Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
File: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft (raw, json)
Hash identifier: MPQM1WdAjC/02P7DX3z1b/NtXEvpMYE8wijnFmQOccg=
Subject key identifier: 0B:8A:76:61:8A:06:96:E7:E3:A5:C2:4F:D6:29:09:84:11:63:F4:2C
Authority key identifier: 35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
Certificate issuer: /CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Certificate serial: 019D2997431EA96D532F9888F9CC0DFA42E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
Manifest number: 15AF
Signing time: Thu 26 Mar 2026 10:01:12 +0000
Manifest this update: Thu 26 Mar 2026 10:01:12 +0000
Manifest next update: Fri 27 Mar 2026 10:01:12 +0000
Files and hashes: 1: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl (hash: R4X1wrpOT3/jd4mPUMV/dSKg5qj0ZPrN3EgRJeIZcHI=)
2: yY2vlrWyIY4apa6paDeTCxfPgaU.roa (hash: 6y+VApPzYyS4SGDKt87iuWrwk2coenfHGpex1d3nrQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:43:1e:a9:6d:53:2f:98:88:f9:cc:0d:fa:42:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Validity
Not Before: Mar 26 10:01:12 2026 GMT
Not After : Mar 27 10:01:12 2026 GMT
Subject: CN=0b8a76618a0696e7e3a5c24fd62909841163f42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:85:82:45:50:fe:0c:c3:eb:97:33:70:51:11:
80:49:05:7e:ba:d7:14:cd:2d:f2:0a:9f:f6:2e:bc:
19:75:61:bb:40:d8:3f:bc:7b:c0:33:65:6e:df:62:
67:4a:87:72:39:ec:c3:c7:a5:0a:cc:02:5f:b4:67:
da:d6:f2:70:d6:36:92:d2:a5:2d:91:b0:5d:03:56:
e2:a2:01:8e:a3:10:fc:3f:c0:3f:6e:b2:42:e1:69:
d8:78:73:af:03:a3:40:96:5e:50:9d:c1:88:c9:4c:
90:18:07:31:3a:cd:c1:ed:1c:cd:ee:63:a5:de:42:
f7:09:77:d5:a6:f9:20:7c:ba:1a:84:7f:2f:d5:33:
a5:85:6c:f8:ea:b3:b8:1c:73:7b:9a:d0:cd:59:ac:
46:61:8c:c0:61:d9:41:5f:e8:2d:e7:ac:d2:7c:17:
c5:92:be:0e:7d:88:16:39:bd:e3:6b:11:72:6a:ff:
ab:61:7f:73:05:00:e9:1e:d5:2b:59:ad:5b:50:30:
30:d0:c8:0d:64:dc:02:21:57:07:da:98:b6:60:49:
b6:b7:97:98:5a:ae:26:23:d9:a9:60:1b:c2:ab:5d:
4c:e2:f7:76:f6:7f:e8:f3:9c:b7:c7:0e:73:a7:e6:
f7:26:f9:c6:f0:5a:e4:d6:93:aa:f5:ae:b9:eb:20:
2f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8A:76:61:8A:06:96:E7:E3:A5:C2:4F:D6:29:09:84:11:63:F4:2C
X509v3 Authority Key Identifier:
keyid:35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e3:01:61:8e:a1:a7:42:ee:70:68:4a:a4:96:b5:dd:43:dc:
e7:e9:f7:3e:09:4c:19:aa:2c:53:61:c7:60:da:06:9b:3e:5d:
37:d9:00:40:b1:6d:3f:10:1c:85:5b:bf:d3:b4:47:ed:fb:8e:
9e:63:55:2d:31:ec:a3:b5:7a:0a:12:2e:b1:2f:f5:63:ae:63:
ff:b7:eb:7d:94:b9:57:49:d7:51:1f:59:89:17:ee:f1:78:9c:
65:fe:82:ef:b8:29:71:cb:9f:ea:28:8d:e0:81:4b:32:29:5f:
39:a4:e1:dc:59:28:36:18:99:13:e1:14:75:7b:cb:d5:95:e0:
51:86:eb:5c:b0:eb:cf:be:53:2f:32:bd:06:06:7f:c8:5d:ab:
29:19:dc:c9:46:f6:08:93:df:e3:5e:d1:53:57:b3:bc:83:0e:
ff:98:98:b0:44:79:19:4b:1d:1c:8a:a4:0f:29:f9:1b:be:e8:
2a:d4:86:4a:86:68:03:d1:56:bd:74:47:37:de:1f:94:b5:67:
3f:45:0a:5b:18:85:6c:63:41:86:98:26:a7:81:87:24:4e:c6:
ae:2a:43:b7:57:f0:aa:88:e8:a2:8e:e8:31:10:7c:86:c8:be:
5f:38:d8:41:7a:38:ab:cd:c9:d8:17:c8:dc:ac:e0:dc:29:92:
f1:f1:58:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:13 2026 by rpki-client