Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
File: U_NZCAnRh_ezYfskzUP5P2ZLILM.mft (raw, json)
Hash identifier: Wagu3Jvi6d2OSal1ebPEZwDn328NV/YI4xHqyoevbN0=
Subject key identifier: 07:7B:8E:25:35:FA:A7:94:7F:30:E0:9B:EE:92:CE:60:08:47:F7:3D
Authority key identifier: 53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
Certificate issuer: /CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Certificate serial: 019FAAF629CACA49A8567B8E1DDFDB55D7C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
Manifest number: 19D9
Signing time: Tue 28 Jul 2026 23:01:26 +0000
Manifest this update: Tue 28 Jul 2026 23:01:26 +0000
Manifest next update: Wed 29 Jul 2026 23:01:26 +0000
Files and hashes: 1: 1-UcYB_bC1Q74xvMeMptRl_v4GSM.roa (hash: CZsJE/C7u1KFT+BSHVUsJyL6cOqDP5qXckw/MXkpdZw=)
2: IADl1Gv9BuddIG-0OHvNCj39-5w.roa (hash: S9Dxk12pt58eWH9jO5GDFxrOLIjhAQo2JWChQTtOvm0=)
3: U_NZCAnRh_ezYfskzUP5P2ZLILM.crl (hash: SHJNCKVjPbMo9NaW16GK+j7MB4gRo7OIRb8iU271jxs=)
4: ctdO6KeqKtoQl8jil7v642rgLAY.roa (hash: 0Ysbxgr5wlnCLuuipo5HyI6PWUVSDIOqUxGUbxE7UC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:29:ca:ca:49:a8:56:7b:8e:1d:df:db:55:d7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Validity
Not Before: Jul 28 23:01:26 2026 GMT
Not After : Jul 29 23:01:26 2026 GMT
Subject: CN=077b8e2535faa7947f30e09bee92ce600847f73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:04:4d:75:14:07:e4:d6:3d:a8:f3:16:a0:57:
51:e6:a8:03:78:bb:25:b5:b4:02:a0:37:4e:96:59:
f6:2f:b9:0c:c8:a4:d7:f9:65:d1:bf:0d:1e:5b:cd:
ae:38:4f:b5:6f:8e:dc:d3:19:f8:de:e7:ca:0c:31:
5d:f3:8b:24:44:58:ba:11:d2:f6:54:b2:20:9f:1a:
cf:db:d0:34:42:a9:4a:80:18:6e:48:4a:a6:a2:d6:
20:b4:3e:47:32:17:cd:3a:23:04:79:a3:7b:85:77:
aa:67:77:58:5c:47:2a:e0:c5:2c:b2:3d:ff:0b:6d:
d7:41:19:dc:64:e7:5b:cb:54:65:1e:1f:32:30:cd:
a8:27:6f:df:f3:a7:81:6b:2f:d0:e3:e4:21:bb:6c:
6b:c7:76:66:d3:cf:33:83:e4:22:57:1c:96:b3:60:
8a:27:d2:cb:25:ab:10:59:07:34:21:46:2e:b8:78:
46:9c:2c:89:9a:8a:6a:f9:54:01:5d:98:18:e9:32:
01:32:66:54:63:6c:10:ae:e5:b5:66:97:9b:96:04:
ce:5b:eb:1c:5e:75:11:c2:55:9b:75:2d:fa:2a:53:
d4:85:66:ff:af:49:e3:3c:03:a9:3b:11:4d:5f:6b:
e8:b8:47:4e:d8:6e:4d:26:98:5e:82:58:38:01:27:
23:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7B:8E:25:35:FA:A7:94:7F:30:E0:9B:EE:92:CE:60:08:47:F7:3D
X509v3 Authority Key Identifier:
keyid:53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:64:a2:36:5f:4a:e6:7d:24:8b:19:03:1e:a1:18:c5:0a:a2:
e7:66:59:93:b0:a5:85:73:f4:41:40:3c:cc:7b:84:e6:98:2d:
29:83:24:1d:b7:77:3a:6a:ff:28:8b:90:52:cb:e9:be:7f:e1:
63:d2:8e:25:e3:9c:fd:06:a4:a4:fb:54:54:a8:ec:19:15:3b:
3f:44:16:71:cb:56:52:90:81:35:61:31:90:38:0d:97:8d:51:
f2:a4:d5:14:ba:40:c5:42:b4:0f:24:f0:e3:08:52:46:14:2f:
79:69:ba:fe:0b:15:2d:ec:7a:a6:35:45:05:62:9d:70:9d:67:
83:2d:6b:84:32:82:1a:e8:18:44:49:0e:38:89:4a:dd:c5:d3:
eb:32:5e:67:28:44:ee:ae:6f:2a:87:28:6b:43:df:56:1f:c9:
e8:8c:8d:03:17:f3:39:fb:96:60:f1:21:fe:18:d2:e5:fc:f6:
f8:05:a4:de:1a:e9:32:9a:71:d8:b3:d1:3c:2e:3e:aa:94:b2:
8a:a8:f4:51:fa:d9:99:91:55:fa:e1:8e:f8:e4:08:f2:77:6c:
30:bf:95:40:bf:b7:ad:73:ff:83:99:e2:f8:01:59:b9:9a:06:
93:43:58:69:1d:14:70:79:51:f5:3a:4c:e8:69:01:24:89:3f:
6b:92:81:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:51:06 2026 by rpki-client