Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
File: U_NZCAnRh_ezYfskzUP5P2ZLILM.mft (raw, json)
Hash identifier: pMvs4aHCwEUnD/5kaHDg9m7uVXWX3WCdeqqlFkWx8Do=
Subject key identifier: 2F:93:23:CE:FC:20:D8:D5:77:2C:F3:FC:C0:E4:B9:4D:E2:5B:83:6B
Authority key identifier: 53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
Certificate issuer: /CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Certificate serial: 01A12767EF3888CFC35046CB4612728AEB2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
Manifest number: 1A9E
Signing time: Sat 10 Oct 2026 20:01:25 +0000
Manifest this update: Sat 10 Oct 2026 20:01:25 +0000
Manifest next update: Sun 11 Oct 2026 20:01:25 +0000
Files and hashes: 1: 1-UcYB_bC1Q74xvMeMptRl_v4GSM.roa (hash: CZsJE/C7u1KFT+BSHVUsJyL6cOqDP5qXckw/MXkpdZw=)
2: IADl1Gv9BuddIG-0OHvNCj39-5w.roa (hash: S9Dxk12pt58eWH9jO5GDFxrOLIjhAQo2JWChQTtOvm0=)
3: U_NZCAnRh_ezYfskzUP5P2ZLILM.crl (hash: 2nOkNbb6Y52Qo4pJ6fX9rPQhPG7IY6VILvFwAyIBQkc=)
4: ctdO6KeqKtoQl8jil7v642rgLAY.roa (hash: 0Ysbxgr5wlnCLuuipo5HyI6PWUVSDIOqUxGUbxE7UC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 19:34:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:67:ef:38:88:cf:c3:50:46:cb:46:12:72:8a:eb:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Validity
Not Before: Oct 10 20:01:25 2026 GMT
Not After : Oct 11 20:01:25 2026 GMT
Subject: CN=2f9323cefc20d8d5772cf3fcc0e4b94de25b836b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:37:e6:11:de:d2:23:db:fe:cd:38:72:fd:78:
02:d4:6f:74:de:ed:fc:2c:21:5e:a2:76:69:95:df:
cf:c9:8d:9a:ec:15:29:7a:24:78:87:ea:72:1d:c4:
fc:26:92:1d:57:9c:9b:a0:d6:09:0f:25:12:3d:3d:
a6:25:70:df:b7:be:3a:b8:6d:2d:f6:3f:08:c6:48:
6e:0e:20:1c:62:10:90:c7:91:32:87:c6:fa:58:36:
62:86:75:8f:a4:a7:e4:82:56:0c:d7:22:68:41:80:
e0:a7:e2:30:3d:a1:ac:2a:04:71:f8:72:07:c9:8f:
8c:34:04:e9:c8:98:87:85:33:bc:54:50:cf:6f:fd:
5a:ed:70:43:5d:4c:9e:47:b4:df:6d:03:8e:de:18:
76:21:23:9e:7d:73:75:15:cd:02:27:48:56:27:90:
ef:a9:10:2f:d3:18:bf:3c:dc:eb:fc:3f:93:2a:62:
20:fb:2c:86:11:d3:39:69:ad:65:f3:7b:87:bc:ee:
bd:2a:69:77:50:13:f1:31:a6:d0:3a:09:ec:d0:e1:
a8:33:15:8e:fa:f4:f0:bf:02:ec:78:87:46:f3:ae:
26:d3:0f:a5:84:c6:1c:8a:e4:48:46:06:dd:7b:cf:
d7:f6:12:25:28:e8:b4:96:f5:0d:99:cc:a5:94:f6:
96:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:93:23:CE:FC:20:D8:D5:77:2C:F3:FC:C0:E4:B9:4D:E2:5B:83:6B
X509v3 Authority Key Identifier:
keyid:53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c9:f9:a5:55:95:65:10:d8:8f:55:9a:c5:28:e4:66:66:87:
3f:76:4a:1f:85:1d:9a:6e:c6:a7:62:ef:26:cc:71:93:f4:ee:
20:3d:c6:d0:f2:e8:0e:12:6d:da:97:7d:75:b1:5c:e3:fe:f9:
d6:7e:57:1a:d7:ff:b0:4d:e7:2c:30:2d:53:37:bb:78:b7:23:
a3:80:0a:d4:20:86:f8:1f:d2:91:b6:ac:b6:81:53:aa:bd:ca:
bc:7f:49:71:d9:87:43:17:03:ee:23:05:84:8a:5c:05:5b:eb:
62:81:83:bb:92:ac:a6:3a:f3:83:df:0a:88:d2:f4:e0:92:08:
11:0a:b5:ee:17:25:78:35:9d:c1:0f:b0:7f:34:f9:57:51:f8:
7c:a1:01:40:52:9d:1c:aa:87:63:ea:3c:7f:12:81:b4:e9:e2:
d3:50:6a:80:fa:61:cc:c6:5f:7d:74:58:90:09:5d:07:d7:76:
9a:0b:b6:e7:82:a3:af:f4:ce:78:6b:31:92:2a:76:d2:15:af:
95:08:c7:e7:36:37:bf:36:4d:eb:b6:6e:fe:f9:5e:cf:61:01:
7a:db:6f:e6:ba:dd:1b:61:d5:0a:1f:72:10:54:7d:2c:8a:ee:
03:a3:de:b6:36:71:83:ad:40:6a:30:fa:f1:7b:88:24:81:fb:
82:5b:01:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:48:38 2026 by rpki-client