Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
File: NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft (raw, json)
Hash identifier: NBX/F+8qGMF3/rXkleUFHTqPG/D5O2afy8+QtK92lp0=
Subject key identifier: 8D:DE:7C:71:56:A0:A9:44:A3:A6:67:78:5E:5F:D6:43:BA:72:1D:B3
Authority key identifier: 35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
Certificate issuer: /CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Certificate serial: 01A0D87270F63174D7E345B7BAD2CC573E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
Manifest number: 0F54
Signing time: Fri 25 Sep 2026 12:02:53 +0000
Manifest this update: Fri 25 Sep 2026 12:02:53 +0000
Manifest next update: Sat 26 Sep 2026 12:02:53 +0000
Files and hashes: 1: 1p2ABoTmHppjIUEVK5pg2mIhNow.roa (hash: ECPu2qb2eGXD+sxXXw8nzOOHG8hI1ILJZKOoScd4Ul8=)
2: NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl (hash: HBVFLVUg9SYtttvb1eF0L/BhV4VzP0VGIlQ4UnOFpEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 12:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:70:f6:31:74:d7:e3:45:b7:ba:d2:cc:57:3e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Validity
Not Before: Sep 25 12:02:53 2026 GMT
Not After : Sep 26 12:02:53 2026 GMT
Subject: CN=8dde7c7156a0a944a3a667785e5fd643ba721db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:23:6a:3d:76:77:f3:10:23:7b:55:34:b3:08:
17:f5:2a:8b:25:cb:dd:8b:eb:fa:f7:cf:22:c7:be:
32:57:0f:51:c3:d3:1d:e0:49:5a:d1:b3:69:ff:91:
d2:fa:fa:01:19:f5:ba:45:78:63:eb:31:cf:10:7e:
f8:57:37:d9:3e:af:2c:b5:c9:87:99:4d:a8:d9:fd:
cd:64:20:af:a0:f6:b7:0b:12:31:f5:5d:5c:40:b2:
dd:fa:07:88:63:d1:32:59:47:9e:42:2e:33:f3:f7:
68:32:6b:3d:0e:dc:b5:58:21:a5:a1:45:3d:80:9e:
56:bb:44:3d:f7:33:0c:f4:f8:55:aa:67:80:d8:f9:
7a:4a:3b:00:25:5c:25:39:9a:ac:b1:6e:6c:7a:e6:
62:98:2b:51:bc:72:83:ca:5e:9a:f9:90:23:f6:85:
e7:7f:bc:b1:c5:66:20:2c:d7:b3:be:aa:1e:ec:31:
47:17:e5:87:83:1b:99:9c:49:3a:4c:fa:65:1a:92:
7b:ad:4b:e6:28:d9:a4:14:20:bd:65:ef:05:18:f3:
6b:84:11:a9:33:43:a2:68:ec:d8:a1:22:0b:d9:95:
82:8b:42:9b:64:9c:53:cd:9c:9f:6f:65:82:0a:f4:
3e:40:32:67:27:e0:18:8f:3e:16:f4:6f:0f:0c:30:
81:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DE:7C:71:56:A0:A9:44:A3:A6:67:78:5E:5F:D6:43:BA:72:1D:B3
X509v3 Authority Key Identifier:
keyid:35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:54:31:74:b5:81:2e:9e:ea:c5:87:d0:39:92:42:60:5d:52:
65:2b:2a:6e:31:fe:39:4f:ab:93:ec:29:05:90:dd:ae:40:ee:
f7:e4:46:56:9e:84:31:1f:5f:e8:0a:18:ad:f9:d1:21:33:aa:
5c:a4:c2:16:25:d3:02:37:9a:4e:bd:0c:73:67:7d:96:56:ca:
0c:c6:e5:2d:3e:d0:84:06:b0:2b:b1:71:29:bb:45:02:17:bf:
a8:e7:aa:d1:6f:4a:43:10:48:fc:13:f0:67:c9:7b:0b:f7:36:
bb:8c:04:4a:ab:a3:b5:79:13:06:11:0e:30:34:1f:bb:e7:e2:
6c:02:db:9b:5d:b1:e3:a9:35:fe:4e:a7:e6:0d:a0:a0:c3:62:
96:f3:97:5c:08:04:8c:8d:0b:a9:db:7e:be:1e:86:eb:d0:97:
84:5a:45:25:4a:3e:f1:30:13:d0:b4:86:8b:78:3e:c9:76:d6:
f1:4f:ff:fb:02:19:71:4a:21:f5:8d:18:30:4f:61:5b:bd:f6:
da:27:c5:76:09:04:ef:f5:b1:8e:54:f0:54:0d:e2:37:ff:e0:
fe:d9:9c:cd:30:be:a7:ea:48:00:1f:44:75:a9:16:47:54:18:
dd:e7:3f:af:88:85:ba:50:6b:2e:89:14:fc:e2:b3:74:e9:86:
82:0e:9c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:19:50 2026 by rpki-client