Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
File: NZTKzdk15Fz3HGFngKGx1Kpox7U.mft (raw, json)
Hash identifier: AhODa9/Nx8tQzfEMmRPbaxdIkkQOzAnKWLPyEzrPzX0=
Subject key identifier: BA:2D:84:FA:4C:E7:67:1E:F9:EA:06:C6:16:30:D4:39:D4:59:FC:B2
Authority key identifier: 35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
Certificate issuer: /CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Certificate serial: 019DA3E61EB96B372E03F142CFC71BB0D33F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 04:01:00 +0000
Manifest this update: Sun 19 Apr 2026 04:01:00 +0000
Manifest next update: Mon 20 Apr 2026 04:01:00 +0000
Files and hashes: 1: NZTKzdk15Fz3HGFngKGx1Kpox7U.crl (hash: 17civUL1OjyefKXI2He/8ASuNh0+JzTbg8Yn+isf0g0=)
2: Wdq9UIvFzgDqiYju4znORuRnk4A.roa (hash: eltS6TqFGo2PicugCL3Z+e5ML3gTGzg3RZI9Plv8FIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:1e:b9:6b:37:2e:03:f1:42:cf:c7:1b:b0:d3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Validity
Not Before: Apr 19 04:01:00 2026 GMT
Not After : Apr 20 04:01:00 2026 GMT
Subject: CN=ba2d84fa4ce7671ef9ea06c61630d439d459fcb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b0:69:44:87:4e:cd:5c:0f:87:f8:ea:e3:54:
60:05:6b:44:9a:02:c3:f1:2c:a4:1b:d0:c0:b4:41:
d4:cc:f3:97:91:00:85:50:4f:1a:5f:9e:e3:f7:f7:
ea:07:53:d2:a8:2e:82:78:df:42:75:c2:2a:9c:dd:
e0:c1:ad:06:ce:a5:e0:d4:f9:f0:2e:1c:4f:ae:f6:
30:f0:c3:13:f2:2c:38:5a:4d:d6:48:d3:aa:b7:ae:
b9:3b:4e:6a:1e:61:bc:f3:f7:12:ec:6d:33:7a:ec:
f5:8e:53:10:09:b7:9c:f6:34:5c:d7:dc:60:7a:b2:
ca:3c:d5:29:3e:63:04:97:fe:1d:c9:f3:c7:c1:0c:
44:c0:f7:85:15:78:dd:31:e6:00:c5:2d:9a:b0:f2:
7d:7e:bc:25:ea:5e:71:7d:fe:5c:a8:fe:0a:fd:bf:
19:a8:4c:b3:f1:e1:3d:de:31:c9:de:4a:22:67:0f:
c5:59:0e:f9:fb:67:7c:12:3d:d2:e0:1c:54:cb:13:
0a:ef:0b:39:26:2a:da:c3:08:ed:a2:f8:d4:ef:15:
8e:e9:9e:4d:dc:d1:42:44:e0:ce:44:8a:13:5b:86:
1c:c4:eb:15:3d:c9:dc:6f:30:07:76:91:31:a7:50:
f9:30:93:71:11:4c:4e:e2:e3:eb:13:92:fb:35:69:
fb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2D:84:FA:4C:E7:67:1E:F9:EA:06:C6:16:30:D4:39:D4:59:FC:B2
X509v3 Authority Key Identifier:
keyid:35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:7c:3c:d5:aa:9f:63:c8:e5:2f:4a:72:e3:46:c5:31:a3:3d:
be:aa:33:5e:91:94:60:1a:a0:62:25:7b:cf:99:3c:ee:7b:e9:
fa:c6:95:7f:5b:da:1a:60:7c:79:29:02:89:02:4f:f7:29:a2:
f0:f9:19:f8:ac:f3:9e:92:f4:93:c7:cd:19:de:f6:c6:52:2b:
f5:26:0e:cf:78:35:16:e3:ff:05:eb:1b:81:bd:23:02:9f:a8:
71:a4:d0:09:bb:5f:dd:33:d6:80:e9:dd:7c:e3:fd:c2:55:08:
e2:f1:03:d8:c3:aa:50:b6:ba:9f:de:0c:fd:6a:4e:d6:ec:60:
81:81:2e:ca:43:41:5f:6e:fd:33:e6:8a:d2:d7:9d:ce:7e:79:
d1:b3:6a:e9:71:11:e3:10:78:10:11:d4:d7:92:72:49:1d:be:
52:fe:58:47:d3:ff:e8:c3:16:55:49:68:15:fc:2e:7a:08:fb:
9b:cd:21:38:89:55:36:3d:6e:13:e9:93:19:4b:44:c0:cf:97:
32:03:b2:c4:b2:28:43:10:ef:ec:f5:b2:af:3f:34:80:fa:bb:
9c:26:fb:03:8b:15:6f:75:69:44:1b:b3:c3:bd:2b:4a:8d:df:
a1:7c:b0:67:54:dd:38:42:b3:3d:66:fc:10:b6:c1:96:29:e6:
d6:35:1c:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5h65azcuA/FCz8cbsNM/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OTRjYWNkZDkzNWU0NWNmNzFjNjE2NzgwYTFiMWQ0YWE2
OGM3YjUwHhcNMjYwNDE5MDQwMTAwWhcNMjYwNDIwMDQwMTAwWjAzMTEwLwYDVQQD
EyhiYTJkODRmYTRjZTc2NzFlZjllYTA2YzYxNjMwZDQzOWQ0NTlmY2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7BpRIdOzVwPh/jq41RgBWtEmgLD
8SykG9DAtEHUzPOXkQCFUE8aX57j9/fqB1PSqC6CeN9CdcIqnN3gwa0GzqXg1Pnw
LhxPrvYw8MMT8iw4Wk3WSNOqt665O05qHmG88/cS7G0zeuz1jlMQCbec9jRc19xg
erLKPNUpPmMEl/4dyfPHwQxEwPeFFXjdMeYAxS2asPJ9frwl6l5xff5cqP4K/b8Z
qEyz8eE93jHJ3koiZw/FWQ75+2d8Ej3S4BxUyxMK7ws5JirawwjtovjU7xWO6Z5N
3NFCRODORIoTW4YcxOsVPcncbzAHdpExp1D5MJNxEUxO4uPrE5L7NWn7XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLothPpM52ce+eoGxhYw1DnUWfyyMB8GA1UdIwQY
MBaAFDWUys3ZNeRc9xxhZ4ChsdSqaMe1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlpUS3pkazE1RnozSEdGbmdLR3gxS3BveDdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS81Y2IyNDUtNDJhMi00OThmLWI3YjIt
NGFiZGMyYmI5ZmEzLzEvTlpUS3pkazE1RnozSEdGbmdLR3gxS3BveDdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS81Y2IyNDUtNDJhMi00OThmLWI3YjItNGFiZGMyYmI5ZmEz
LzEvTlpUS3pkazE1RnozSEdGbmdLR3gxS3BveDdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXw81aqf
Y8jlL0py40bFMaM9vqozXpGUYBqgYiV7z5k87nvp+saVf1vaGmB8eSkCiQJP9ymi
8PkZ+KzznpL0k8fNGd72xlIr9SYOz3g1FuP/Besbgb0jAp+ocaTQCbtf3TPWgOnd
fOP9wlUI4vED2MOqULa6n94M/WpO1uxggYEuykNBX279M+aK0tedzn550bNq6XER
4xB4EBHU15JySR2+Uv5YR9P/6MMWVUloFfwuegj7m80hOIlVNj1uE+mTGUtEwM+X
MgOyxLIoQxDv7PWyrz80gPq7nCb7A4sVb3VpRBuzw70rSo3foXywZ1TdOEKzPWb8
ELbBlinm1jUcmw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:16 2026 by rpki-client