Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
File: NZ8eO4BVHpihb8K7y33YfJoO_iU.mft (raw, json)
Hash identifier: TUyGUMcng8n/xdDRMXHWrarfUSSiIektGm2YXgy2Ehw=
Subject key identifier: 61:69:68:68:62:FC:22:1C:24:58:46:1C:CC:64:32:8C:A1:FE:68:7D
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 019D96CF854972CF2E536FB9CA69492FD1E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
Manifest number: 0FEF
Signing time: Thu 16 Apr 2026 15:01:15 +0000
Manifest this update: Thu 16 Apr 2026 15:01:15 +0000
Manifest next update: Fri 17 Apr 2026 15:01:15 +0000
Files and hashes: 1: 1GFF-lq3xv_z5Laz8N8tP9NoFH0.roa (hash: a9i0fGKabjqKLT5yhxSy3PgCaJI26jiufuEnDd1W9OI=)
2: MyTkgN8HXkjrp-kxigqAegjklMQ.roa (hash: pFPPNvby+G9WZLBUBJIB4xiTS6SkjYoIs0G/Wb+5n8s=)
3: NZ8eO4BVHpihb8K7y33YfJoO_iU.crl (hash: SFsUnUE2JQ2qNwuCad9YxdHCXEFFhjZTHPmJ14SDDlQ=)
4: TO6nqQhnOsZjFu2as_fLfCF9jiU.asa (hash: AzlXqDoRzTdGdaGKF/7T/k6tmAW/64eypKY9s/31aeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 15:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:cf:85:49:72:cf:2e:53:6f:b9:ca:69:49:2f:d1:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Apr 16 15:01:15 2026 GMT
Not After : Apr 17 15:01:15 2026 GMT
Subject: CN=6169686862fc221c2458461ccc64328ca1fe687d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fc:e1:93:b9:26:f6:55:29:3b:76:b5:09:6f:
78:34:71:e2:4d:66:01:e8:37:0e:10:8d:69:f8:51:
72:cf:b4:da:95:55:3b:bd:10:87:cf:a2:c0:ae:bc:
4e:60:56:9a:81:e1:31:f0:ef:2f:10:c3:38:bf:8d:
24:08:d1:34:e8:84:58:e3:64:c9:c4:89:b8:ce:96:
72:65:2f:f6:46:67:f4:16:39:cf:69:81:09:bb:52:
23:25:66:2e:7c:31:47:26:15:5b:37:91:9b:7a:be:
e3:9f:03:34:05:b1:73:95:24:c6:6e:79:03:83:9c:
05:31:23:b0:95:8c:f9:34:64:b1:f8:d4:3e:e3:83:
6c:44:24:a9:01:2e:55:0f:56:0a:91:40:e6:f8:70:
e3:f3:34:b5:38:99:47:1f:cb:72:44:24:c0:08:87:
54:87:bd:a9:e1:50:9c:b0:89:66:b3:fc:8d:e5:a5:
b4:8b:7b:72:b1:99:ec:7a:2a:2d:a5:a2:ad:6a:ea:
0d:56:03:7a:db:76:68:db:01:0f:40:4c:2d:ae:34:
7e:b8:f3:b4:2a:91:73:6c:ab:c7:4e:ee:64:36:1f:
56:ba:64:b2:04:18:80:5c:de:55:ed:63:09:11:88:
20:ae:88:10:4c:50:a6:0f:cd:cf:ee:6e:13:d2:f8:
e0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:69:68:68:62:FC:22:1C:24:58:46:1C:CC:64:32:8C:A1:FE:68:7D
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:73:6c:a8:37:78:bd:0d:3d:dd:ae:db:a4:88:45:ea:bb:85:
9f:9d:c0:5d:e2:8c:47:82:d6:c9:a9:0e:35:36:a1:3d:84:6a:
dc:51:39:24:ce:b0:5b:74:45:9c:c5:51:29:5a:a4:85:f0:ae:
e0:bf:06:46:13:66:fc:27:53:18:e1:7f:7b:d7:01:e6:38:64:
93:e1:8f:07:58:14:78:61:8f:40:3e:e1:23:40:57:e3:2e:cf:
d8:3d:2a:80:04:6f:23:bb:dc:fd:01:4a:cb:82:79:e4:b8:07:
c3:61:ae:c4:ab:ee:cc:32:37:3e:3b:a3:21:5c:78:b4:1e:b2:
79:94:95:a3:11:fc:0f:da:9c:d6:73:6d:5e:ae:13:57:c6:e7:
07:74:db:80:9f:79:01:b7:ed:9e:ec:7f:18:db:b8:0a:a6:b9:
46:e2:50:fa:16:72:0a:05:3f:e9:d1:80:c4:2b:dd:61:0a:db:
3a:ce:3e:b9:02:c9:4f:26:46:31:f0:f2:ef:8a:1e:a6:5f:9e:
c5:f1:27:74:df:02:18:69:e5:d9:39:b7:c4:3b:e6:74:6d:c4:
3b:df:74:20:fe:b1:66:f4:90:82:c2:9c:db:00:78:28:b5:b3:
09:e7:6f:93:f8:97:fb:0f:d5:46:a8:69:3d:8c:e7:85:92:2d:
e9:be:29:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:56:30 2026 by rpki-client