Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
File: nzcg6XD6oOB_UKY4nnrlOvpDnas.mft (raw, json)
Hash identifier: fu8W0toum7g34okMkTFVB/NFHJh3SbCGQLyYc+wS4o8=
Subject key identifier: 5C:26:97:7D:94:14:B8:32:BA:04:B3:57:49:ED:E4:DA:E8:90:1A:49
Authority key identifier: 9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
Certificate issuer: /CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Certificate serial: 01A10A39434C6C4FDDC1AE7C349F9B9D05F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
Manifest number: 1A8F
Signing time: Mon 05 Oct 2026 04:01:27 +0000
Manifest this update: Mon 05 Oct 2026 04:01:27 +0000
Manifest next update: Tue 06 Oct 2026 04:01:27 +0000
Files and hashes: 1: DwjBds5b0bny3-dZb3jOPo6oE6o.roa (hash: Rkq+xz9kCRAZI1zfzUNT6Gu5M/oAmAXmbyM5y+/YH1I=)
2: nzcg6XD6oOB_UKY4nnrlOvpDnas.crl (hash: YQ3vKmDUP1v0GMBFeo3E7P2b+ox3PUF/aIWminGvHks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:39:43:4c:6c:4f:dd:c1:ae:7c:34:9f:9b:9d:05:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Validity
Not Before: Oct 5 04:01:27 2026 GMT
Not After : Oct 6 04:01:27 2026 GMT
Subject: CN=5c26977d9414b832ba04b35749ede4dae8901a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:89:e6:36:6d:5c:0d:37:33:51:ed:98:7e:0d:
d9:9c:ef:cd:3e:04:dd:55:a2:36:88:03:ed:f8:48:
08:5a:c6:e7:c0:d3:20:ec:bb:04:96:e1:99:e1:00:
4b:4f:3b:5d:3e:cd:0d:a7:47:33:9e:92:eb:b7:a0:
c7:4c:df:0a:78:f6:aa:ca:98:56:e9:74:f4:c9:43:
a8:3a:2d:94:c5:71:49:82:c0:f1:b9:95:33:5b:fe:
84:e9:87:fb:2c:65:22:96:8b:23:a5:da:dd:b5:b1:
9a:c6:a6:fe:c2:ac:aa:7f:e0:d0:d3:3f:db:24:9e:
71:0c:9f:35:48:3f:09:aa:f3:32:41:b9:19:30:7a:
aa:57:ee:c6:ad:cd:ba:4d:4d:37:cd:b6:85:6b:91:
f8:2a:86:e4:23:7f:d0:9c:de:da:f0:7d:50:4f:bc:
65:f8:a5:66:99:b8:05:46:22:7f:9c:b5:76:4f:72:
18:d0:89:18:44:75:ca:ab:c1:90:ac:24:fe:67:38:
d4:35:45:62:d1:bb:09:44:f1:bb:38:cc:40:b8:a0:
8c:d3:72:60:ed:44:e7:02:20:85:11:f7:0e:c6:79:
a9:9d:03:02:ae:f2:56:2a:a7:f9:54:cf:dc:99:5a:
a5:1d:67:57:fb:f8:90:b8:73:5c:df:e8:eb:b0:05:
5f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:26:97:7D:94:14:B8:32:BA:04:B3:57:49:ED:E4:DA:E8:90:1A:49
X509v3 Authority Key Identifier:
keyid:9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:bc:9e:2c:cf:8b:f9:9e:ea:80:3f:20:2d:6e:f8:fd:a0:73:
58:ca:60:fb:77:88:1c:11:00:46:6a:e3:e9:eb:23:a6:89:38:
a3:f9:b2:be:d8:37:e8:ab:8d:5c:77:14:32:0d:d2:32:ab:55:
28:bd:af:98:d2:79:b4:a2:f5:5c:8b:f8:ce:19:cc:8a:f4:24:
fd:33:e8:93:e2:58:c1:c5:71:21:1c:bb:a4:5f:73:63:c9:6b:
2d:28:55:b7:36:c4:1a:e9:1c:6e:56:c5:0b:79:96:3b:b3:e3:
80:82:23:18:91:c3:de:c9:da:24:84:84:de:a0:50:b3:2f:83:
c6:68:8a:c6:89:47:a8:2e:1c:61:78:9a:a1:50:c7:bd:e3:f6:
a6:2b:32:a2:08:52:8f:79:86:8f:f9:db:b5:b2:5f:5c:a4:cb:
e8:21:e0:29:b7:4c:d9:18:74:96:3a:71:d3:01:18:34:f3:05:
93:6e:10:61:a4:15:39:9c:55:f7:8f:89:b8:cf:38:17:cd:54:
9a:a2:b9:80:32:1b:8c:80:f5:9d:7b:d5:9a:39:69:c6:64:5a:
d2:90:13:b8:93:e6:c2:87:8f:ad:b2:b9:ba:0c:51:2a:83:a1:
57:0f:64:4f:86:d7:89:02:ba:9c:a3:94:11:11:09:3e:14:4c:
0a:bd:45:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 08:46:06 2026 by rpki-client