Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
File: U_NZCAnRh_ezYfskzUP5P2ZLILM.mft (raw, json)
Hash identifier: em4Jb2I3T/Abk1mVJ/0eO5YYqDuU8y0DfNoVpODd/RM=
Subject key identifier: 30:70:20:DD:81:BB:62:B9:A3:51:D1:B1:17:CE:50:55:CF:02:C3:16
Authority key identifier: 53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
Certificate issuer: /CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Certificate serial: 019D99D063DDC7126A7ACFDC5D9CF3EC0DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 05:01:04 +0000
Manifest this update: Fri 17 Apr 2026 05:01:04 +0000
Manifest next update: Sat 18 Apr 2026 05:01:04 +0000
Files and hashes: 1: 1-UcYB_bC1Q74xvMeMptRl_v4GSM.roa (hash: CZsJE/C7u1KFT+BSHVUsJyL6cOqDP5qXckw/MXkpdZw=)
2: IADl1Gv9BuddIG-0OHvNCj39-5w.roa (hash: S9Dxk12pt58eWH9jO5GDFxrOLIjhAQo2JWChQTtOvm0=)
3: U_NZCAnRh_ezYfskzUP5P2ZLILM.crl (hash: pAopU0ljKLnZR32OdjVfRiQXTnlY2tO9bRX/OJgKFic=)
4: ctdO6KeqKtoQl8jil7v642rgLAY.roa (hash: 0Ysbxgr5wlnCLuuipo5HyI6PWUVSDIOqUxGUbxE7UC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:63:dd:c7:12:6a:7a:cf:dc:5d:9c:f3:ec:0d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Validity
Not Before: Apr 17 05:01:04 2026 GMT
Not After : Apr 18 05:01:04 2026 GMT
Subject: CN=307020dd81bb62b9a351d1b117ce5055cf02c316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:50:11:47:e8:0c:f8:96:d5:9f:88:f7:53:5a:
ef:b9:df:a2:dd:8e:c4:9f:35:b1:86:c2:e1:44:78:
f5:23:93:e1:9b:85:f6:e3:6b:e6:15:81:61:aa:3a:
2a:5c:2c:d5:c6:e6:16:93:26:e0:71:58:ba:5b:e3:
24:9c:25:e2:fc:77:46:1c:3b:9e:16:87:2d:cd:5f:
6f:c5:6a:c7:4a:70:33:4a:49:98:c3:aa:ee:52:9d:
c9:7c:a9:29:14:26:b3:db:e1:a2:48:1d:8a:8b:39:
bc:65:e4:77:69:f6:78:b6:9e:9a:bd:f3:4a:fd:4e:
80:ef:17:73:39:ff:d5:34:59:fe:f8:de:c0:d0:23:
07:5d:78:7a:06:74:75:56:7c:ef:4f:d2:6a:51:b5:
91:46:4d:fd:e9:3e:8c:c1:c8:2e:3f:2d:f8:b3:84:
8d:46:75:ed:37:84:5e:82:ba:43:ec:a9:50:6c:e3:
20:eb:ff:c2:73:c2:75:58:b1:13:24:26:c0:aa:31:
11:24:2a:c1:23:bf:65:94:9e:6f:04:a1:25:ce:a8:
ef:75:2f:a7:73:d5:89:00:96:80:ef:d2:bc:c9:8d:
0b:34:30:34:8f:65:24:cc:10:8f:ce:31:fd:15:a9:
c6:3f:0b:43:13:7c:d1:19:73:d5:ca:70:20:68:11:
69:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:70:20:DD:81:BB:62:B9:A3:51:D1:B1:17:CE:50:55:CF:02:C3:16
X509v3 Authority Key Identifier:
keyid:53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d9:e7:6f:28:93:05:9d:ef:5f:79:95:2c:27:3e:e0:06:f7:
16:43:3f:1e:cf:db:62:fa:6b:ed:53:5d:f9:c3:3e:fd:ea:d8:
12:a7:dd:84:28:3a:69:e9:63:72:c8:0b:25:ba:72:9b:1c:76:
33:d4:e3:97:6a:55:48:8f:65:8d:c0:d7:95:c2:02:ef:b9:94:
be:e6:56:53:6c:c4:71:f8:10:5b:cd:59:54:a3:87:e1:aa:1f:
b9:c1:8b:8e:02:9c:10:a6:de:8e:1b:0c:0f:48:29:6c:52:23:
73:eb:9b:69:e6:d8:51:76:d0:0e:dd:17:5f:31:03:f4:f9:60:
1a:b0:a6:ad:52:fb:92:f4:4f:a1:62:c7:60:31:92:85:8b:45:
bb:84:ee:45:42:4b:11:0a:e8:1b:e4:18:e0:88:2d:c2:95:3a:
de:64:93:81:4a:dc:20:20:22:15:7e:be:99:a4:7f:47:ac:26:
7d:4a:60:83:fa:7b:6b:89:64:53:9d:0b:67:b3:4c:1b:da:9c:
74:53:5c:3d:94:7c:88:bc:45:bc:f9:c1:c2:35:de:39:84:e1:
57:7f:8c:93:b0:bf:c3:d9:eb:3f:98:0a:5f:bb:67:05:15:87:
14:0f:b8:3a:3c:c0:9c:4f:a3:f1:3e:44:76:1c:31:8e:9b:b9:
12:e0:b8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:23:30 2026 by rpki-client