Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
File: NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft (raw, json)
Hash identifier: SqS98XXmG78C27YTSXJ0AspdopTfO9p3W7p3V608338=
Subject key identifier: 2E:17:77:B7:E6:C9:40:89:9A:33:23:4B:DC:D4:C5:89:66:A4:69:D2
Authority key identifier: 35:90:2C:9B:64:0F:C6:D5:7C:23:77:14:ED:24:DA:17:F2:D3:E4:74
Certificate issuer: /CN=35902c9b640fc6d57c237714ed24da17f2d3e474
Certificate serial: 019CAA8FF36C6A4B742BCCF5997CE8F4BE28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
Manifest number: 1580
Signing time: Sun 01 Mar 2026 18:01:26 +0000
Manifest this update: Sun 01 Mar 2026 18:01:26 +0000
Manifest next update: Mon 02 Mar 2026 18:01:26 +0000
Files and hashes: 1: GxZT3TgjmIKtK7JQv_iwpTOXSpw.roa (hash: wlz5MW9CjtjeRzCliv1fAr4V5uA0E+YvY/dHxPuCPaY=)
2: NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl (hash: 0YWmzo5/WG9Iw8u+uzDQsPQBjElT7ScpAyi18ACSRfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:f3:6c:6a:4b:74:2b:cc:f5:99:7c:e8:f4:be:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35902c9b640fc6d57c237714ed24da17f2d3e474
Validity
Not Before: Mar 1 18:01:26 2026 GMT
Not After : Mar 2 18:01:26 2026 GMT
Subject: CN=2e1777b7e6c940899a33234bdcd4c58966a469d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:03:cd:83:dc:f5:2e:64:55:89:9b:2e:6f:
62:9f:6e:cc:70:fe:07:e8:0c:6d:78:47:e8:d8:ba:
d8:ee:a3:a4:49:e6:3d:89:50:87:90:d8:e2:df:fc:
a0:a6:48:2d:a7:94:0b:06:d9:72:4a:57:c8:75:7c:
3b:e6:2b:6e:ce:64:83:58:f3:8d:65:d8:56:ad:7e:
e7:ec:1d:5e:73:a6:9b:41:7e:88:e1:e2:9d:d7:a2:
af:5d:15:3b:76:0c:3b:61:c0:5a:40:ad:6b:8b:78:
6f:eb:ee:cd:01:34:ae:1c:ba:71:73:86:b4:7b:af:
52:2b:e3:74:9e:fc:bd:1f:0d:89:07:d6:a7:29:bb:
82:a9:29:ad:0e:0e:4b:a5:ff:1e:84:65:7e:00:8e:
e4:1b:d7:21:2b:77:a4:5d:39:56:c3:6c:cb:15:a5:
12:89:64:02:aa:df:9f:40:fa:58:9a:36:bb:f2:93:
ef:2e:7c:07:ee:8c:aa:1e:6b:15:f7:bc:7f:c2:d2:
60:0a:8b:7a:cc:25:fe:d9:14:0b:5f:85:0f:e1:fe:
90:df:7f:04:22:9a:c0:c5:70:7a:fd:f8:73:e8:92:
bf:84:e4:07:ee:5d:37:95:81:bd:7c:4a:e2:f0:9f:
eb:00:dc:73:b2:6e:d1:e2:a5:eb:b3:48:d7:d9:19:
cb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:17:77:B7:E6:C9:40:89:9A:33:23:4B:DC:D4:C5:89:66:A4:69:D2
X509v3 Authority Key Identifier:
keyid:35:90:2C:9B:64:0F:C6:D5:7C:23:77:14:ED:24:DA:17:F2:D3:E4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a6:f8:8d:99:7a:72:83:8f:7d:42:3c:d6:78:1e:e7:fb:a1:
d2:81:6b:9f:8a:cd:9c:33:6c:a2:b2:34:0a:d2:5c:aa:8b:06:
33:c8:6f:cd:40:a8:ed:c8:b4:55:e0:ca:24:c3:13:bd:98:1b:
29:34:34:d5:38:60:3d:14:53:90:ea:5d:ff:16:71:8e:c0:b4:
cb:03:6f:1a:f5:c3:3b:3f:6f:72:ef:e4:c0:57:bb:30:b7:a0:
f8:14:e8:b6:a3:d4:7f:46:a0:93:26:cf:1f:e6:cf:9b:42:f1:
12:85:0e:5a:b4:f4:36:2f:6d:86:e0:cc:2b:fa:82:90:f2:7a:
19:8b:a4:ea:44:59:3d:e3:01:9d:75:b2:21:2f:1f:8b:38:9d:
b2:18:93:48:08:33:4d:1b:c7:9f:3b:1e:4d:81:a0:a7:e9:3b:
f5:62:bd:38:be:4c:f3:90:60:1c:6f:88:1a:14:ef:28:f4:94:
a9:80:33:e2:96:6d:72:d9:87:b2:48:91:cc:ee:cf:76:e6:09:
9c:71:d1:d2:d0:33:32:41:34:21:d8:9b:6c:ba:2e:b7:f4:2e:
f8:5b:bd:d8:3a:83:06:ea:3f:85:36:30:65:b1:c8:ca:88:3f:
32:0d:a6:dc:ba:40:6e:0b:28:b4:0c:e2:ba:6e:5a:fc:a2:58:
a4:53:a5:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj/Nsakt0K8z1mXzo9L4oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OTAyYzliNjQwZmM2ZDU3YzIzNzcxNGVkMjRkYTE3ZjJk
M2U0NzQwHhcNMjYwMzAxMTgwMTI2WhcNMjYwMzAyMTgwMTI2WjAzMTEwLwYDVQQD
EygyZTE3NzdiN2U2Yzk0MDg5OWEzMzIzNGJkY2Q0YzU4OTY2YTQ2OWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD8DzYPc9S5kVYmbLm9in27McP4H
6AxteEfo2LrY7qOkSeY9iVCHkNji3/ygpkgtp5QLBtlySlfIdXw75ituzmSDWPON
ZdhWrX7n7B1ec6abQX6I4eKd16KvXRU7dgw7YcBaQK1ri3hv6+7NATSuHLpxc4a0
e69SK+N0nvy9Hw2JB9anKbuCqSmtDg5Lpf8ehGV+AI7kG9chK3ekXTlWw2zLFaUS
iWQCqt+fQPpYmja78pPvLnwH7oyqHmsV97x/wtJgCot6zCX+2RQLX4UP4f6Q338E
IprAxXB6/fhz6JK/hOQH7l03lYG9fEri8J/rANxzsm7R4qXrs0jX2RnL3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4Xd7fmyUCJmjMjS9zUxYlmpGnSMB8GA1UdIwQY
MBaAFDWQLJtkD8bVfCN3FO0k2hfy0+R0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlpBc20yUVB4dFY4STNjVTdTVGFGX0xUNUhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mOTZiYWYtNDFmMy00OTg2LWI5M2Et
NDE3YjRmYTU2NGVhLzEvTlpBc20yUVB4dFY4STNjVTdTVGFGX0xUNUhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9mOTZiYWYtNDFmMy00OTg2LWI5M2EtNDE3YjRmYTU2NGVh
LzEvTlpBc20yUVB4dFY4STNjVTdTVGFGX0xUNUhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi6b4jZl6
coOPfUI81nge5/uh0oFrn4rNnDNsorI0CtJcqosGM8hvzUCo7ci0VeDKJMMTvZgb
KTQ01ThgPRRTkOpd/xZxjsC0ywNvGvXDOz9vcu/kwFe7MLeg+BTotqPUf0agkybP
H+bPm0LxEoUOWrT0Ni9thuDMK/qCkPJ6GYuk6kRZPeMBnXWyIS8fizidshiTSAgz
TRvHnzseTYGgp+k79WK9OL5M85BgHG+IGhTvKPSUqYAz4pZtctmHskiRzO7PduYJ
nHHR0tAzMkE0IdibbLout/Qu+Fu92DqDBuo/hTYwZbHIyog/Mg2m3LpAbgsotAzi
um5a/KJYpFOlKQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:35 2026 by rpki-client