Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
File: RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft (raw, json)
Hash identifier: bluUXZKo1dagdGom79oMWGiACm/RCizsqD96AqSHXxQ=
Subject key identifier: A1:B1:F1:62:2E:73:02:8F:83:9A:0C:F3:A7:B2:31:A1:57:98:0A:9F
Authority key identifier: 44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
Certificate issuer: /CN=44d64dac03f1a57c1931667118048d82c43c5540
Certificate serial: 019CAC1022E8DDEE881851593F345CE7B66E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
Manifest number: 0EC2
Signing time: Mon 02 Mar 2026 01:01:04 +0000
Manifest this update: Mon 02 Mar 2026 01:01:04 +0000
Manifest next update: Tue 03 Mar 2026 01:01:04 +0000
Files and hashes: 1: 6FlvO6wUgf9ecpKA1EuuoZxooB0.roa (hash: aEzLbUYuZvHpFrzr2sZaateqbjh/th5NR4O+uOuzOMQ=)
2: RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl (hash: 4yb1gae3kTQWrwBh44JuCQwtCG2g87ZX5lfcj63f43o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:22:e8:dd:ee:88:18:51:59:3f:34:5c:e7:b6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d64dac03f1a57c1931667118048d82c43c5540
Validity
Not Before: Mar 2 01:01:04 2026 GMT
Not After : Mar 3 01:01:04 2026 GMT
Subject: CN=a1b1f1622e73028f839a0cf3a7b231a157980a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4c:64:c0:95:51:a8:34:a2:e3:09:95:45:07:
ab:5c:00:fa:ae:2f:bd:fe:85:5a:03:6c:cb:d4:ba:
b8:d3:1a:1a:2e:82:38:61:a4:e8:97:0a:36:ae:cc:
f0:34:0e:8f:40:ad:1c:62:a3:13:d9:53:b2:13:8d:
30:02:ab:81:17:c5:c3:5f:52:ba:b8:02:d1:ac:8c:
c6:e3:89:bb:fd:36:fd:bf:40:ac:bc:f4:9d:f0:ec:
d8:a5:db:cb:49:69:61:16:58:0e:df:bd:57:79:b3:
66:f9:80:da:b3:64:ac:58:b9:36:71:84:58:7b:5f:
a6:84:2e:2b:5c:c7:f6:fa:12:b5:01:ba:c7:15:c2:
57:3e:7e:28:7e:56:94:f7:c7:8e:5a:c5:bf:5f:fe:
ff:74:83:7d:9b:cd:f0:75:11:b7:a3:33:74:0e:61:
3d:c5:21:65:f7:da:1c:c6:85:44:f1:9b:8a:e2:90:
cd:48:42:ba:19:74:ce:02:91:f6:9e:27:e0:ae:c3:
b9:1b:45:52:7b:2f:41:bc:a9:63:89:60:f8:c1:6b:
3a:7e:09:2b:7f:8e:ac:79:0d:36:75:22:29:35:f2:
d0:f0:cd:68:f7:b6:37:f0:d9:29:9c:71:4b:ff:a0:
e8:2f:eb:67:26:eb:a4:ae:cb:be:06:a8:54:8f:8a:
3f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B1:F1:62:2E:73:02:8F:83:9A:0C:F3:A7:B2:31:A1:57:98:0A:9F
X509v3 Authority Key Identifier:
keyid:44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:80:f8:77:8a:e6:ba:a0:90:89:2e:29:37:6b:59:d0:ca:68:
c3:e7:85:17:09:c1:dc:34:29:53:74:ec:b5:92:dd:43:41:bf:
f5:7c:6b:b7:9d:e0:51:d6:4d:5d:39:ed:44:ce:e6:ea:88:99:
c0:ae:77:9a:43:be:88:24:35:44:e2:f2:de:53:2f:47:fe:79:
0e:9f:8c:cc:6d:01:e2:f2:7c:50:9a:80:96:dc:f5:fe:b3:0a:
1b:8f:7e:11:e1:f6:f2:d2:3b:56:da:ed:bf:5e:41:39:9a:09:
f1:84:35:4c:81:f4:65:c7:32:45:1f:88:db:f8:9c:07:6b:fd:
35:b5:b5:c2:0b:dd:fe:6a:23:31:12:ed:e1:f3:0e:f5:c3:6c:
8e:21:e4:62:09:88:1d:3f:5e:15:14:ac:55:1e:ca:cd:99:36:
6d:23:19:1c:70:a3:40:f3:19:3c:9b:1e:2d:c5:92:f9:e7:17:
fa:15:e0:e1:c8:71:03:f1:df:d7:15:f5:b5:0a:69:12:ec:3b:
ed:0e:2d:b1:8a:a2:74:7e:5c:b2:c3:22:7c:d6:af:fa:35:d0:
79:a2:53:7c:43:da:49:2d:55:7e:1d:93:5c:f2:1c:f6:12:6a:
2a:00:c1:c9:e4:2f:81:86:f4:71:9b:79:19:a8:68:7c:88:82:
3f:e0:d8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:48 2026 by rpki-client