Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
File: NZTKzdk15Fz3HGFngKGx1Kpox7U.mft (raw, json)
Hash identifier: YvsDEboGrIOSjiTZbuyM44GlOGcJ/GrKOLVQqiv8HU8=
Subject key identifier: 56:92:BA:20:A7:AA:A1:68:35:04:EC:EB:40:8D:16:3B:EB:15:60:FF
Authority key identifier: 35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
Certificate issuer: /CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Certificate serial: 01A0C3692CB1890E337881816CC185E0B004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 10:00:44 +0000
Manifest this update: Mon 21 Sep 2026 10:00:44 +0000
Manifest next update: Tue 22 Sep 2026 10:00:44 +0000
Files and hashes: 1: NZTKzdk15Fz3HGFngKGx1Kpox7U.crl (hash: QVh0oriefBub6n6Qn1k/U+bv5fZC4XCC9k92KvK5d80=)
2: Wdq9UIvFzgDqiYju4znORuRnk4A.roa (hash: eltS6TqFGo2PicugCL3Z+e5ML3gTGzg3RZI9Plv8FIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:2c:b1:89:0e:33:78:81:81:6c:c1:85:e0:b0:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Validity
Not Before: Sep 21 10:00:44 2026 GMT
Not After : Sep 22 10:00:44 2026 GMT
Subject: CN=5692ba20a7aaa1683504eceb408d163beb1560ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f8:9d:83:28:35:ab:b3:5c:21:2a:4d:ba:25:
56:8f:0a:31:b6:9a:d6:2b:4d:97:39:23:10:db:99:
87:ce:ef:6e:1f:f0:41:ee:28:17:c0:ca:12:78:2d:
72:86:63:95:98:b2:31:95:98:aa:10:84:7c:0a:4a:
94:f5:d3:a0:de:0a:6c:9c:b2:29:9b:b5:1c:ab:cc:
ec:7b:83:ae:14:0c:15:42:b2:07:91:9e:b0:8d:1a:
0a:11:5c:f9:ed:cb:e1:81:58:2b:97:18:f1:ef:fb:
04:05:81:07:36:89:7b:56:4e:4d:97:07:b0:46:4a:
cf:21:5a:d5:0b:7d:13:ba:e3:94:64:42:9c:ea:82:
16:72:1a:ce:be:cd:36:f8:c3:a2:49:57:1a:6f:ab:
1a:65:31:97:08:7b:5e:b9:62:62:6d:5d:cb:95:00:
64:ec:d2:c7:85:84:e6:c5:d4:ad:a8:f8:c9:b5:ff:
0e:be:cb:a6:59:2b:0e:ae:b8:1f:3d:db:f0:a2:10:
32:d1:34:27:a0:c5:56:b9:7e:f4:79:da:31:81:5e:
e8:82:c9:d4:94:1c:49:26:ee:66:93:2c:36:21:88:
41:7a:44:f7:75:e2:fc:08:0e:d7:bf:6c:6b:3d:99:
89:c3:3d:f4:39:e0:f8:d7:e3:0e:a9:41:d4:50:b8:
5c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:92:BA:20:A7:AA:A1:68:35:04:EC:EB:40:8D:16:3B:EB:15:60:FF
X509v3 Authority Key Identifier:
keyid:35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:53:42:a5:20:ee:90:07:91:97:b2:d7:45:1f:be:5c:20:9e:
84:64:ff:ea:16:f1:f0:c0:65:69:de:5a:17:5d:95:d1:81:d3:
71:4e:23:11:07:9a:ec:2e:21:ee:19:58:a4:ac:0f:09:c2:84:
80:48:dd:84:30:c0:5b:a9:53:37:4b:3e:59:b6:70:df:fc:dc:
d8:55:eb:22:e2:3f:af:9c:22:d3:65:79:8e:34:89:2f:94:49:
62:03:4b:ad:3e:fd:f4:76:69:6b:41:b2:33:43:55:cc:33:87:
e4:b8:0a:43:c3:f0:a2:1f:0f:05:0e:40:7a:7c:39:88:0b:bd:
01:20:91:4d:d8:e1:46:23:c3:09:e1:69:1d:74:0b:03:45:65:
e3:5e:be:f2:ea:2b:31:da:4e:4d:21:6d:c1:16:26:7a:d5:66:
92:5d:cf:61:7b:b1:b8:6d:d2:d3:df:04:d5:d3:2e:f0:e8:29:
7f:97:f8:38:b4:55:51:45:dc:0c:51:41:83:5a:76:5b:24:4b:
95:e8:ed:10:d1:ce:3e:cc:5a:53:21:bc:6a:37:9f:6e:46:9d:
da:a6:7f:c6:b5:5c:ff:b6:eb:b2:9c:28:dc:8e:24:33:14:fa:
11:d7:0d:65:c1:1f:0b:1e:96:a9:77:c0:4b:2c:39:c7:d8:b5:
72:e7:82:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDaSyxiQ4zeIGBbMGF4LAEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OTRjYWNkZDkzNWU0NWNmNzFjNjE2NzgwYTFiMWQ0YWE2
OGM3YjUwHhcNMjYwOTIxMTAwMDQ0WhcNMjYwOTIyMTAwMDQ0WjAzMTEwLwYDVQQD
Eyg1NjkyYmEyMGE3YWFhMTY4MzUwNGVjZWI0MDhkMTYzYmViMTU2MGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Pidgyg1q7NcISpNuiVWjwoxtprW
K02XOSMQ25mHzu9uH/BB7igXwMoSeC1yhmOVmLIxlZiqEIR8CkqU9dOg3gpsnLIp
m7Ucq8zse4OuFAwVQrIHkZ6wjRoKEVz57cvhgVgrlxjx7/sEBYEHNol7Vk5Nlwew
RkrPIVrVC30TuuOUZEKc6oIWchrOvs02+MOiSVcab6saZTGXCHteuWJibV3LlQBk
7NLHhYTmxdStqPjJtf8OvsumWSsOrrgfPdvwohAy0TQnoMVWuX70edoxgV7ogsnU
lBxJJu5mkyw2IYhBekT3deL8CA7Xv2xrPZmJwz30OeD41+MOqUHUULhcCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFaSuiCnqqFoNQTs60CNFjvrFWD/MB8GA1UdIwQY
MBaAFDWUys3ZNeRc9xxhZ4ChsdSqaMe1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlpUS3pkazE1RnozSEdGbmdLR3gxS3BveDdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS81Y2IyNDUtNDJhMi00OThmLWI3YjIt
NGFiZGMyYmI5ZmEzLzEvTlpUS3pkazE1RnozSEdGbmdLR3gxS3BveDdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS81Y2IyNDUtNDJhMi00OThmLWI3YjItNGFiZGMyYmI5ZmEz
LzEvTlpUS3pkazE1RnozSEdGbmdLR3gxS3BveDdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU1NCpSDu
kAeRl7LXRR++XCCehGT/6hbx8MBlad5aF12V0YHTcU4jEQea7C4h7hlYpKwPCcKE
gEjdhDDAW6lTN0s+WbZw3/zc2FXrIuI/r5wi02V5jjSJL5RJYgNLrT799HZpa0Gy
M0NVzDOH5LgKQ8Pwoh8PBQ5Aenw5iAu9ASCRTdjhRiPDCeFpHXQLA0Vl416+8uor
MdpOTSFtwRYmetVmkl3PYXuxuG3S098E1dMu8Ogpf5f4OLRVUUXcDFFBg1p2WyRL
lejtENHOPsxaUyG8ajefbkad2qZ/xrVc/7brspwo3I4kMxT6EdcNZcEfCx6WqXfA
Syw5x9i1cueCWA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:08:34 2026 by rpki-client