Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
File: nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft (raw, json)
Hash identifier: PYCbJWTrxWHR6volxgEFJuuh332hT8lJAYPb4iIL6ts=
Subject key identifier: CF:0E:B7:EB:7A:DD:13:C5:36:7E:65:1A:93:44:42:A6:EE:CA:4F:53
Authority key identifier: 9F:33:CD:CE:77:B6:BF:02:09:D8:9C:99:B2:68:EA:08:53:57:6C:D3
Certificate issuer: /CN=9f33cdce77b6bf0209d89c99b268ea0853576cd3
Certificate serial: 019EBFFEFEA2776537AD48F0749A863B51A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzPNzne2vwIJ2JyZsmjqCFNXbNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
Manifest number: 0149
Signing time: Sat 13 Jun 2026 08:00:20 +0000
Manifest this update: Sat 13 Jun 2026 08:00:20 +0000
Manifest next update: Sun 14 Jun 2026 08:00:20 +0000
Files and hashes: 1: LL4V8sco-bLn6X62NhH7oSncxGQ.roa (hash: XyYD4raxZ15vCOfOVeQTnYj1yOHNjolcltnv8E/D12M=)
2: nzPNzne2vwIJ2JyZsmjqCFNXbNM.crl (hash: 2T8zc4kTATPMukOUwTluO6LfZUkg+wdJrm6cBk9KzTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzPNzne2vwIJ2JyZsmjqCFNXbNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:fe:fe:a2:77:65:37:ad:48:f0:74:9a:86:3b:51:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f33cdce77b6bf0209d89c99b268ea0853576cd3
Validity
Not Before: Jun 13 08:00:20 2026 GMT
Not After : Jun 14 08:00:20 2026 GMT
Subject: CN=cf0eb7eb7add13c5367e651a934442a6eeca4f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:aa:bf:20:6d:f5:89:be:37:f5:b8:05:7f:a0:
f0:cb:87:88:34:2a:64:4d:8c:50:2c:46:dd:6b:18:
02:43:2a:5b:ab:a9:4f:ac:97:7a:1f:8d:71:c8:6c:
e4:8a:5e:89:22:ae:14:55:92:f8:fe:52:3b:38:bd:
65:1c:ac:d7:0d:92:41:bd:d3:5c:8e:26:d9:4f:20:
df:66:88:97:4c:d1:bc:46:cd:bd:93:55:b5:c0:4d:
44:36:f1:1d:db:21:f9:dc:18:b7:9b:df:e3:e3:14:
03:30:f0:68:91:b8:8a:cc:a9:23:a4:47:ab:d4:1b:
2b:9a:ab:d7:79:68:5a:e8:54:c7:15:74:18:70:a9:
c6:3a:39:cf:75:5f:c8:1b:34:57:42:77:b5:2e:23:
14:41:26:f9:ba:18:66:ee:49:cc:a3:ba:0e:da:fc:
cb:05:64:ec:52:dd:19:05:f4:4a:fe:c6:81:e6:d0:
72:53:5d:58:7c:67:40:6c:35:ba:70:49:f7:e5:e7:
16:73:21:b2:9a:c6:39:6f:e1:01:7f:2c:01:04:49:
81:c2:2c:39:64:24:9b:40:50:5b:fd:31:33:99:64:
a8:5d:84:a4:2b:8b:51:8c:17:62:f5:b0:f4:76:22:
43:2b:01:7f:fd:d9:49:75:3c:e8:b9:dc:ea:56:c2:
82:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0E:B7:EB:7A:DD:13:C5:36:7E:65:1A:93:44:42:A6:EE:CA:4F:53
X509v3 Authority Key Identifier:
keyid:9F:33:CD:CE:77:B6:BF:02:09:D8:9C:99:B2:68:EA:08:53:57:6C:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzPNzne2vwIJ2JyZsmjqCFNXbNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:57:0f:71:0b:3d:91:4d:72:77:f7:82:2f:ef:dd:0b:b5:00:
8d:a8:04:92:ed:55:21:a9:73:3e:fe:18:28:d2:e2:d3:6a:cc:
07:d8:b6:c2:4f:24:1f:4f:fb:59:94:b8:b0:17:b9:c3:a9:45:
a9:f1:d0:02:4e:8a:fd:61:68:8e:d2:0e:d0:1d:3e:94:4e:46:
47:79:68:ff:7a:9c:a5:07:25:64:01:a4:57:0b:71:80:ec:bc:
48:d6:ab:89:31:86:6e:b9:0c:e6:6a:27:b3:29:dc:98:4c:a9:
f2:67:3b:58:65:0b:19:0e:d8:e3:b6:48:21:95:29:52:28:fe:
76:58:9f:30:db:68:b6:5b:8e:15:86:92:a9:7a:d8:68:49:9e:
9f:48:bf:c1:bb:ab:44:41:8d:ad:c9:1a:57:e1:f9:46:10:c9:
38:60:fa:a1:03:64:38:92:27:1c:52:f4:50:6d:f2:89:f9:9a:
ad:7a:f4:ac:37:0b:2b:20:70:7a:83:de:c3:44:05:db:8e:15:
ca:26:c4:47:6a:72:95:0d:db:4c:cd:ba:a8:06:5e:a7:f5:3e:
10:96:26:9f:0c:0f:e1:02:bb:d4:34:e8:c6:ef:59:6a:18:03:
c0:cf:10:46:ce:53:ed:0d:bf:5b:6e:d9:41:a5:78:e8:07:51:
0f:6c:ac:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:23:40 2026 by rpki-client