Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
File: NZ8eO4BVHpihb8K7y33YfJoO_iU.mft (raw, json)
Hash identifier: 3ZZ0Xa7Y76l0XBi9xwup/ztPSOcK0WYPYrsP67VibX0=
Subject key identifier: 5A:28:35:56:DB:67:D2:AE:4D:DC:A3:42:5D:6B:69:2A:59:66:31:F0
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 019CAA582B5C6154940E816902F671AB6B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
Manifest number: 0F72
Signing time: Sun 01 Mar 2026 17:00:30 +0000
Manifest this update: Sun 01 Mar 2026 17:00:30 +0000
Manifest next update: Mon 02 Mar 2026 17:00:30 +0000
Files and hashes: 1: MyTkgN8HXkjrp-kxigqAegjklMQ.roa (hash: pFPPNvby+G9WZLBUBJIB4xiTS6SkjYoIs0G/Wb+5n8s=)
2: NZ8eO4BVHpihb8K7y33YfJoO_iU.crl (hash: TGelOY8hjdfWY+21e/EsYYGsf7s3aWkXZgdppDuDdk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:2b:5c:61:54:94:0e:81:69:02:f6:71:ab:6b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Mar 1 17:00:30 2026 GMT
Not After : Mar 2 17:00:30 2026 GMT
Subject: CN=5a283556db67d2ae4ddca3425d6b692a596631f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:18:5b:3e:eb:0a:a5:41:cd:c0:8b:c6:ed:
83:28:3a:c8:63:2b:b7:f3:0c:8d:aa:65:3d:fc:c0:
0e:c7:ea:73:33:03:57:7f:22:00:f4:58:45:54:96:
91:39:c7:61:32:f1:83:d7:31:1c:9f:33:41:c6:6d:
61:c5:d5:29:1d:03:1b:0d:41:82:65:08:41:80:12:
1c:b8:e4:84:33:bb:75:b2:7f:d7:a7:1f:b4:6c:0f:
fa:b3:18:b7:99:a3:56:43:f1:ab:e0:4b:5f:9e:d4:
c3:d0:84:fe:82:b7:04:3f:97:be:2d:48:cb:08:b3:
db:07:cd:d5:a0:da:c7:72:79:7d:39:67:ad:72:a7:
44:af:0f:37:9d:45:19:cf:8b:e4:87:fd:5f:35:23:
55:64:05:04:27:eb:02:19:8e:73:cc:44:6e:0d:b6:
89:ae:02:70:ce:52:a8:fd:21:5f:f2:de:f8:7a:aa:
fa:28:a8:cf:f6:b5:98:d7:3b:a4:9b:ea:26:46:4a:
dc:94:31:43:af:7e:ba:e6:71:ce:2e:9d:58:6d:9e:
05:7d:fe:cf:a9:27:c6:ca:f0:91:92:31:df:0c:d0:
45:c7:f5:c2:5e:78:47:a9:91:7d:88:33:a9:df:ea:
b4:65:68:46:19:f2:22:f2:d1:c1:46:65:9b:0e:95:
b9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:28:35:56:DB:67:D2:AE:4D:DC:A3:42:5D:6B:69:2A:59:66:31:F0
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:aa:4b:7a:02:16:91:a3:22:74:b4:75:83:91:ea:83:f0:35:
2e:25:20:f9:5e:b8:59:5f:e7:75:c6:96:86:da:01:bf:8f:8d:
71:5a:39:50:f7:f6:45:83:64:68:06:0f:16:8f:3c:6d:41:c5:
c2:1d:69:96:da:8d:db:2b:e2:f7:78:a9:65:5a:27:69:4d:3a:
1c:5e:ff:0b:e1:8a:ca:07:a9:b8:a6:73:39:44:7d:5d:0a:85:
c3:64:02:96:3e:ab:d3:3c:e4:02:4e:90:87:c7:55:ac:0b:f7:
13:44:8a:56:2a:e8:9c:ef:89:23:02:3c:15:bf:e9:37:b9:76:
dd:a2:ad:92:76:03:ed:f7:bb:7a:7a:3f:75:97:eb:0e:35:4c:
50:20:01:1a:7d:ea:a5:3a:70:4c:1e:51:ec:2b:dd:59:2d:24:
24:3c:5d:7c:4b:7f:c0:6f:8b:c1:52:48:e1:a0:9f:49:c0:cf:
f4:9a:b4:39:b4:c1:59:a8:ec:90:0b:22:f0:3d:0d:2c:0b:71:
75:a6:06:a0:82:c4:12:f8:09:8a:b3:c6:78:47:3d:34:98:8e:
84:c2:df:be:2f:e8:36:a5:b2:a6:bc:f4:b7:e3:c2:f7:a0:fb:
99:aa:01:ca:76:98:05:e7:9f:c3:0a:95:c2:70:1c:cf:0a:21:
58:70:7e:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWCtcYVSUDoFpAvZxq2tDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OWYxZTNiODA1NTFlOThhMTZmYzJiYmNiN2RkODdjOWEw
ZWZlMjUwHhcNMjYwMzAxMTcwMDMwWhcNMjYwMzAyMTcwMDMwWjAzMTEwLwYDVQQD
Eyg1YTI4MzU1NmRiNjdkMmFlNGRkY2EzNDI1ZDZiNjkyYTU5NjYzMWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmwYWz7rCqVBzcCLxu2DKDrIYyu3
8wyNqmU9/MAOx+pzMwNXfyIA9FhFVJaROcdhMvGD1zEcnzNBxm1hxdUpHQMbDUGC
ZQhBgBIcuOSEM7t1sn/Xpx+0bA/6sxi3maNWQ/Gr4EtfntTD0IT+grcEP5e+LUjL
CLPbB83VoNrHcnl9OWetcqdErw83nUUZz4vkh/1fNSNVZAUEJ+sCGY5zzERuDbaJ
rgJwzlKo/SFf8t74eqr6KKjP9rWY1zukm+omRkrclDFDr3665nHOLp1YbZ4Fff7P
qSfGyvCRkjHfDNBFx/XCXnhHqZF9iDOp3+q0ZWhGGfIi8tHBRmWbDpW5GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFooNVbbZ9KuTdyjQl1raSpZZjHwMB8GA1UdIwQY
MBaAFDWfHjuAVR6YoW/Cu8t92HyaDv4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlo4ZU80QlZIcGloYjhLN3kzM1lmSm9PX2lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS84OWZkNDMtNTRmMC00YTE1LWIyYjEt
M2YzYTAyNzQ4YzJhLzEvTlo4ZU80QlZIcGloYjhLN3kzM1lmSm9PX2lVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS84OWZkNDMtNTRmMC00YTE1LWIyYjEtM2YzYTAyNzQ4YzJh
LzEvTlo4ZU80QlZIcGloYjhLN3kzM1lmSm9PX2lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkKpLegIW
kaMidLR1g5Hqg/A1LiUg+V64WV/ndcaWhtoBv4+NcVo5UPf2RYNkaAYPFo88bUHF
wh1pltqN2yvi93ipZVonaU06HF7/C+GKygepuKZzOUR9XQqFw2QClj6r0zzkAk6Q
h8dVrAv3E0SKVironO+JIwI8Fb/pN7l23aKtknYD7fe7eno/dZfrDjVMUCABGn3q
pTpwTB5R7CvdWS0kJDxdfEt/wG+LwVJI4aCfScDP9Jq0ObTBWajskAsi8D0NLAtx
daYGoILEEvgJirPGeEc9NJiOhMLfvi/oNqWyprz0t+PC96D7maoBynaYBeefwwqV
wnAczwohWHB+Bw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:22:04 2026 by rpki-client