Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
File: NZTKzdk15Fz3HGFngKGx1Kpox7U.mft (raw, json)
Hash identifier: xDboNCA08Yb3iLQ+A3sFUPmiFZaaXi3ox4k3RBwvHOU=
Subject key identifier: 13:12:E2:D1:7C:13:34:FF:7A:D6:00:0A:DC:8C:5A:29:F6:9A:AA:D9
Authority key identifier: 35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
Certificate issuer: /CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Certificate serial: 019CAAC6C60518309AB9AFAFC560119CCAB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:01:19 +0000
Manifest this update: Sun 01 Mar 2026 19:01:19 +0000
Manifest next update: Mon 02 Mar 2026 19:01:19 +0000
Files and hashes: 1: NZTKzdk15Fz3HGFngKGx1Kpox7U.crl (hash: fZdP7F2e2EhfXW0aVfpTxFPy3ktVRLvQCamwC9MKo5Q=)
2: Wdq9UIvFzgDqiYju4znORuRnk4A.roa (hash: eltS6TqFGo2PicugCL3Z+e5ML3gTGzg3RZI9Plv8FIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:c6:05:18:30:9a:b9:af:af:c5:60:11:9c:ca:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Validity
Not Before: Mar 1 19:01:19 2026 GMT
Not After : Mar 2 19:01:19 2026 GMT
Subject: CN=1312e2d17c1334ff7ad6000adc8c5a29f69aaad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:22:7d:0b:4f:8a:d2:b0:1d:4a:dc:b0:b2:50:
2a:7e:0b:c0:25:d8:0d:c2:fd:73:1d:b9:bb:01:33:
f4:08:d6:7a:c4:d9:7d:18:f4:62:2d:2c:6f:ea:02:
1f:bb:b6:a8:ad:d6:9a:4a:f8:48:8a:20:50:3c:e8:
f0:a2:36:06:3e:0f:c8:04:0a:b2:00:a2:0b:d8:2e:
cb:85:1a:6b:fe:ed:2e:3f:bf:94:52:06:ac:0c:f4:
4d:56:f2:af:01:f2:3f:67:e9:03:6d:e5:0e:48:e0:
e8:6e:e2:df:c0:1b:a0:08:2a:c1:49:8c:ef:e3:cf:
7b:76:be:f2:fe:96:d9:6a:24:70:f6:26:b5:39:4e:
bf:41:4c:25:fb:9e:8e:66:94:90:b6:19:65:e7:42:
29:95:c0:bb:66:ec:da:6b:b2:ae:70:a0:d4:4b:f5:
8f:4e:27:9c:e6:1b:20:9b:d8:3e:ec:3b:de:e2:07:
35:aa:69:64:8d:ec:c3:e7:be:09:95:ce:48:91:71:
98:a4:d9:17:ff:34:c4:d6:80:76:e4:3e:97:70:40:
0b:f8:fc:5f:01:92:72:33:e4:fa:21:6d:cc:56:35:
ee:9d:cc:48:80:b7:b9:ac:2d:c7:4b:e9:10:ea:2c:
a5:ee:3d:cb:c5:5b:1e:4d:0d:96:68:12:82:e8:73:
32:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:12:E2:D1:7C:13:34:FF:7A:D6:00:0A:DC:8C:5A:29:F6:9A:AA:D9
X509v3 Authority Key Identifier:
keyid:35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:08:c5:0d:71:f7:cb:dd:27:c3:b0:74:5b:25:dd:7c:75:bb:
b9:98:57:aa:b4:cc:e9:25:0d:df:85:b5:78:62:a3:bc:b6:7f:
a2:20:6b:b1:72:2d:bf:13:0f:5f:9e:7b:c2:f9:30:35:5f:aa:
34:bc:d5:c4:f9:23:db:c3:58:5e:4b:e5:8d:6f:d2:08:98:81:
4b:a4:a4:88:09:d6:0d:9f:00:a0:06:ec:23:d0:ad:c2:01:e6:
53:a0:a4:53:86:ab:d4:96:4b:f0:5e:80:b2:95:4d:f6:cf:d8:
97:77:53:7a:25:e6:f9:58:dd:79:f7:08:5d:56:ac:90:6b:2e:
51:76:46:26:31:25:6b:9e:0b:21:0c:2a:b6:1d:91:26:77:13:
1a:27:7e:bc:a8:21:4c:70:9b:e7:fe:f5:2b:66:e0:32:dd:ec:
9c:11:52:e7:1e:2d:be:70:da:ac:46:80:22:4e:b4:32:17:d4:
c3:17:61:33:00:62:5e:44:9b:40:d3:8e:65:ca:67:03:c9:04:
00:46:67:9a:f5:f7:33:e3:fe:f4:9d:db:25:bb:a4:54:5d:cb:
02:47:3d:39:95:df:7d:cb:c0:f7:e5:d1:54:4a:8f:17:a5:a2:
0e:08:64:4d:88:d7:4e:f6:6c:a4:9e:52:b4:eb:2d:d2:97:c9:
ac:b0:a8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:32 2026 by rpki-client