40 2026 GMT
Subject: CN=a224fd665a9bf6e8d8eef197303ff919aa1f8b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9f:2f:f2:2b:fe:94:ac:7c:87:b5:5b:74:b5:
e0:6c:f0:7e:93:26:05:2f:a4:d8:06:86:97:ac:ee:
41:c5:45:67:73:77:10:49:3b:14:f8:8b:34:34:56:
79:96:8b:4f:6b:be:f0:23:61:ee:cd:16:5c:6b:92:
4b:a0:6b:be:5e:b0:82:5e:68:12:65:4f:20:b6:9f:
a7:63:18:7d:07:01:19:f9:16:bb:d7:69:57:cb:f9:
3f:e3:ec:5b:fa:32:1e:36:0b:ed:39:3b:7c:5c:2f:
84:d6:56:76:77:23:81:6c:96:77:82:ea:b7:59:25:
6e:38:18:30:4b:f0:05:fc:51:dc:61:93:2a:69:ab:
1f:cc:f0:32:8e:cb:8c:6c:84:32:12:a7:e5:52:6a:
33:4e:2d:05:61:3f:1c:59:67:9d:e3:4c:2d:6e:21:
d6:0c:55:57:f8:c3:f8:c8:f5:6c:37:aa:11:2e:30:
38:9f:15:cb:f8:ed:46:25:ff:d7:eb:ac:52:40:a8:
9d:96:84:0f:57:01:5e:a5:bc:a8:58:ec:fe:d2:cf:
36:95:cd:b1:0f:34:77:31:a7:3e:6b:f7:b5:60:04:
db:fa:f8:a9:30:d4:8a:cf:5b:c0:2a:c3:c0:d9:c0:
35:b7:f4:a8:41:ef:32:17:a6:02:13:e7:d7:5c:d1:
da:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:24:FD:66:5A:9B:F6:E8:D8:EE:F1:97:30:3F:F9:19:AA:1F:8B:8B
X509v3 Authority Key Identifier:
keyid:35:9E:5F:05:3E:B9:D4:29:D8:EB:50:11:8E:43:9D:09:73:46:CA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ5fBT651CnY61ARjkOdCXNGyrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/206d19-b4e7-43e3-b6df-73531630f15b/1/NZ5fBT651CnY61ARjkOdCXNGyrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/206d19-b4e7-43e3-b6df-73531630f15b/1/NZ5fBT651CnY61ARjkOdCXNGyrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e7:03:30:7d:15:ce:c4:76:80:60:03:d0:30:54:6c:e0:11:
fe:98:d8:2f:50:ea:d8:a3:c9:19:1f:b0:14:10:f1:e7:b0:0e:
76:c3:11:3f:72:17:2c:51:ea:a4:3b:f5:87:3e:59:61:a4:a8:
0a:18:27:19:76:c3:cf:ad:bc:4c:d2:c9:ac:54:0e:f9:1a:77:
a4:6a:7d:1c:35:4e:b0:7b:fc:1f:2f:19:99:9f:ca:36:3b:08:
43:cf:b3:e8:56:e9:07:b6:3d:a9:35:f5:19:71:eb:ed:94:5a:
31:04:2a:aa:09:1c:6e:cb:b5:24:fb:f2:5b:fb:0e:e9:79:ad:
70:64:af:7d:61:6b:f4:83:2e:9b:e3:72:53:30:a2:90:a3:02:
dc:75:23:b7:bf:6e:ec:45:4d:4e:9e:79:f2:df:02:0f:66:4f:
f9:a5:9c:bc:78:b8:ce:fd:da:c9:7b:69:40:72:16:56:23:ce:
32:e6:41:5b:f9:45:30:af:ca:68:82:d9:a8:cf:f7:54:05:44:
46:ce:bc:fb:bd:c8:4e:da:f9:9f:ca:30:9f:96:ea:72:2e:d4:
5a:72:a0:c2:cf:df:aa:d5:8b:98:03:a6:7a:a3:b2:50:2a:f1:
f0:2f:c4:97:54:0b:e9:8c:7d:6c:72:be:a3:20:d5:7d:64:4e:
95:98:81:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:13:56 2026 by rpki-client