Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
File: nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft (raw, json)
Hash identifier: qPRbxUjsvLJnW3R9pid5boFeeY3HuQMpZLk8EOVw/Ns=
Subject key identifier: 04:CB:06:70:F6:11:F8:A6:E2:7D:E1:E8:D1:93:FD:12:CE:9A:05:77
Authority key identifier: 9F:33:CD:CE:77:B6:BF:02:09:D8:9C:99:B2:68:EA:08:53:57:6C:D3
Certificate issuer: /CN=9f33cdce77b6bf0209d89c99b268ea0853576cd3
Certificate serial: 019EC1EDB7046F60FAFA0BFE5C89697961FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzPNzne2vwIJ2JyZsmjqCFNXbNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
Manifest number: 014A
Signing time: Sat 13 Jun 2026 17:00:41 +0000
Manifest this update: Sat 13 Jun 2026 17:00:41 +0000
Manifest next update: Sun 14 Jun 2026 17:00:41 +0000
Files and hashes: 1: LL4V8sco-bLn6X62NhH7oSncxGQ.roa (hash: XyYD4raxZ15vCOfOVeQTnYj1yOHNjolcltnv8E/D12M=)
2: nzPNzne2vwIJ2JyZsmjqCFNXbNM.crl (hash: WOGHlEwDzuZEWDIhFE73MfpC54/iFLIjor29KCsF9sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzPNzne2vwIJ2JyZsmjqCFNXbNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:b7:04:6f:60:fa:fa:0b:fe:5c:89:69:79:61:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f33cdce77b6bf0209d89c99b268ea0853576cd3
Validity
Not Before: Jun 13 17:00:41 2026 GMT
Not After : Jun 14 17:00:41 2026 GMT
Subject: CN=04cb0670f611f8a6e27de1e8d193fd12ce9a0577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:52:e8:d2:1b:25:33:8a:77:bd:19:96:84:48:
a6:a3:b8:46:83:a5:ec:20:3e:65:37:16:12:30:ec:
dc:7d:cd:cc:fb:0a:6c:21:1d:3f:99:f6:01:3f:f7:
54:47:a1:f0:8c:65:16:f7:69:f0:45:73:da:33:b5:
c7:f1:f5:f6:ae:64:47:6f:31:5b:a3:a3:6b:a0:0e:
41:8b:0d:07:cf:a9:a6:99:e5:fc:81:c8:3c:d1:44:
3c:c5:ee:d0:85:ed:1a:5c:c6:d7:61:5e:6c:a9:d0:
a2:1c:c3:0c:6e:e2:0c:7a:82:35:79:29:5e:6d:e2:
4a:55:0e:48:b8:02:fe:fe:d1:1a:f7:8a:6f:57:65:
a6:a6:d9:82:d1:0a:8b:5d:2e:15:13:d2:03:b3:b1:
e4:aa:13:2a:bd:ae:ff:e1:2b:66:64:94:76:a4:80:
19:08:74:5e:97:ef:b9:5e:c0:27:d1:ed:34:cc:ba:
fd:92:e2:a3:0d:36:d4:02:6d:d7:de:3f:f8:e4:4d:
d0:55:c0:b3:4d:a5:31:0a:38:f4:7b:00:13:7d:d1:
4a:25:0d:6c:95:50:c8:36:bf:55:9d:5e:1c:21:2f:
5b:04:3a:ca:0a:70:e2:13:97:6a:e5:74:5a:d2:20:
17:d1:68:04:df:c7:4f:22:d3:cc:bc:0c:81:84:2d:
e5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CB:06:70:F6:11:F8:A6:E2:7D:E1:E8:D1:93:FD:12:CE:9A:05:77
X509v3 Authority Key Identifier:
keyid:9F:33:CD:CE:77:B6:BF:02:09:D8:9C:99:B2:68:EA:08:53:57:6C:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzPNzne2vwIJ2JyZsmjqCFNXbNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:66:93:b1:d2:8a:0d:55:4b:95:c7:40:56:fa:69:e3:ce:2a:
49:91:7f:80:13:45:6b:7b:75:e4:aa:94:46:6f:0b:0f:0a:d2:
5e:cb:c3:36:ba:09:da:c1:f2:94:05:23:64:5e:12:54:bd:f8:
50:3e:d2:49:35:e1:b5:ba:03:9b:c5:6c:9f:5f:ab:c6:07:79:
b7:ab:6b:65:65:ae:4d:2f:a2:96:79:43:eb:7b:70:fc:8d:4a:
ee:99:10:e0:bd:ef:16:b5:37:12:fb:9a:d7:84:9b:39:48:f7:
50:8e:67:13:61:3b:e8:fe:3d:f2:71:34:ea:37:bd:40:3e:7e:
73:b8:82:18:ec:9c:73:cf:34:b8:e4:81:6c:57:d5:67:3f:42:
b7:7d:74:2e:2b:b6:d0:cd:8a:9d:be:55:c0:cd:c1:06:99:48:
9d:fb:dd:4b:35:b5:2b:1e:7c:2d:6a:31:8c:1f:e8:70:53:38:
cf:e9:76:03:a3:3b:75:a3:b2:d4:e5:3c:f2:02:71:b2:27:5e:
54:5c:9d:6c:8b:2f:98:67:ea:95:0e:25:74:1d:aa:d7:de:f9:
66:5a:c2:1b:0c:e3:ff:e0:ff:3d:6b:50:2a:04:b4:7d:9a:d9:
6c:df:2a:06:5f:ff:db:96:6b:d7:bf:a0:8a:41:23:46:d5:3d:
78:89:9d:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7B7bcEb2D6+gv+XIlpeWH9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzNjZGNlNzdiNmJmMDIwOWQ4OWM5OWIyNjhlYTA4NTM1
NzZjZDMwHhcNMjYwNjEzMTcwMDQxWhcNMjYwNjE0MTcwMDQxWjAzMTEwLwYDVQQD
EygwNGNiMDY3MGY2MTFmOGE2ZTI3ZGUxZThkMTkzZmQxMmNlOWEwNTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFLo0hslM4p3vRmWhEimo7hGg6Xs
ID5lNxYSMOzcfc3M+wpsIR0/mfYBP/dUR6HwjGUW92nwRXPaM7XH8fX2rmRHbzFb
o6NroA5Biw0Hz6mmmeX8gcg80UQ8xe7Qhe0aXMbXYV5sqdCiHMMMbuIMeoI1eSle
beJKVQ5IuAL+/tEa94pvV2WmptmC0QqLXS4VE9IDs7HkqhMqva7/4StmZJR2pIAZ
CHRel++5XsAn0e00zLr9kuKjDTbUAm3X3j/45E3QVcCzTaUxCjj0ewATfdFKJQ1s
lVDINr9VnV4cIS9bBDrKCnDiE5dq5XRa0iAX0WgE38dPItPMvAyBhC3lkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATLBnD2Efim4n3h6NGT/RLOmgV3MB8GA1UdIwQY
MBaAFJ8zzc53tr8CCdicmbJo6ghTV2zTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnpQTnpuZTJ2d0lKMkp5WnNtanFDRk5YYk5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9kM2VmZDItMDljYS00M2I0LWFiMGEt
NGI2NjZkZTJlOThmLzEvbnpQTnpuZTJ2d0lKMkp5WnNtanFDRk5YYk5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9kM2VmZDItMDljYS00M2I0LWFiMGEtNGI2NjZkZTJlOThm
LzEvbnpQTnpuZTJ2d0lKMkp5WnNtanFDRk5YYk5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOmaTsdKK
DVVLlcdAVvpp484qSZF/gBNFa3t15KqURm8LDwrSXsvDNroJ2sHylAUjZF4SVL34
UD7SSTXhtboDm8Vsn1+rxgd5t6trZWWuTS+ilnlD63tw/I1K7pkQ4L3vFrU3Evua
14SbOUj3UI5nE2E76P498nE06je9QD5+c7iCGOycc880uOSBbFfVZz9Ct310Liu2
0M2Knb5VwM3BBplInfvdSzW1Kx58LWoxjB/ocFM4z+l2A6M7daOy1OU88gJxside
VFydbIsvmGfqlQ4ldB2q1975ZlrCGwzj/+D/PWtQKgS0fZrZbN8qBl//25Zr17+g
ikEjRtU9eImdpQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:51:03 2026 by rpki-client