Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
File: nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft (raw, json)
Hash identifier: t4xKddjSRIbNwVbJmOQqYaZ3Xf0iK9N0PpBQINp9sBQ=
Subject key identifier: C3:A0:17:20:CA:E4:49:F6:DF:82:E0:86:6F:B7:30:07:06:F9:00:92
Authority key identifier: 9F:33:CD:CE:77:B6:BF:02:09:D8:9C:99:B2:68:EA:08:53:57:6C:D3
Certificate issuer: /CN=9f33cdce77b6bf0209d89c99b268ea0853576cd3
Certificate serial: 01A0CB5936427E87BFDF45BAB04D6941E955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzPNzne2vwIJ2JyZsmjqCFNXbNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
Manifest number: 0258
Signing time: Tue 22 Sep 2026 23:00:16 +0000
Manifest this update: Tue 22 Sep 2026 23:00:16 +0000
Manifest next update: Wed 23 Sep 2026 23:00:16 +0000
Files and hashes: 1: LL4V8sco-bLn6X62NhH7oSncxGQ.roa (hash: XyYD4raxZ15vCOfOVeQTnYj1yOHNjolcltnv8E/D12M=)
2: nzPNzne2vwIJ2JyZsmjqCFNXbNM.crl (hash: wR0JIkDTdYPvy1qv7bKkSKXTQRWS5AYAFDbSVvAPNto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzPNzne2vwIJ2JyZsmjqCFNXbNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:36:42:7e:87:bf:df:45:ba:b0:4d:69:41:e9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f33cdce77b6bf0209d89c99b268ea0853576cd3
Validity
Not Before: Sep 22 23:00:16 2026 GMT
Not After : Sep 23 23:00:16 2026 GMT
Subject: CN=c3a01720cae449f6df82e0866fb7300706f90092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:84:46:4f:6a:45:72:86:ca:fe:ed:59:76:
5a:59:5d:ca:45:ba:8e:8c:40:b4:32:f6:d1:1d:c9:
18:ec:1e:8b:f1:5e:7d:82:04:38:10:af:ea:7c:1e:
6b:26:3d:6d:1c:d8:dd:d8:e9:fc:15:65:e0:9f:e1:
9b:53:49:81:ef:16:9f:5c:06:34:d8:84:22:a4:6c:
29:57:e4:23:08:2f:9c:8c:a0:a5:7f:aa:17:fa:21:
44:5c:99:39:f5:c3:f9:b1:3e:17:fd:ad:9c:72:2b:
e5:26:f1:6f:98:69:21:f0:7e:fa:d4:9b:b7:32:2f:
96:ab:b0:9b:fd:28:df:31:6d:59:06:4d:3b:2a:be:
6b:d9:48:1f:18:48:1f:4f:da:4c:dd:a3:3e:0a:96:
76:00:dd:ce:ab:4d:de:58:ae:76:98:ab:c2:4c:7b:
64:0c:70:bb:eb:f9:51:16:32:34:4b:7e:f6:18:4a:
86:57:84:74:e0:f0:14:4e:8f:46:3d:e7:58:0b:92:
0d:66:83:13:77:c8:0a:01:14:f6:de:36:2f:9e:f9:
9a:55:12:40:61:10:a8:9b:ee:b3:c3:03:f3:ed:62:
7b:e7:aa:9a:49:b7:8e:6f:60:e3:ff:72:b9:26:53:
a8:ae:1c:70:b6:4e:bd:c5:07:70:28:32:d4:5f:86:
35:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A0:17:20:CA:E4:49:F6:DF:82:E0:86:6F:B7:30:07:06:F9:00:92
X509v3 Authority Key Identifier:
keyid:9F:33:CD:CE:77:B6:BF:02:09:D8:9C:99:B2:68:EA:08:53:57:6C:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzPNzne2vwIJ2JyZsmjqCFNXbNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8f:31:21:82:f3:1c:8b:5f:c0:9f:c7:a2:b3:47:b2:8d:9b:
d0:3e:58:31:3a:13:46:30:23:a6:0b:2a:25:0d:f8:36:3a:bc:
0a:1b:25:5e:86:a8:44:7b:93:61:95:1a:ce:1f:40:76:29:6d:
4f:7a:85:bd:dc:92:a3:13:a4:9f:b5:da:2a:80:c4:94:8d:7d:
91:4b:cc:36:9f:85:76:4d:fd:da:fc:55:9b:a8:e6:e3:2b:c1:
67:26:02:42:71:6a:5e:14:a2:9e:5f:82:54:6d:ea:69:6e:e0:
d1:ce:26:92:ca:ab:bc:3b:42:79:4c:cf:dd:fc:ad:db:27:a9:
93:e3:dd:fb:4a:0e:eb:b9:57:85:c1:a4:37:4f:43:71:bf:da:
d8:23:bb:ee:1b:aa:b9:3f:bb:8a:e1:5b:3c:50:55:f6:69:a1:
3f:5c:cf:eb:7e:31:8d:29:49:ce:25:17:28:0b:05:48:99:6f:
e0:05:f6:f6:f3:f1:84:41:bf:91:5b:5f:e6:b8:b7:2a:17:3c:
d9:71:3a:51:08:52:2e:7b:75:76:e7:63:12:5d:96:64:df:e0:
42:c1:5b:1f:34:de:46:ea:7e:0f:c4:4e:ce:61:0d:f1:93:fb:
b8:de:33:6c:d2:23:8d:cb:88:06:a2:06:1b:56:05:c2:34:b0:
4d:20:6e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:49:00 2026 by rpki-client