Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.mft
File: nz-YcVNtYL90vfaQYMkNVBB9jjg.mft (raw, json)
Hash identifier: JUku37R/JeL2nEQWosLc3qjtgZln7W4C0LKHv2bdX/o=
Subject key identifier: 02:07:5A:7F:A6:24:E1:02:1C:63:4C:D1:A1:9F:99:5C:DF:01:96:01
Authority key identifier: 9F:3F:98:71:53:6D:60:BF:74:BD:F6:90:60:C9:0D:54:10:7D:8E:38
Certificate issuer: /CN=9f3f9871536d60bf74bdf69060c90d54107d8e38
Certificate serial: 019F92117C06DB2BB769157B3599C1F4C518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nz-YcVNtYL90vfaQYMkNVBB9jjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.mft
Manifest number: 1247
Signing time: Fri 24 Jul 2026 03:00:46 +0000
Manifest this update: Fri 24 Jul 2026 03:00:46 +0000
Manifest next update: Sat 25 Jul 2026 03:00:46 +0000
Files and hashes: 1: PYDato-ASu6UXDdHs5gP0K32nY4.roa (hash: yQRUA3xyuLF4WYI3cv0hMQ5bIo4W5JbDMtC9jfgPPDQ=)
2: nz-YcVNtYL90vfaQYMkNVBB9jjg.crl (hash: d7QfOP3v9h2pe1x8fKuMfRxEo1e51MOQ1rpEaswEGG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nz-YcVNtYL90vfaQYMkNVBB9jjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:7c:06:db:2b:b7:69:15:7b:35:99:c1:f4:c5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3f9871536d60bf74bdf69060c90d54107d8e38
Validity
Not Before: Jul 24 03:00:46 2026 GMT
Not After : Jul 25 03:00:46 2026 GMT
Subject: CN=02075a7fa624e1021c634cd1a19f995cdf019601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:8c:d2:2d:ba:c4:37:66:93:f1:53:10:dc:
e2:ee:f7:26:4a:eb:76:2a:6f:f5:32:09:b8:89:59:
ee:92:e7:68:5e:c8:bd:9f:14:5e:c9:50:6d:f6:06:
b8:34:e6:a2:76:65:f8:25:8e:ac:65:29:7c:33:33:
ca:78:50:32:06:e1:56:ea:3a:f3:89:45:72:25:23:
d8:68:d1:8e:1d:cc:51:c6:3d:1e:46:d1:fa:f2:a5:
9b:ea:2d:ad:53:99:57:e7:52:4a:94:29:de:9f:5b:
9c:9c:73:df:9d:e8:61:48:3e:d4:59:eb:2c:c7:92:
eb:5a:20:74:3c:0e:0a:56:6d:e5:c0:65:ef:9a:26:
b9:11:ad:37:06:e7:0f:c4:a6:21:11:3e:33:fe:7f:
21:73:21:1d:bb:b2:d1:be:8c:3b:eb:1d:75:85:34:
f7:e7:ba:52:3f:70:cf:66:a6:83:23:ba:b8:0d:7f:
fb:94:1d:79:35:b1:4c:26:0c:b1:05:d7:2c:00:fc:
c3:6e:51:25:38:f7:fd:86:e6:71:1a:59:e2:83:46:
24:62:5d:06:9a:ba:2f:d1:40:15:da:00:24:8f:49:
0e:4d:c9:86:0e:a9:80:2b:a3:1c:8c:6a:bd:4c:b5:
75:73:23:84:76:fd:56:f3:70:6b:3c:3f:be:55:b8:
5a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:07:5A:7F:A6:24:E1:02:1C:63:4C:D1:A1:9F:99:5C:DF:01:96:01
X509v3 Authority Key Identifier:
keyid:9F:3F:98:71:53:6D:60:BF:74:BD:F6:90:60:C9:0D:54:10:7D:8E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nz-YcVNtYL90vfaQYMkNVBB9jjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e3:91:64:34:47:f8:76:c7:d7:e6:0b:53:09:08:33:eb:6e:
a4:1e:fe:fd:72:ff:59:39:5b:90:7b:90:42:2f:02:e7:64:c4:
e8:3c:21:e2:a6:13:88:fc:3c:6a:ca:09:61:c6:0f:6e:83:79:
a7:a8:c8:07:bd:f0:8d:a9:49:67:4a:c5:e1:d9:73:75:0b:c1:
79:31:e8:c6:6c:8c:9f:26:e9:0f:eb:b7:47:03:5c:7c:a8:31:
b5:c0:53:d2:c7:75:bf:31:8d:4e:7f:be:9f:3f:c6:7f:c4:e4:
12:80:c8:4d:d2:11:30:e6:c4:65:16:ab:2f:66:22:0e:d7:99:
58:e8:97:7f:1d:e6:9f:5b:df:c0:f2:f2:97:8e:fe:6f:3a:1f:
ca:65:06:22:46:cb:15:da:21:62:da:47:3b:7c:52:c1:f0:18:
ee:64:42:1a:4a:0f:ea:16:b4:ce:0a:27:44:33:e6:8c:2c:ba:
08:56:f3:7f:c6:74:fb:a1:4d:af:a7:ce:e3:ea:5f:73:9e:9a:
53:65:19:cd:72:35:ed:6c:65:06:24:ef:d2:25:1e:05:ea:d9:
3f:b8:f3:14:ad:6f:f1:c3:53:68:a1:4d:a5:61:33:72:44:3d:
0b:03:fa:ac:a5:c3:35:bb:f9:eb:af:72:98:de:76:54:14:44:
85:2f:b3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:19:45 2026 by rpki-client