Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
File: NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft (raw, json)
Hash identifier: ZQ+pFSwL2pMgC5fzKY1neoLekakkTvNspQ9mgiHefbk=
Subject key identifier: 1E:27:BD:FC:10:3C:12:4C:87:B7:11:B8:7A:BD:2D:20:EF:E9:6A:56
Authority key identifier: 35:90:2C:9B:64:0F:C6:D5:7C:23:77:14:ED:24:DA:17:F2:D3:E4:74
Certificate issuer: /CN=35902c9b640fc6d57c237714ed24da17f2d3e474
Certificate serial: 019D9A06DCF5507A6F5DF0D02C4AE4E31EE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
Manifest number: 15FC
Signing time: Fri 17 Apr 2026 06:00:34 +0000
Manifest this update: Fri 17 Apr 2026 06:00:34 +0000
Manifest next update: Sat 18 Apr 2026 06:00:34 +0000
Files and hashes: 1: GxZT3TgjmIKtK7JQv_iwpTOXSpw.roa (hash: wlz5MW9CjtjeRzCliv1fAr4V5uA0E+YvY/dHxPuCPaY=)
2: NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl (hash: 4b42i1BjEcqlZCNL1jE50zDrRONf4kVjOFbXtIkd9ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:dc:f5:50:7a:6f:5d:f0:d0:2c:4a:e4:e3:1e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35902c9b640fc6d57c237714ed24da17f2d3e474
Validity
Not Before: Apr 17 06:00:34 2026 GMT
Not After : Apr 18 06:00:34 2026 GMT
Subject: CN=1e27bdfc103c124c87b711b87abd2d20efe96a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:13:16:8f:72:8a:b3:36:63:41:51:5d:ea:dc:
1b:c5:31:99:d0:4c:ca:96:d2:4d:94:98:d0:56:56:
15:8c:4b:a2:3e:d3:ba:92:c5:72:a4:6c:ac:26:5d:
dd:9b:35:27:96:06:20:65:d0:64:82:4f:ad:b8:0e:
e0:37:1b:aa:c1:f4:9e:d4:80:09:4a:91:7a:91:11:
28:7d:07:28:78:ae:75:06:73:83:ca:74:82:b4:aa:
6b:19:ed:6f:d2:de:2d:eb:be:d3:82:93:3c:0b:7c:
b0:36:77:c9:41:8e:d7:64:f3:f7:30:e8:da:c1:38:
97:96:44:b1:26:8c:25:c9:ec:fb:89:42:e4:92:0a:
0a:68:4c:78:43:87:9f:bd:02:a9:ef:34:a2:38:3b:
00:aa:b9:b0:9d:58:71:9a:d8:82:a6:76:ca:3b:2e:
e9:6d:9b:07:18:c4:80:54:94:94:1f:bc:ed:76:75:
0e:2c:31:a9:99:ac:e1:1f:3c:99:e6:e0:95:a3:2c:
f3:65:f5:c3:93:69:68:2d:f0:39:da:d4:f7:13:8e:
14:83:02:cb:26:15:c2:bb:5c:76:72:b9:57:75:2d:
c2:88:a9:33:da:2a:d0:fb:a4:70:b3:89:a1:19:68:
a5:cf:a6:ba:9d:ee:87:83:33:c5:80:99:21:1c:ba:
f8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:27:BD:FC:10:3C:12:4C:87:B7:11:B8:7A:BD:2D:20:EF:E9:6A:56
X509v3 Authority Key Identifier:
keyid:35:90:2C:9B:64:0F:C6:D5:7C:23:77:14:ED:24:DA:17:F2:D3:E4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:3d:f1:7d:b3:97:7a:ef:24:9f:8e:eb:d4:15:23:16:1b:54:
f4:8b:d9:9b:ea:95:0f:0a:55:98:70:84:4b:83:d9:9b:cf:3a:
4a:f6:e4:98:58:ae:aa:6b:e7:61:0a:01:e5:d6:46:96:04:95:
84:b4:54:e6:96:94:50:6c:3f:ad:33:c3:3b:01:37:17:a0:b7:
df:d1:6b:3d:3f:6d:c0:c7:2e:e0:5e:7c:24:49:3c:f9:0e:be:
64:22:c7:98:0b:1f:e0:d1:20:7e:32:20:49:d4:a2:60:b6:64:
44:a1:77:14:3c:6c:b0:75:ea:5d:08:6f:f6:3a:62:c6:36:4a:
92:cf:ca:e1:c8:9b:dc:38:98:4c:a8:08:0d:8c:a1:87:c6:79:
c9:06:3a:14:f4:b1:9b:b4:cf:84:89:99:07:a1:66:d2:59:34:
78:c9:94:ca:0b:fd:28:d2:91:33:c7:9d:c2:49:da:62:a2:31:
6a:bc:95:f9:72:cd:f6:0b:6d:0e:68:54:56:1c:dd:b3:cd:1b:
f7:a7:0c:0a:9c:8f:57:53:b5:4c:c9:ce:e6:84:5f:04:fe:af:
79:0e:81:08:db:42:8c:da:fb:a1:cc:78:5b:bd:81:fa:a8:b4:
7a:3b:df:a5:13:63:23:54:83:f7:7d:9a:78:72:1f:13:d6:24:
a4:75:bd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:49:40 2026 by rpki-client