Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
File: nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft (raw, json)
Hash identifier: 0QVoDuppMCfPSrHp+z2JRiauuYaPvCDa4Jg/z7d2+8Q=
Subject key identifier: 19:24:E3:F3:1E:E2:F0:F1:B4:79:E6:1E:EB:DA:0C:7B:11:75:91:E9
Authority key identifier: 9F:33:CD:CE:77:B6:BF:02:09:D8:9C:99:B2:68:EA:08:53:57:6C:D3
Certificate issuer: /CN=9f33cdce77b6bf0209d89c99b268ea0853576cd3
Certificate serial: 019CAED9B0F81487B827402E763B8B36C575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzPNzne2vwIJ2JyZsmjqCFNXbNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
Manifest number: 37
Signing time: Mon 02 Mar 2026 14:00:27 +0000
Manifest this update: Mon 02 Mar 2026 14:00:27 +0000
Manifest next update: Tue 03 Mar 2026 14:00:27 +0000
Files and hashes: 1: LL4V8sco-bLn6X62NhH7oSncxGQ.roa (hash: XyYD4raxZ15vCOfOVeQTnYj1yOHNjolcltnv8E/D12M=)
2: nzPNzne2vwIJ2JyZsmjqCFNXbNM.crl (hash: xPBSfEuwmczS6PKTP2ylg/95h/JrvoOYGdiret6/fFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzPNzne2vwIJ2JyZsmjqCFNXbNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:b0:f8:14:87:b8:27:40:2e:76:3b:8b:36:c5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f33cdce77b6bf0209d89c99b268ea0853576cd3
Validity
Not Before: Mar 2 14:00:27 2026 GMT
Not After : Mar 3 14:00:27 2026 GMT
Subject: CN=1924e3f31ee2f0f1b479e61eebda0c7b117591e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:70:56:af:af:01:53:27:cb:fc:05:f4:97:7a:
c5:9c:b4:4f:9d:76:5a:c3:01:90:17:2b:a2:34:dc:
f9:04:b8:b9:3d:1b:c6:ce:da:22:0e:df:df:0b:23:
b2:8d:ec:ea:f7:5d:ab:f2:44:8b:11:68:41:61:f5:
ef:19:fa:90:8c:cc:e5:cf:2c:2f:15:9f:03:81:48:
6f:7e:0e:eb:d0:b8:9b:d3:4b:a1:44:7e:2b:cb:d3:
fb:55:e7:6b:39:4f:0f:02:46:1c:e2:4e:9f:72:7e:
4b:33:74:9d:1f:9e:d0:38:07:3d:52:d0:e1:d2:13:
1a:97:19:d2:aa:c2:ee:f9:f4:89:53:9a:d2:cf:b5:
8f:f3:09:c4:c8:a0:70:0e:7e:12:ae:a1:a2:36:60:
c4:23:b8:2a:44:79:67:63:4e:cf:3e:29:0e:2e:b8:
c3:e0:86:a4:b5:a6:9c:97:37:da:78:4b:65:ce:98:
38:a0:a2:56:2a:7a:e4:79:00:cb:fe:74:55:bf:8e:
40:82:79:f8:9d:f1:8f:11:6b:c9:b5:da:26:f5:0c:
8a:83:13:48:c6:61:ed:52:72:bc:c1:c9:a6:7e:e9:
bc:7c:3c:d0:30:94:34:5c:b6:8f:13:1e:95:d2:b0:
f1:77:ae:b9:6b:7e:34:f9:ea:49:df:2e:35:fa:d1:
f4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:24:E3:F3:1E:E2:F0:F1:B4:79:E6:1E:EB:DA:0C:7B:11:75:91:E9
X509v3 Authority Key Identifier:
keyid:9F:33:CD:CE:77:B6:BF:02:09:D8:9C:99:B2:68:EA:08:53:57:6C:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzPNzne2vwIJ2JyZsmjqCFNXbNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:5d:b2:04:47:f8:d9:2c:31:22:e3:33:66:1c:1e:82:b0:69:
57:ce:ad:75:2c:e2:d0:eb:f3:ae:04:a7:9a:50:20:f9:d7:5e:
02:25:71:4b:56:02:1d:b2:6a:0f:c6:bc:e8:6b:7a:e8:ab:76:
f8:9b:2a:bb:c1:08:f7:05:57:d5:85:81:45:95:53:99:70:db:
63:c7:c2:e7:3c:dc:33:31:78:9f:4b:11:4c:76:b8:a6:92:eb:
1e:9d:6c:21:9f:e7:c8:52:0e:58:1f:2e:e1:24:ef:de:b2:07:
d2:29:f0:0b:c9:fc:ca:d8:c3:25:c4:c2:1b:2d:e1:f2:bd:1d:
43:86:7c:dc:a7:3e:ff:da:73:30:f9:b5:7d:3b:4f:36:df:ea:
f1:4e:aa:b5:28:91:88:46:42:29:30:fd:26:71:a2:fe:0d:b2:
32:d9:0f:84:fb:35:92:40:21:9f:9b:c6:07:e7:7c:08:a1:51:
e6:52:f4:e8:5e:86:e7:5b:af:22:ed:bc:ec:dd:72:b2:14:96:
0e:8f:80:f9:88:72:b1:5e:e2:bb:26:30:8e:e8:d0:81:52:97:
a0:38:79:71:24:fc:be:35:95:a6:57:d0:35:3b:b6:4c:82:88:
2a:fb:a0:39:4c:eb:3d:93:9a:81:f8:1c:3c:1d:29:b6:2c:ea:
81:53:d9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:59:29 2026 by rpki-client