Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
File: NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft (raw, json)
Hash identifier: HJ3764tk/D27VDwqecGekQcbxOlwxyf6fmx7y5waLTs=
Subject key identifier: 56:0F:9D:29:DA:1C:61:0D:D6:A9:A1:0F:8C:24:EE:C4:81:97:56:F3
Authority key identifier: 35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
Certificate issuer: /CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Certificate serial: 01A0D0B651A63D7A79FEFB44405C34A5B3A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
Manifest number: 0F50
Signing time: Thu 24 Sep 2026 00:00:04 +0000
Manifest this update: Thu 24 Sep 2026 00:00:04 +0000
Manifest next update: Fri 25 Sep 2026 00:00:04 +0000
Files and hashes: 1: 1p2ABoTmHppjIUEVK5pg2mIhNow.roa (hash: ECPu2qb2eGXD+sxXXw8nzOOHG8hI1ILJZKOoScd4Ul8=)
2: NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl (hash: MdDMCQ8SosrLKTId7V1hMqHQwV7yTRcYagtPrkO/xKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:51:a6:3d:7a:79:fe:fb:44:40:5c:34:a5:b3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Validity
Not Before: Sep 24 00:00:04 2026 GMT
Not After : Sep 25 00:00:04 2026 GMT
Subject: CN=560f9d29da1c610dd6a9a10f8c24eec4819756f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:14:8f:2c:ce:c3:ca:50:fa:8e:3d:b1:4e:64:
ec:01:b6:f6:54:f2:5d:0f:c0:3f:a7:17:8c:c0:85:
b0:3a:b4:93:48:92:0f:08:b4:83:8a:bd:e0:34:a1:
24:89:2e:94:b4:5e:68:bb:00:ed:78:e7:58:3c:09:
1c:06:24:3f:ce:ed:c1:d8:54:9e:0f:c5:aa:da:4c:
a9:94:be:62:c7:91:4c:e3:2e:88:2d:7a:38:51:2b:
92:e5:16:0a:c5:2e:c1:b6:19:8e:4f:7d:cb:d1:3b:
ba:40:14:f8:f6:87:56:aa:f8:3a:49:6a:20:0d:18:
a0:20:7b:7b:59:e9:ed:6f:5d:35:ef:c1:13:99:ea:
95:bb:75:e8:c9:a2:a8:bc:47:0c:d8:2b:41:35:fe:
7c:21:bb:f4:80:3f:72:4f:9c:c2:62:c9:e0:16:72:
5b:fc:92:83:1f:f4:3a:85:33:f3:26:3b:73:5f:4c:
ac:61:f2:4e:90:d6:1e:8a:50:c7:23:8b:b4:df:eb:
34:39:68:5a:c1:3d:0b:c4:f7:31:40:95:05:0e:52:
00:83:4a:cc:cc:ef:d9:7c:1a:55:e1:3f:ea:1f:80:
4f:a9:3c:67:d5:f4:88:2c:fc:3e:f0:8e:85:14:cf:
4c:f6:c2:d4:01:5c:e0:c9:33:8e:15:03:38:cf:29:
3b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0F:9D:29:DA:1C:61:0D:D6:A9:A1:0F:8C:24:EE:C4:81:97:56:F3
X509v3 Authority Key Identifier:
keyid:35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:3a:21:c7:b5:4e:f7:ca:91:28:20:2c:f3:66:ba:c3:ae:6c:
e6:70:90:a5:24:7d:f4:d4:2e:2a:5e:93:0c:7e:8f:b2:a1:9c:
d2:0d:94:9c:a4:ec:24:ae:54:31:a0:bc:f8:81:36:ab:2e:9e:
d2:f1:67:d2:bb:40:08:4c:b2:77:25:cc:15:0a:83:57:df:55:
2b:04:e0:4c:81:ff:16:96:12:ea:e5:bb:5c:7a:ba:d1:1f:fe:
fb:18:e7:6e:38:5d:23:2f:c3:fe:07:36:e7:14:de:53:62:8a:
46:07:7e:2e:23:aa:cf:3a:be:e1:38:7f:ea:32:f4:8f:87:d6:
0b:61:c7:20:4d:a6:00:e2:33:be:ed:49:5e:e8:da:dc:ae:44:
55:5a:f2:4a:6e:d9:1c:2e:b0:2e:89:95:8a:79:12:a3:39:d9:
1c:0f:6a:c9:b3:5a:cf:c8:0f:ba:2b:5f:07:1d:7b:6a:6e:f3:
02:c0:4c:8e:76:4e:3f:a6:2e:83:4a:1b:a3:3e:3b:f7:b4:72:
f0:20:42:70:d0:a1:04:75:c2:c7:ff:d2:d7:52:17:6f:86:57:
57:c9:19:38:cd:e4:fb:85:7f:b4:01:49:33:f4:12:76:e7:cc:
11:ad:0a:45:aa:cc:41:10:82:fb:d9:44:3a:97:6f:63:24:28:
5a:c6:b4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:48:54 2026 by rpki-client