Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
File: NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft (raw, json)
Hash identifier: 0g7wy05KoZ4wF0dOLmbN15ewayzko/WHZFP53tfiDro=
Subject key identifier: 20:23:E3:4D:8D:67:DC:B3:55:E1:86:47:C7:E3:0C:71:00:7F:82:1D
Authority key identifier: 35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
Certificate issuer: /CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Certificate serial: 019F93FFC984978E3C902D0C0B819489D9F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
Manifest number: 0EAC
Signing time: Fri 24 Jul 2026 12:00:41 +0000
Manifest this update: Fri 24 Jul 2026 12:00:41 +0000
Manifest next update: Sat 25 Jul 2026 12:00:41 +0000
Files and hashes: 1: 1p2ABoTmHppjIUEVK5pg2mIhNow.roa (hash: ECPu2qb2eGXD+sxXXw8nzOOHG8hI1ILJZKOoScd4Ul8=)
2: NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl (hash: uXE6WeS9h/yfPOur/btq4bNtyfxDOtiPF3gYJw14sMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:c9:84:97:8e:3c:90:2d:0c:0b:81:94:89:d9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Validity
Not Before: Jul 24 12:00:41 2026 GMT
Not After : Jul 25 12:00:41 2026 GMT
Subject: CN=2023e34d8d67dcb355e18647c7e30c71007f821d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:26:88:12:c1:cc:ea:03:97:c4:99:4b:9f:5a:
46:dd:89:29:5d:6f:a9:48:7d:fa:4c:43:b7:31:a7:
30:2c:2e:7f:32:97:be:c5:f8:6d:da:d9:df:1f:89:
b4:51:43:41:45:d2:cf:f8:76:c0:30:58:10:6f:ef:
61:7e:fb:11:76:c3:b0:89:1e:70:80:9b:b0:2f:f2:
de:ec:86:7c:fb:af:7c:07:60:00:c5:5c:ce:5d:e0:
fd:0c:b7:e1:9f:8f:a7:1a:81:e6:75:36:15:07:91:
dd:cc:31:73:55:e1:52:e0:b3:7e:de:77:cb:e2:4d:
18:41:e9:22:2b:90:49:11:17:28:99:8c:73:11:0e:
69:9d:e8:bb:29:1a:5b:30:03:cf:a3:8b:8a:af:6a:
44:eb:32:79:a5:ba:b9:ac:85:78:c0:ed:2c:59:1a:
a9:28:39:76:1a:d2:ef:19:2e:1f:91:98:dc:f8:c2:
ab:e8:07:aa:40:a1:28:c0:ac:d8:dd:11:e6:44:4b:
00:42:47:f7:ba:37:df:13:42:eb:53:1a:e5:f4:97:
78:06:99:93:2e:d2:03:25:a4:74:3f:43:d7:de:74:
d1:ab:23:ec:46:f1:04:89:02:91:ef:02:53:4e:cf:
9d:55:3b:ce:4c:92:fa:36:d0:fa:e4:bb:ce:f2:b1:
7c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:23:E3:4D:8D:67:DC:B3:55:E1:86:47:C7:E3:0C:71:00:7F:82:1D
X509v3 Authority Key Identifier:
keyid:35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9f:76:25:5b:0d:5b:69:c4:c8:74:c1:5b:18:3f:d7:56:b9:
77:ff:37:98:9c:bd:6a:9b:f9:0f:1c:10:0c:90:f0:f0:ad:75:
ca:2c:cc:18:19:3a:3e:06:31:19:61:0c:40:0c:1e:23:65:b0:
b7:fb:74:c3:11:71:ea:32:86:a4:64:6b:4b:bc:1f:f1:e8:8a:
9d:19:6e:df:1b:f2:df:ba:fd:ef:9c:4b:54:fa:74:93:42:90:
12:ef:0a:98:44:fb:f2:5e:e4:03:dd:f9:7a:5b:99:30:b0:3c:
18:52:e3:ec:fb:1b:fe:1e:1d:9e:81:64:e4:78:81:a0:2c:3a:
56:2a:2b:37:c6:a4:f9:08:71:2e:21:dd:85:c6:83:ca:cb:30:
51:74:f5:90:c2:79:47:58:c9:df:1e:7d:f6:4f:56:41:1e:d4:
a6:59:58:6f:6c:c3:7d:6a:7e:0b:b8:40:20:b8:e6:8c:fb:05:
3b:93:9a:76:97:00:fb:58:1b:a5:3f:9b:73:3c:d2:bf:d4:bf:
fb:bb:2a:d6:99:82:9e:27:87:88:41:32:2c:af:e6:ce:ad:4b:
dc:d4:91:6e:6c:2f:4f:d6:62:43:ee:7c:fa:3c:ea:94:b9:da:
ae:c3:8b:a6:36:bb:f1:07:74:57:f4:2e:23:31:37:55:81:59:
06:ef:61:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:07:53 2026 by rpki-client