Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
File: Nz2PVXyuGOI12Ti608-uF8kbneY.mft (raw, json)
Hash identifier: WLvg6JKpkwm8xnH6FC8OBn8zmUZnAYDxFKQ+u0dWFhQ=
Subject key identifier: 5A:C7:CE:14:77:51:59:7C:02:C3:40:10:4B:E6:8E:1E:AA:F7:77:FD
Authority key identifier: 37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
Certificate issuer: /CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Certificate serial: 019CAC7E584BBEE7FEF9D13E1818AF4593DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
Manifest number: 0F08
Signing time: Mon 02 Mar 2026 03:01:27 +0000
Manifest this update: Mon 02 Mar 2026 03:01:27 +0000
Manifest next update: Tue 03 Mar 2026 03:01:27 +0000
Files and hashes: 1: Nz2PVXyuGOI12Ti608-uF8kbneY.crl (hash: ts+PPCp2AukaExxO3SQCQZSkKDfzt0Nw4Lo/wNEcuS8=)
2: ujsftfvLfUwDJ11Q7jqPTwZHvjs.roa (hash: b27HdQ5e99kb9xI2IR4xtsvZ4mT9ALpQe3hu34f+Ci0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:58:4b:be:e7:fe:f9:d1:3e:18:18:af:45:93:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Validity
Not Before: Mar 2 03:01:27 2026 GMT
Not After : Mar 3 03:01:27 2026 GMT
Subject: CN=5ac7ce147751597c02c340104be68e1eaaf777fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f5:5a:9b:73:83:f9:d4:29:48:1f:6e:fd:6b:
1e:c3:1d:00:13:73:7a:10:af:a8:7d:65:8f:d5:62:
5f:70:9d:36:f4:b4:ff:d5:6c:b1:d6:ef:3e:c3:90:
c6:50:c3:13:86:32:8f:8b:8f:69:bc:2e:28:8f:4d:
3c:c8:58:40:af:13:59:f4:a6:13:5e:ab:37:40:e0:
63:63:d4:4f:8f:6d:ca:f4:48:e7:b6:38:e7:7e:d9:
f3:f0:60:48:b3:a2:eb:15:4b:84:72:5b:de:6e:b8:
32:e2:07:bf:eb:4c:20:5f:b1:1e:ce:c6:d8:64:87:
ea:ab:45:36:19:6a:5e:a6:0b:e3:ed:13:5e:4e:79:
50:3f:eb:08:ea:78:df:f2:f9:ca:67:23:db:40:82:
1b:80:4b:ad:40:66:6d:a7:3a:28:5e:a8:03:f8:7f:
0f:fb:01:ac:f7:8a:77:01:6c:96:e1:35:26:36:0e:
1a:e0:b4:6d:a2:4e:b7:b1:c6:b1:75:47:38:3a:99:
b5:f5:2d:e6:21:06:67:43:2d:4c:81:cd:88:03:6e:
13:23:d0:8e:ba:4a:24:6f:a0:70:72:53:64:9b:55:
ee:a1:e9:1d:bd:42:3a:91:5e:13:3a:6c:3b:ce:7d:
45:f6:8e:ae:89:72:70:b5:e1:8f:eb:db:13:69:09:
91:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C7:CE:14:77:51:59:7C:02:C3:40:10:4B:E6:8E:1E:AA:F7:77:FD
X509v3 Authority Key Identifier:
keyid:37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d8:6e:b0:b3:af:2e:76:70:ab:09:5f:ee:3a:5a:d3:c0:b7:
8e:77:f5:53:0a:63:de:ec:39:3a:09:ae:0a:3b:d1:c4:de:66:
24:48:fe:68:33:fd:eb:99:72:f6:7f:14:66:b7:7c:70:70:eb:
b3:ad:88:e0:56:85:a4:b8:fd:06:91:24:95:8c:e3:7e:39:60:
63:1a:97:3e:88:af:45:26:cd:b1:cd:68:e2:08:41:e1:51:dd:
b8:c7:0c:8b:64:a4:cb:16:0e:39:0c:89:82:f0:02:a9:93:79:
72:0a:8c:61:08:71:f5:ad:8e:c1:cd:42:5f:df:f7:e1:5a:81:
06:7e:84:97:3f:67:d6:8e:43:1d:28:bd:6a:60:cc:65:db:bc:
3b:27:99:f9:7f:73:ad:c2:e0:dd:df:d9:3d:a6:de:ee:46:a0:
31:ff:82:9b:51:4d:ad:af:e9:2c:8b:23:3b:bd:07:c1:30:38:
49:ec:c1:31:87:fc:bc:92:fb:20:7c:f8:b1:30:5a:14:33:aa:
1a:ca:4a:eb:b8:93:cd:80:97:d3:8f:3d:75:34:10:9b:d8:25:
76:8c:46:ae:53:27:2d:ca:64:4b:25:4a:f7:73:fb:d9:d3:f9:
32:89:e7:6d:4d:be:85:77:e1:15:ed:19:61:8b:d9:56:99:e2:
a9:f6:a2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:56 2026 by rpki-client