Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
File: RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft (raw, json)
Hash identifier: kAm8E1EHd58YEGFiG4RvbHVIxu/BK9i8aGVizjJM+s0=
Subject key identifier: 52:2B:8D:21:C8:8C:AD:8C:17:9E:79:AB:29:57:85:B3:0B:30:D1:C9
Authority key identifier: 44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
Certificate issuer: /CN=44d64dac03f1a57c1931667118048d82c43c5540
Certificate serial: 01A0D42678ED7CAF2FED349C4C255E18F8D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
Manifest number: 10E9
Signing time: Thu 24 Sep 2026 16:01:26 +0000
Manifest this update: Thu 24 Sep 2026 16:01:26 +0000
Manifest next update: Fri 25 Sep 2026 16:01:26 +0000
Files and hashes: 1: 6FlvO6wUgf9ecpKA1EuuoZxooB0.roa (hash: aEzLbUYuZvHpFrzr2sZaateqbjh/th5NR4O+uOuzOMQ=)
2: RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl (hash: WMTrOnhvMPG4+gqtUwqs287iESQw8CFjk8FVMr3mY9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 16:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:78:ed:7c:af:2f:ed:34:9c:4c:25:5e:18:f8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d64dac03f1a57c1931667118048d82c43c5540
Validity
Not Before: Sep 24 16:01:26 2026 GMT
Not After : Sep 25 16:01:26 2026 GMT
Subject: CN=522b8d21c88cad8c179e79ab295785b30b30d1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:50:14:32:f2:95:ed:c9:0f:ff:fc:84:bf:69:
5e:1c:35:84:fa:88:32:23:47:6f:74:c1:55:9b:d9:
cc:c8:80:5b:69:da:bc:27:74:d3:da:4b:99:77:18:
99:49:f0:cd:19:d0:f5:4c:ee:67:74:63:4b:0e:d1:
39:a5:57:d1:cd:77:84:cb:a0:04:76:19:29:b3:5d:
11:7e:34:d2:c9:af:70:77:ff:6a:64:f3:0a:b7:b3:
7e:fc:ca:ae:56:0f:b5:b3:b9:0c:65:9a:3f:5e:67:
1f:a2:21:c2:80:8a:2f:97:48:90:69:55:e9:a4:10:
bf:fd:cc:a8:3e:78:bf:3a:99:f4:d6:c2:e7:9b:8c:
d7:93:10:a4:ac:b9:7e:89:1b:98:6e:aa:16:31:a0:
a5:7d:61:bd:ec:94:91:6b:5b:9b:a1:cb:11:5f:33:
1d:fe:83:21:7d:36:aa:f2:a5:28:d9:1b:78:03:f0:
5b:b8:32:3f:a0:72:6f:33:d0:f3:65:58:3b:ec:df:
17:5e:de:5c:2f:8a:65:6e:8f:27:0e:55:a3:e5:7b:
64:85:83:78:1c:78:8c:5a:da:e3:ce:54:c1:db:25:
5a:a4:0d:c3:27:d4:c0:63:5c:7f:70:b9:78:ee:8e:
cb:42:ab:d5:b7:a9:97:37:0a:1a:27:3c:ce:cc:ea:
bb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2B:8D:21:C8:8C:AD:8C:17:9E:79:AB:29:57:85:B3:0B:30:D1:C9
X509v3 Authority Key Identifier:
keyid:44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:46:4c:98:f8:68:f8:47:ce:de:43:4f:fa:fb:e7:e4:cb:d8:
15:55:ab:d2:19:ca:13:64:f0:01:a0:4a:17:4f:67:50:9f:08:
bb:96:41:95:ca:75:5d:69:37:a2:58:ac:8b:de:90:9f:7c:00:
7b:44:90:50:67:5d:5a:59:f0:f2:32:d6:f1:76:04:30:6b:ea:
d2:5d:2a:76:52:2f:f8:8e:1d:c0:4e:c7:50:56:4f:af:18:d9:
b4:47:c5:0c:c6:ed:99:f4:47:c6:fa:4f:b4:27:dd:6b:6c:12:
bd:12:2f:89:67:3a:98:9b:88:4a:23:0e:bd:ac:90:2a:a1:c9:
e9:4a:c6:e9:c8:5e:23:e2:5d:9f:4b:8d:02:27:b8:97:7c:3a:
44:93:b3:e0:b0:bb:2b:38:54:32:3b:a0:2f:b7:24:af:56:41:
56:c1:5e:ee:bc:71:b3:4f:6b:99:26:d3:5e:4d:6d:55:4a:cc:
db:d3:4c:15:4a:49:93:32:ed:1a:7b:4f:b4:a6:eb:32:c0:73:
98:36:fb:11:d8:0e:75:db:4b:24:e1:79:c0:a7:3b:18:6c:0b:
79:29:fb:38:d8:3d:75:4e:85:66:66:a5:71:f1:7c:8e:7d:84:
21:e5:44:41:37:cc:5c:16:dd:b4:5f:88:4c:e3:c2:ff:d5:58:
20:70:b3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:12:53 2026 by rpki-client