Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
File: NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft (raw, json)
Hash identifier: Ex2Gwq5estoo/C241W5a53Mo8JZqbFCtUZPC2SwdiSk=
Subject key identifier: 24:95:A1:E2:A7:1A:58:7C:20:4C:0B:40:CE:29:1D:D1:86:F9:BB:F6
Authority key identifier: 35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
Certificate issuer: /CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Certificate serial: 019D2816CA944ACA39A12033A45851171976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
Manifest number: 0D6B
Signing time: Thu 26 Mar 2026 03:01:15 +0000
Manifest this update: Thu 26 Mar 2026 03:01:15 +0000
Manifest next update: Fri 27 Mar 2026 03:01:15 +0000
Files and hashes: 1: 1p2ABoTmHppjIUEVK5pg2mIhNow.roa (hash: ECPu2qb2eGXD+sxXXw8nzOOHG8hI1ILJZKOoScd4Ul8=)
2: NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl (hash: dtf4LeRIGxTIPwcR1W4Aq6bMHwYnyuJEa+BezSRY1ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:ca:94:4a:ca:39:a1:20:33:a4:58:51:17:19:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Validity
Not Before: Mar 26 03:01:15 2026 GMT
Not After : Mar 27 03:01:15 2026 GMT
Subject: CN=2495a1e2a71a587c204c0b40ce291dd186f9bbf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1a:e1:93:18:bd:ad:90:4a:7f:b8:0d:14:8a:
a5:16:e2:73:11:ed:2f:5e:9f:06:fd:33:1b:7c:e2:
6b:92:ee:24:8a:7a:c3:bc:70:0c:48:b3:e5:be:3c:
06:a0:9e:91:c5:5d:cf:d9:4f:f9:b8:56:24:56:0a:
96:a0:7f:39:aa:7a:a6:d2:77:8a:9e:48:61:b8:6d:
42:75:2c:9f:9d:4c:f3:ed:9e:11:7a:1f:5d:91:50:
cc:67:f1:0e:97:2f:12:29:a4:43:84:9c:be:82:db:
6a:1b:40:29:9f:03:6d:e2:19:09:c2:4b:e2:70:e3:
8f:d9:3e:0e:89:9f:7b:57:64:bb:96:f5:48:f1:2f:
6f:7c:7c:7c:81:0b:3f:ec:37:80:fe:e1:76:7a:c0:
77:07:11:b1:7c:08:2a:cd:3c:07:9e:6f:6c:04:47:
d9:f6:9c:d9:95:1b:3b:ae:eb:76:80:a1:b6:1c:9a:
21:7f:e9:c6:67:eb:50:d3:83:76:2c:c4:0c:0f:1a:
b0:f2:c3:cf:4b:18:22:94:c0:5c:b6:4d:67:fe:f5:
70:7c:00:3a:15:44:55:45:07:bb:8b:97:4e:20:06:
e2:22:ee:c4:6f:29:ee:47:f4:7e:62:fe:e3:56:13:
90:42:af:3d:f0:91:29:22:0d:9b:f8:31:a9:e7:07:
df:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:95:A1:E2:A7:1A:58:7C:20:4C:0B:40:CE:29:1D:D1:86:F9:BB:F6
X509v3 Authority Key Identifier:
keyid:35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:59:f8:64:f3:85:16:73:a4:bb:1e:d2:94:58:1e:ac:ac:8e:
5a:e7:be:11:26:0d:f4:b8:d4:f5:97:fd:22:52:a6:17:15:b1:
bd:a0:4f:19:c6:f2:1a:6f:97:c2:41:ab:9e:16:3e:a2:55:3a:
e0:b5:fc:2c:b6:5f:ee:75:67:a8:c1:79:07:73:ef:80:e9:e9:
ff:7d:3b:35:e1:00:b9:c5:48:f8:a4:47:1c:1e:aa:92:3f:1f:
08:4f:ca:6c:ee:2d:92:f9:d0:7b:11:1c:cc:25:df:bb:3c:82:
c3:ad:92:22:65:2c:87:3f:47:aa:19:12:6a:0a:e4:a5:d3:a5:
9e:61:e0:37:61:fe:a0:61:ea:67:03:24:d4:e5:8f:d7:45:8e:
c2:fb:fa:11:ac:1b:20:b0:ba:29:34:d9:65:aa:4b:cd:17:20:
1a:a7:85:3d:fe:24:5a:2d:25:3e:f5:ed:4c:d9:41:14:75:7f:
f4:e8:bf:43:fe:08:4c:92:e0:2d:26:9c:2e:eb:44:be:c4:85:
34:15:d3:4c:30:3b:5a:83:2b:77:cc:38:8a:4a:29:56:a9:9f:
7f:58:3a:7f:7c:96:f1:24:b4:4c:3d:f8:78:57:59:e6:a3:31:
fb:74:ed:2b:41:f6:76:5c:b7:02:47:70:0f:b7:38:82:af:fb:
bc:7c:6a:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFsqUSso5oSAzpFhRFxl2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MTY1MmI4MzhmZjJkOTY3MmFjOGNhNjZiYTY2MGRkNGU0
NWQ2OTkwHhcNMjYwMzI2MDMwMTE1WhcNMjYwMzI3MDMwMTE1WjAzMTEwLwYDVQQD
EygyNDk1YTFlMmE3MWE1ODdjMjA0YzBiNDBjZTI5MWRkMTg2ZjliYmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hrhkxi9rZBKf7gNFIqlFuJzEe0v
Xp8G/TMbfOJrku4kinrDvHAMSLPlvjwGoJ6RxV3P2U/5uFYkVgqWoH85qnqm0neK
nkhhuG1CdSyfnUzz7Z4Reh9dkVDMZ/EOly8SKaRDhJy+gttqG0ApnwNt4hkJwkvi
cOOP2T4OiZ97V2S7lvVI8S9vfHx8gQs/7DeA/uF2esB3BxGxfAgqzTwHnm9sBEfZ
9pzZlRs7rut2gKG2HJohf+nGZ+tQ04N2LMQMDxqw8sPPSxgilMBctk1n/vVwfAA6
FURVRQe7i5dOIAbiIu7EbynuR/R+Yv7jVhOQQq898JEpIg2b+DGp5wffowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSVoeKnGlh8IEwLQM4pHdGG+bv2MB8GA1UdIwQY
MBaAFDUWUrg4/y2WcqyMpmumYN1ORdaZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJaU3VEal9MWlp5ckl5bWE2WmczVTVGMXBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi85Y2U2MGItY2JjNC00MGQ5LTk4YWQt
MWNkNTA2MDcwYmI1LzEvTlJaU3VEal9MWlp5ckl5bWE2WmczVTVGMXBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi85Y2U2MGItY2JjNC00MGQ5LTk4YWQtMWNkNTA2MDcwYmI1
LzEvTlJaU3VEal9MWlp5ckl5bWE2WmczVTVGMXBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ1n4ZPOF
FnOkux7SlFgerKyOWue+ESYN9LjU9Zf9IlKmFxWxvaBPGcbyGm+XwkGrnhY+olU6
4LX8LLZf7nVnqMF5B3PvgOnp/307NeEAucVI+KRHHB6qkj8fCE/KbO4tkvnQexEc
zCXfuzyCw62SImUshz9HqhkSagrkpdOlnmHgN2H+oGHqZwMk1OWP10WOwvv6Eawb
ILC6KTTZZapLzRcgGqeFPf4kWi0lPvXtTNlBFHV/9Oi/Q/4ITJLgLSacLutEvsSF
NBXTTDA7WoMrd8w4ikopVqmff1g6f3yW8SS0TD34eFdZ5qMx+3TtK0H2dly3Akdw
D7c4gq/7vHxqrA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:08:35 2026 by rpki-client