Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
File: nzcg6XD6oOB_UKY4nnrlOvpDnas.mft (raw, json)
Hash identifier: 3iblXX+AECngRYg3X0JPu+lRu9CbHS+dZLZIDgUzsAQ=
Subject key identifier: 0E:7B:32:40:B2:06:32:F9:CC:9A:43:5B:1B:E2:73:EF:D6:F4:1A:DA
Authority key identifier: 9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
Certificate issuer: /CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Certificate serial: 019CAC0FFC28FE67253CFAD3B98891C3A98B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
Manifest number: 184C
Signing time: Mon 02 Mar 2026 01:00:54 +0000
Manifest this update: Mon 02 Mar 2026 01:00:54 +0000
Manifest next update: Tue 03 Mar 2026 01:00:54 +0000
Files and hashes: 1: DwjBds5b0bny3-dZb3jOPo6oE6o.roa (hash: Rkq+xz9kCRAZI1zfzUNT6Gu5M/oAmAXmbyM5y+/YH1I=)
2: nzcg6XD6oOB_UKY4nnrlOvpDnas.crl (hash: npaOmFEtJz+Y83BtO5oQiGNk+/lj19Gznqf8H7ikLDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:fc:28:fe:67:25:3c:fa:d3:b9:88:91:c3:a9:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Validity
Not Before: Mar 2 01:00:54 2026 GMT
Not After : Mar 3 01:00:54 2026 GMT
Subject: CN=0e7b3240b20632f9cc9a435b1be273efd6f41ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:e2:a3:55:50:86:dd:51:42:2e:89:33:dc:
bb:ce:70:4a:9e:c1:4d:6c:fc:24:e2:4d:80:fb:90:
b6:30:28:52:78:29:73:bc:bb:eb:96:63:dd:bd:17:
ab:ac:09:b9:14:5b:25:c6:96:8f:ca:b6:ea:8e:81:
48:bd:19:ea:e5:4c:a8:f3:27:9f:58:77:3a:6f:3b:
80:17:82:0a:0a:ab:a3:0f:a6:e9:15:a6:03:a7:e4:
48:03:27:e7:09:ab:91:ef:eb:30:64:ce:8b:90:58:
c2:47:95:36:b5:58:08:5b:b4:d7:03:0e:db:f0:a4:
49:6c:42:a0:0b:cc:7b:b1:0c:09:a4:61:49:e6:9e:
e0:e2:e8:f3:b1:b9:ba:cf:c8:90:dc:76:ca:c8:78:
b0:05:94:80:8e:4c:2c:b2:15:6b:e3:c4:cd:2a:da:
b1:3b:db:05:d7:44:c8:12:a2:c8:ec:45:04:a0:eb:
39:44:f3:58:5d:a9:f6:91:42:c9:cc:6d:2f:42:2f:
c7:83:23:0c:98:ad:d0:91:9f:85:e1:87:e9:de:bd:
15:8b:46:28:24:a7:e2:d2:8c:12:d7:e0:28:0e:60:
2a:71:1e:6e:9c:35:87:ba:da:46:03:ca:ce:84:bc:
f4:42:17:44:ea:3f:0c:71:fe:8d:52:1f:12:7b:ec:
10:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7B:32:40:B2:06:32:F9:CC:9A:43:5B:1B:E2:73:EF:D6:F4:1A:DA
X509v3 Authority Key Identifier:
keyid:9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8f:23:53:40:ad:48:8a:6a:a1:9f:39:e9:e8:5a:dc:96:3c:
a0:7f:86:b7:ee:87:1d:d9:51:7c:42:b2:85:75:1a:05:09:90:
4c:8c:7c:7f:d5:3e:71:bb:04:6d:af:3e:0d:9d:7b:b7:73:d8:
8f:92:02:4e:60:2f:7a:4f:e8:49:b1:c4:71:15:51:15:d0:08:
d2:c5:7f:a9:23:5e:82:8f:79:c5:c1:95:f4:2c:14:4a:62:80:
72:f3:70:ba:3a:02:92:7b:23:08:67:b2:b5:92:db:7f:9a:44:
1a:b1:8d:19:e2:bf:53:f9:0d:df:7b:12:38:fa:90:1e:58:86:
26:7c:0f:2d:0d:54:a4:3f:73:81:b0:54:4a:c6:91:17:d4:70:
01:17:cb:47:e0:be:41:ed:7d:f1:15:15:1c:33:f7:a3:40:b3:
b6:f3:15:bf:0d:bb:9e:0a:2f:bf:84:4a:78:a2:4c:2a:09:36:
00:9b:66:96:39:c9:50:81:7d:a1:92:57:a2:c9:f6:79:a0:cb:
b5:11:98:5c:a3:33:15:24:47:64:1d:46:5c:cd:77:15:7e:15:
e1:d9:1a:68:23:f5:68:b4:e3:63:23:08:53:6e:a8:b4:c2:a4:
27:e7:55:75:01:7a:05:6e:35:fa:30:5e:a6:c4:74:94:e9:0c:
ad:8b:0e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:05 2026 by rpki-client