Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
File: Nz2PVXyuGOI12Ti608-uF8kbneY.mft (raw, json)
Hash identifier: C5ktDzUWvZ/fRqJ91Q/GsM6afc9IXNQ9hL9OJyKUrF4=
Subject key identifier: 21:7B:89:3A:E5:69:5E:14:93:63:1C:F7:79:BE:CA:77:2C:6A:6A:76
Authority key identifier: 37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
Certificate issuer: /CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Certificate serial: 019D9A06C79E1163BB298D951C0606AABFF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
Manifest number: 0F83
Signing time: Fri 17 Apr 2026 06:00:28 +0000
Manifest this update: Fri 17 Apr 2026 06:00:28 +0000
Manifest next update: Sat 18 Apr 2026 06:00:28 +0000
Files and hashes: 1: Nz2PVXyuGOI12Ti608-uF8kbneY.crl (hash: dSKLBuQSk+rQ8z0wgIJMIgx+0yj/2dlwq3MfSJWU9QY=)
2: ujsftfvLfUwDJ11Q7jqPTwZHvjs.roa (hash: b27HdQ5e99kb9xI2IR4xtsvZ4mT9ALpQe3hu34f+Ci0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:c7:9e:11:63:bb:29:8d:95:1c:06:06:aa:bf:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Validity
Not Before: Apr 17 06:00:28 2026 GMT
Not After : Apr 18 06:00:28 2026 GMT
Subject: CN=217b893ae5695e1493631cf779beca772c6a6a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:af:86:8f:2f:69:a3:5c:b6:77:d5:a4:e8:37:
db:57:39:ef:f3:ae:21:3e:39:57:ab:8c:e6:c0:e0:
c5:83:57:d2:de:04:65:56:64:24:b9:ed:4e:5e:12:
25:49:07:df:7a:70:e5:89:75:8f:60:d7:b5:f0:71:
5f:23:2f:04:1d:10:3f:ce:36:5f:03:f7:4f:dc:48:
db:4a:3c:7b:0b:0b:97:2c:eb:54:0d:3a:42:58:78:
73:74:b5:c3:57:f6:b2:94:ec:02:f6:27:bb:92:d7:
dd:dc:fc:1d:0f:84:5b:af:b3:2c:8a:4e:42:a2:72:
6d:cc:07:b4:39:ad:c5:ac:12:b8:f0:d2:d4:f1:38:
74:a6:ca:5d:fc:07:7b:74:1e:50:2c:bd:41:3c:91:
c6:14:65:a8:28:d4:b1:c8:b0:6d:2f:b9:43:10:ab:
de:72:6c:70:a4:3f:5e:5a:cf:81:19:43:b5:76:6f:
84:6b:81:c6:9c:e3:c2:93:d0:bd:44:8a:5a:73:03:
dc:c4:e4:27:b5:aa:92:e8:da:16:81:18:a5:6b:74:
56:e0:51:c1:02:8d:ef:e0:f7:6a:78:a0:e5:8b:89:
ce:13:42:00:66:90:df:9d:d4:a9:2b:d1:b6:98:5b:
29:39:0c:81:c0:03:cb:e7:c8:42:c3:02:be:71:f9:
e8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7B:89:3A:E5:69:5E:14:93:63:1C:F7:79:BE:CA:77:2C:6A:6A:76
X509v3 Authority Key Identifier:
keyid:37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:27:af:a4:a2:57:ed:1f:a1:48:52:13:85:72:b3:4a:39:59:
91:09:42:26:7f:e5:51:ab:23:77:01:ab:ff:1a:d1:55:0b:f9:
1a:e2:5a:e3:f9:d7:1b:56:cf:c5:7f:5a:ac:9f:f9:0a:25:ab:
46:7b:07:dd:2c:ba:45:d2:68:a3:5f:82:df:53:d7:c4:f0:3b:
c0:c8:4e:bc:07:eb:90:27:b3:a8:03:e4:a8:73:92:c1:e6:57:
1f:87:16:ad:79:34:9f:8b:41:aa:3c:31:c7:8b:c3:f0:4d:18:
d6:7c:3f:8c:ea:e3:76:7a:07:2c:ad:86:57:c8:8f:12:1c:c7:
2d:75:4b:26:10:7b:13:fe:0f:17:9d:ba:a9:ea:c1:02:ae:4d:
f1:84:28:cc:72:1a:40:da:1b:72:c0:5c:2a:a5:b7:7e:40:6c:
e8:03:81:f6:26:0d:36:b0:82:b5:be:96:79:2d:e7:05:42:38:
2d:20:18:6f:ee:d1:c6:a7:15:2d:64:10:33:30:4c:c2:bd:0c:
1c:b6:78:dc:3c:ca:b2:24:96:4c:6e:27:bd:a7:db:3a:79:a4:
a6:d2:07:bd:7f:4e:a1:cd:63:47:0e:7f:b2:dd:3f:54:21:a8:
d3:be:4d:65:93:56:86:ce:bb:a3:90:20:4a:6c:c6:39:c0:22:
56:3d:ff:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:38:35 2026 by rpki-client