Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
File: nzcg6XD6oOB_UKY4nnrlOvpDnas.mft (raw, json)
Hash identifier: /LWVBXmUAV/O1dL9uLv4HIP7uVXjukGuWqo9NgNAs6I=
Subject key identifier: 77:45:17:13:37:BB:55:5E:32:36:C2:16:A4:83:D2:53:A1:D6:7E:DA
Authority key identifier: 9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
Certificate issuer: /CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Certificate serial: 019EC300C9DA1810A4E2CB92B74D388E2545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
Manifest number: 1961
Signing time: Sat 13 Jun 2026 22:01:09 +0000
Manifest this update: Sat 13 Jun 2026 22:01:09 +0000
Manifest next update: Sun 14 Jun 2026 22:01:09 +0000
Files and hashes: 1: DwjBds5b0bny3-dZb3jOPo6oE6o.roa (hash: Rkq+xz9kCRAZI1zfzUNT6Gu5M/oAmAXmbyM5y+/YH1I=)
2: nzcg6XD6oOB_UKY4nnrlOvpDnas.crl (hash: AZwT+DZQ078diNybsW8IKh1+2fPc5ufxE8esfXoeaRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:c9:da:18:10:a4:e2:cb:92:b7:4d:38:8e:25:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Validity
Not Before: Jun 13 22:01:09 2026 GMT
Not After : Jun 14 22:01:09 2026 GMT
Subject: CN=7745171337bb555e3236c216a483d253a1d67eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:71:27:d4:06:d4:5c:aa:5b:ed:e8:b0:63:6b:
e5:99:6d:0b:ca:45:a3:d4:54:ee:6f:02:5a:58:82:
05:16:3a:d1:f1:d4:cf:68:cb:56:ca:f5:92:0d:d4:
fe:41:06:97:f7:75:50:a4:18:76:ca:6d:fb:a5:4d:
56:ac:4b:76:ee:97:75:b5:13:45:52:bf:8c:75:bf:
6b:c8:4a:ef:26:18:af:c6:e4:47:fe:f9:fe:f3:73:
c6:62:92:29:32:dc:67:c5:66:97:6c:a4:cd:e4:a0:
c6:39:c5:5e:d8:6c:10:77:65:f5:ce:0d:c6:76:22:
7e:c0:b0:c9:40:dd:d2:5f:fc:e3:b9:a6:48:2f:9e:
b0:5a:0b:07:a4:8c:3b:b4:91:a9:39:e8:10:99:8f:
3d:e4:0a:84:b8:f0:fb:0a:8f:8a:f1:34:1a:10:ef:
57:fb:6c:d5:a8:a6:15:26:e9:5d:0c:93:08:20:22:
b5:76:b4:99:9c:da:0c:b7:db:ca:ce:35:8c:c2:9f:
03:10:ad:b7:e4:27:48:c6:69:e9:30:b4:93:3b:16:
dd:a8:08:74:54:3a:37:e0:32:81:df:78:06:56:8d:
e6:f0:db:a6:ea:50:cf:49:52:f8:50:98:b1:b4:7d:
99:4f:84:bc:7b:b1:36:05:1d:b6:22:76:c2:4a:9c:
53:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:45:17:13:37:BB:55:5E:32:36:C2:16:A4:83:D2:53:A1:D6:7E:DA
X509v3 Authority Key Identifier:
keyid:9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:03:6d:76:8c:85:8c:b3:e3:cf:5b:52:bc:40:84:42:f0:fd:
54:3b:01:e7:d9:25:60:27:30:fb:31:9d:e1:57:af:07:35:78:
05:0d:67:a0:6a:28:48:be:e3:c6:3c:94:24:9c:fa:b4:57:0f:
5d:b0:dd:19:d8:bf:f9:ee:9e:77:83:68:8e:b7:86:77:79:c0:
d7:0d:e8:a8:76:3a:e4:1e:98:4b:65:7d:ec:03:30:aa:3b:0b:
bb:67:9f:68:a5:01:0e:8f:3a:25:4b:84:bb:83:3a:e1:6f:ce:
ba:5b:4d:d1:54:a1:93:bf:7f:56:1c:25:35:7e:db:f5:9f:20:
e3:16:36:61:79:e3:79:93:87:bb:52:ec:b8:f2:3e:b1:85:23:
78:d3:b9:da:64:d8:eb:85:6b:65:69:02:97:62:3e:34:60:62:
4e:ab:3b:76:b1:32:8d:7e:36:c8:69:b9:59:f5:cd:54:12:c7:
32:d2:af:3e:3a:c5:30:71:59:dd:a4:4d:7d:ca:6e:61:34:91:
8e:24:0d:aa:2a:a5:f6:e8:b4:4b:fb:85:af:47:d2:3b:4a:f8:
b7:71:57:08:0a:59:bb:86:a8:21:8f:57:93:30:1a:dd:96:a9:
15:89:41:f3:af:0f:d7:c7:bb:10:67:c6:1f:87:da:2c:35:8c:
b5:39:06:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:09:26 2026 by rpki-client