Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
File: nzEukpe8HSfr60dt6g7hXddWVC0.mft (raw, json)
Hash identifier: HyCxk8VG4zP2I8bkFuvA9O1JkTLhClaJNtj3exUii3U=
Subject key identifier: 27:5D:BB:DD:33:34:6A:C7:F6:B5:D0:CD:EC:53:1F:DF:60:3E:3B:05
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 019E1D22C1F229A626590032C9A8816C3845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
Manifest number: 0FA9
Signing time: Tue 12 May 2026 17:01:17 +0000
Manifest this update: Tue 12 May 2026 17:01:17 +0000
Manifest next update: Wed 13 May 2026 17:01:17 +0000
Files and hashes: 1: 8UzfUWJvn8I9_AC0AqDko2JvNLk.roa (hash: 0Vz8FiIdw8A6JBB2ikazw0zl4TrRKvJ5OhWokpICGeU=)
2: GPrNUgOp-yFfntRAITK46bjxYx8.roa (hash: tp3Wm0E6OeEViiyRYXktB8FqE/SyfwJ6JfvXOHg6tpE=)
3: Ia5LqxC4UDeU94BXdFGGowiTk-Q.roa (hash: trfEQgzbUlz1xLGTVPmFL6RW2N2kOG1uK8fwtE/nm/0=)
4: JpjcVvpsRev2p10C3LQaIJ0kCAk.roa (hash: olGjGjOs+cbpB3gRjJy05Z6fBuTN4aPpcrK5updhkf8=)
5: MEHkcgqEJz7YFYdGUGWIvg3-cls.roa (hash: 1BYxRX72gkHZBwUAz+wy4Xb3C0tFku26Sl04kGiXOpw=)
6: ZUJhUNmgGj_YHmbRa8-Vde0Gm6Y.roa (hash: W7TJ+QEiqoirOPiCGWDS+nKtWjHZnufX8l6Fd8kt268=)
7: nzEukpe8HSfr60dt6g7hXddWVC0.crl (hash: dpVREoatzkZL1q5pH4Tsv7/Ood+MVD3L2BOmw1IYhjE=)
8: unsDtmwuVq6UnIoMMfgu4SomBNI.roa (hash: 42NQRABPwAdQZ7WOYRrg/k8mIJxEsdJlQLE5DRl74k0=)
9: yefHGqoy_vY6UIn_R3TQMREwj3k.roa (hash: B1VLvaZ4NnymL6VHVlSUOOS/upHHX90n9eExa5FLhNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:c1:f2:29:a6:26:59:00:32:c9:a8:81:6c:38:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: May 12 17:01:17 2026 GMT
Not After : May 13 17:01:17 2026 GMT
Subject: CN=275dbbdd33346ac7f6b5d0cdec531fdf603e3b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1b:48:c4:6a:0c:4d:35:28:5e:8a:3e:2d:fd:
af:ff:1a:6e:9e:af:ec:23:e9:8a:f1:d0:60:21:39:
bd:f1:cd:cc:62:e7:a1:9d:91:9c:d4:65:3b:9e:1a:
a2:49:85:4c:6f:5f:68:d7:77:c6:2f:55:3a:4c:d0:
7d:9b:b5:fa:be:f2:5b:2a:7f:bd:b8:be:f5:b3:81:
d9:93:86:d6:1b:b8:9b:a0:ae:78:1f:5c:da:a7:6b:
6e:6f:f6:a8:bc:2a:b2:8e:5d:a3:57:c2:7f:0e:3f:
f7:e3:9b:85:80:0f:5c:35:99:55:3a:ad:35:bd:65:
03:3a:18:70:cf:4b:9b:93:c7:55:30:f0:3a:54:d5:
8c:28:e0:76:2d:e8:bc:22:6f:db:f9:e6:b0:03:18:
1e:ae:2a:96:d4:9b:ef:90:0a:a6:df:d3:3b:c0:31:
67:b6:c5:e9:9f:98:cd:0d:0f:f3:3a:7f:05:a3:92:
2e:0a:26:50:aa:58:d1:f6:49:17:f9:23:8a:b4:c1:
c7:99:a9:28:56:c7:28:73:20:af:e2:99:29:56:71:
a8:d9:60:19:de:36:d4:8a:1d:9f:db:9e:7e:b0:0a:
da:aa:94:27:ff:45:44:a4:c7:aa:f4:c3:83:6f:7e:
de:bc:f9:1b:06:0d:63:43:55:38:8d:da:c7:a1:e1:
a9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5D:BB:DD:33:34:6A:C7:F6:B5:D0:CD:EC:53:1F:DF:60:3E:3B:05
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:16:e2:28:56:0a:b9:51:38:a4:93:2f:c4:cf:f8:f0:a1:91:
49:5f:c4:39:a4:8e:47:22:bb:cf:bc:77:d4:00:5c:91:f3:23:
4d:75:46:72:94:8f:59:9a:2b:d7:d4:0c:c0:ea:45:06:05:e2:
a2:03:1a:3d:a9:f2:fc:5d:09:04:a1:39:de:37:72:b5:c9:57:
99:0a:f2:0a:94:04:e0:ba:8a:3b:aa:e2:1d:53:73:2e:af:5c:
d1:df:05:4a:9e:0b:9d:9e:55:3e:39:84:31:b4:85:d4:08:27:
f5:4f:bd:be:cb:fa:4d:69:00:fb:bd:ca:ee:c8:02:5f:34:65:
0b:8f:c1:34:8d:c7:50:22:6f:61:94:2f:0b:61:29:3f:10:ec:
ab:92:9e:34:af:75:a8:22:70:d0:f4:a9:22:76:14:e9:03:68:
07:15:71:95:64:f8:1c:2b:1a:93:a0:65:6d:d4:50:b5:bf:b6:
ad:11:21:1d:12:a7:0c:70:ed:05:0b:21:f0:e9:52:2d:c0:f9:
a6:51:20:06:61:ff:04:7f:9f:9b:3f:97:d1:b0:1e:31:4e:4e:
e6:5c:87:5d:36:80:80:b1:93:8e:cf:5b:63:96:b9:5b:3d:cd:
5b:8e:94:10:89:a0:ef:c0:a8:68:e5:ea:5c:52:d7:dd:f9:82:
3e:14:cd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:18:47 2026 by rpki-client