Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
File: NZ8eO4BVHpihb8K7y33YfJoO_iU.mft (raw, json)
Hash identifier: QrunoSXQRV/KMuMtD4g41qm/hRpI8Gekl+T0mLAyPeM=
Subject key identifier: FF:CD:A8:19:DA:15:66:04:D6:B6:BD:29:E3:AC:C2:33:E4:B9:B3:9D
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 01A0DACDD8022CA6AD9A04871D6E27752667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
Manifest number: 11A3
Signing time: Fri 25 Sep 2026 23:01:58 +0000
Manifest this update: Fri 25 Sep 2026 23:01:58 +0000
Manifest next update: Sat 26 Sep 2026 23:01:58 +0000
Files and hashes: 1: L1KLoii7mllBm2dQe2-Gj8PsyDI.roa (hash: zs3GHCL4mut8DK7aF4W8FvASTk6ZHfaiz6+KBdL52cY=)
2: MyTkgN8HXkjrp-kxigqAegjklMQ.roa (hash: pFPPNvby+G9WZLBUBJIB4xiTS6SkjYoIs0G/Wb+5n8s=)
3: NZ8eO4BVHpihb8K7y33YfJoO_iU.crl (hash: seOyunAd8CgjM5hRfucrNsc64GhGkV7GgeIf421avbs=)
4: TO6nqQhnOsZjFu2as_fLfCF9jiU.asa (hash: AzlXqDoRzTdGdaGKF/7T/k6tmAW/64eypKY9s/31aeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 23:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:d8:02:2c:a6:ad:9a:04:87:1d:6e:27:75:26:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Sep 25 23:01:58 2026 GMT
Not After : Sep 26 23:01:58 2026 GMT
Subject: CN=ffcda819da156604d6b6bd29e3acc233e4b9b39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7c:0f:5d:64:81:2b:22:64:a3:41:b2:3f:4d:
88:69:1b:78:5d:30:23:73:a9:2a:17:1d:f4:e3:12:
82:65:72:9d:bb:dc:ef:be:9c:14:a2:0d:49:59:de:
05:ef:0f:9f:ad:9d:34:5b:33:a4:c6:5f:6f:2a:6e:
17:b6:cb:c0:42:81:1a:40:35:a3:f9:d2:b6:d2:df:
df:be:e2:7a:ba:54:9b:53:06:54:74:77:1f:80:54:
ec:f9:2d:9c:8a:8b:37:2d:b0:b0:ef:2f:93:e8:78:
af:f3:c6:0d:00:48:da:97:03:4c:42:06:3d:c6:73:
a1:1e:e3:67:d8:1e:2f:4e:22:a9:e8:6b:c3:d3:f7:
33:8f:92:06:92:44:e3:f7:f2:6b:aa:d1:f7:05:35:
b6:d0:2f:a0:d5:90:ad:e4:bb:65:27:24:ee:f2:c3:
d5:e8:4d:3d:27:a2:8c:db:52:32:6f:f3:09:4a:09:
a9:ae:3b:2e:68:bd:bd:ec:3f:69:06:42:c7:d4:44:
d9:3a:96:f0:04:0b:8f:9e:f1:21:47:5d:2a:03:27:
c6:db:1c:eb:39:b5:f4:25:45:d3:9f:46:0f:c9:21:
0b:a1:53:e3:c7:78:2d:04:b7:e7:90:eb:c5:cc:4c:
d2:93:77:04:79:e2:96:3a:11:df:39:56:17:a7:37:
4e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CD:A8:19:DA:15:66:04:D6:B6:BD:29:E3:AC:C2:33:E4:B9:B3:9D
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:8c:62:64:a0:1f:a7:cb:9a:d6:07:a0:aa:b7:5c:11:a6:b5:
9d:3f:b4:a0:8f:81:ef:fb:bf:43:0f:f7:7d:27:60:76:41:e4:
fa:84:b3:0e:6f:84:97:65:72:53:6c:5e:d9:ed:0b:3c:35:03:
22:a7:6e:ed:ff:15:96:a1:fc:f5:cf:b0:47:4c:b8:f3:48:25:
8b:ed:7a:9e:b1:49:74:a8:09:68:97:e5:38:8f:1a:8b:11:0a:
36:89:82:36:d1:cd:25:bb:68:23:2a:b0:9a:4c:ee:b8:81:fc:
5e:4a:ed:85:a2:5a:dd:9e:b4:9c:88:71:3c:21:11:cf:86:ab:
bf:15:85:6e:ef:17:eb:7c:eb:a1:8e:f7:4c:b2:71:98:4a:3c:
53:5d:59:e2:5b:d4:74:a2:64:2d:a0:b0:8b:c0:fb:b1:50:a7:
93:d3:f4:53:da:09:24:6c:64:68:de:6b:d0:25:4c:72:a3:ea:
fa:d8:42:5a:9e:ab:4f:ca:7c:6b:09:42:b8:22:32:04:29:f5:
97:b7:c2:a1:35:20:ea:e1:5a:2f:38:87:54:71:ce:95:66:82:
a1:bb:20:4d:ec:3d:86:ea:01:2f:90:b9:4a:31:94:1c:f0:66:
dd:5c:fd:9e:69:90:9f:b3:10:d8:7a:21:5c:76:90:de:c6:fa:
34:02:e6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:15:56 2026 by rpki-client