Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
File: RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft (raw, json)
Hash identifier: PD1IfjQbg9hmSNH04wBn4DXeb2aTs2pU3v936QaWXiU=
Subject key identifier: A1:10:72:3B:06:41:4C:74:06:E2:BA:5D:ED:E9:DE:65:0C:46:6E:57
Authority key identifier: 44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
Certificate issuer: /CN=44d64dac03f1a57c1931667118048d82c43c5540
Certificate serial: 019D9998FF15D355A424EC3BC3F50834ABDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
Manifest number: 0F3D
Signing time: Fri 17 Apr 2026 04:00:33 +0000
Manifest this update: Fri 17 Apr 2026 04:00:33 +0000
Manifest next update: Sat 18 Apr 2026 04:00:33 +0000
Files and hashes: 1: 6FlvO6wUgf9ecpKA1EuuoZxooB0.roa (hash: aEzLbUYuZvHpFrzr2sZaateqbjh/th5NR4O+uOuzOMQ=)
2: RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl (hash: sXt9e/VUm3Xtm31vkFuBMzBdtVh76aZjIeXmzy1NWUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:ff:15:d3:55:a4:24:ec:3b:c3:f5:08:34:ab:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d64dac03f1a57c1931667118048d82c43c5540
Validity
Not Before: Apr 17 04:00:33 2026 GMT
Not After : Apr 18 04:00:33 2026 GMT
Subject: CN=a110723b06414c7406e2ba5dede9de650c466e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:df:93:a6:ca:f3:36:a1:82:1d:b9:b1:e5:5b:
51:81:5b:ce:aa:8c:65:59:79:b3:d9:91:19:8b:9a:
4d:8a:1c:52:55:86:9f:60:17:92:b9:2f:5f:9d:d0:
2e:e4:3f:fe:12:67:8e:03:b1:95:d9:4c:c6:83:b6:
43:7f:53:42:84:99:51:27:01:83:4b:0d:30:3d:a6:
d3:de:78:68:8d:7f:cb:c1:6c:0f:90:62:3e:c7:df:
a0:9a:b4:f3:63:f6:bd:fc:c2:a6:08:88:ea:c0:0b:
80:9b:ca:e0:84:db:2c:f2:f6:95:ab:f2:2a:37:eb:
a8:de:d2:78:52:df:ea:ba:f9:bb:54:53:20:8f:e8:
fd:7a:82:1b:fb:40:9e:c6:5c:76:3d:92:21:34:95:
92:a7:b8:b1:c0:36:0f:09:d6:4e:be:b4:cf:1d:ba:
79:70:af:23:03:cc:6a:ec:a3:99:61:64:7a:d1:b1:
f3:74:98:44:b7:fd:3a:06:89:f2:11:14:b8:dc:f6:
d1:6d:a3:3d:9e:6e:0b:78:54:77:36:80:86:fa:4c:
da:d4:33:83:b4:04:85:d7:7f:9d:21:7c:8d:68:88:
e7:bd:a7:61:7c:52:bf:b5:e8:24:21:fb:75:d9:db:
5e:a3:4d:e3:b6:57:cc:b9:37:1c:8d:07:d2:3d:3e:
f4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:10:72:3B:06:41:4C:74:06:E2:BA:5D:ED:E9:DE:65:0C:46:6E:57
X509v3 Authority Key Identifier:
keyid:44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:26:82:1f:e5:cc:00:20:e3:a9:f1:de:3e:6e:de:39:b8:af:
02:81:c9:d8:78:e7:2f:46:c7:06:2b:33:29:ad:47:13:42:b9:
f3:65:71:5e:fa:84:d9:34:75:16:6c:40:61:0f:d4:11:45:c8:
1b:0e:9c:49:86:26:ac:9c:fd:19:98:9e:7a:52:b7:27:e2:aa:
79:cd:ff:76:b5:39:28:cd:45:08:b1:a8:fe:39:0f:e7:90:94:
6c:44:91:a6:d8:9e:6f:21:f2:a2:02:d1:d9:37:ab:a4:45:8b:
a2:3c:11:2a:45:74:86:3f:84:3d:a6:80:fc:53:7a:39:c8:c4:
1e:dc:c5:f7:3b:ec:70:6b:e1:b6:4f:f5:de:b3:79:b3:87:f9:
d5:8e:53:95:f7:0f:a9:69:b5:62:fa:6e:e9:48:8d:82:f7:cc:
0d:e8:b3:55:91:ce:2b:40:b7:73:39:4a:11:e2:21:48:82:5c:
67:25:ae:b3:ac:28:50:e2:7d:87:67:7d:b3:c6:3a:de:48:cc:
14:04:e8:d8:e3:b9:bb:86:32:fe:81:cd:00:3a:84:de:b3:8c:
45:c4:17:3f:8d:c9:49:71:c8:50:f4:24:04:33:40:73:a7:77:
30:4e:38:46:95:88:04:e3:a5:73:2d:cb:02:b0:dc:36:89:51:
0b:1d:51:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:00:48 2026 by rpki-client