Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/nzmWaGPYL6i9HKOTaQX6HiSpoL8.mft
File: nzmWaGPYL6i9HKOTaQX6HiSpoL8.mft (raw, json)
Hash identifier: C+o/PcvHSOeZd4nVXmPSdU8VJ5cRqHxU5i7LrIlw+DU=
Subject key identifier: BC:8A:5C:15:A0:A9:B5:E6:5D:7B:80:D2:0B:2A:1D:01:70:BD:53:1E
Authority key identifier: 9F:39:96:68:63:D8:2F:A8:BD:1C:A3:93:69:05:FA:1E:24:A9:A0:BF
Certificate issuer: /CN=9f39966863d82fa8bd1ca3936905fa1e24a9a0bf
Certificate serial: 019D29976A95A06F481A3ADB70ED439013A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzmWaGPYL6i9HKOTaQX6HiSpoL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/nzmWaGPYL6i9HKOTaQX6HiSpoL8.mft
Manifest number: 1815
Signing time: Thu 26 Mar 2026 10:01:22 +0000
Manifest this update: Thu 26 Mar 2026 10:01:22 +0000
Manifest next update: Fri 27 Mar 2026 10:01:22 +0000
Files and hashes: 1: nzmWaGPYL6i9HKOTaQX6HiSpoL8.crl (hash: yLtUPIgke5nfy+Cd6zkx8glg5GbS3/s3cVgwJK+ATmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/nzmWaGPYL6i9HKOTaQX6HiSpoL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/nzmWaGPYL6i9HKOTaQX6HiSpoL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzmWaGPYL6i9HKOTaQX6HiSpoL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:6a:95:a0:6f:48:1a:3a:db:70:ed:43:90:13:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f39966863d82fa8bd1ca3936905fa1e24a9a0bf
Validity
Not Before: Mar 26 10:01:22 2026 GMT
Not After : Mar 27 10:01:22 2026 GMT
Subject: CN=bc8a5c15a0a9b5e65d7b80d20b2a1d0170bd531e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:22:25:4f:a9:8a:33:cd:19:7c:b1:7c:0b:d6:
ca:4b:94:46:06:3b:e8:76:5b:f4:8a:cf:28:b3:eb:
1b:f0:1c:95:88:d1:35:76:87:33:25:61:4f:36:1f:
6a:cc:0e:7d:a7:e4:7b:4b:87:a9:c9:31:2f:f6:90:
73:9d:79:c2:c7:ca:f4:ab:ae:dd:56:17:ee:3a:46:
1f:93:8b:21:5b:7a:15:27:4e:47:d2:44:f0:42:52:
d0:42:4f:f0:45:d3:d3:5f:3e:cc:7d:16:e3:98:7a:
ac:d3:46:4e:d0:84:99:8d:24:5f:c2:80:a6:54:13:
fa:6e:c7:35:af:dc:bd:de:57:c1:cf:61:2e:a2:62:
49:0c:98:8f:c1:0d:7c:54:ef:61:68:95:7b:9a:3b:
e5:cd:b2:76:68:18:6e:db:4d:bc:09:8b:aa:31:1a:
8a:c5:d5:56:5f:7d:58:e0:22:32:86:c8:0c:a8:46:
19:18:9b:82:9f:90:17:eb:81:cf:2b:07:36:5f:c7:
93:38:d2:a4:14:51:23:ee:ca:b3:7f:8f:a4:78:05:
10:3b:c7:fe:34:06:d3:54:b6:c8:05:5f:e8:e9:dc:
ab:67:13:4d:c7:f4:a7:6f:65:4f:e6:01:c2:d0:2e:
ed:0e:43:2a:c5:5f:1b:cb:39:d9:0b:6c:3b:cf:a2:
af:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8A:5C:15:A0:A9:B5:E6:5D:7B:80:D2:0B:2A:1D:01:70:BD:53:1E
X509v3 Authority Key Identifier:
keyid:9F:39:96:68:63:D8:2F:A8:BD:1C:A3:93:69:05:FA:1E:24:A9:A0:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzmWaGPYL6i9HKOTaQX6HiSpoL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/nzmWaGPYL6i9HKOTaQX6HiSpoL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/nzmWaGPYL6i9HKOTaQX6HiSpoL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:97:aa:66:6f:06:1c:e4:2c:8e:fc:7f:de:2f:9b:5c:f2:a8:
14:a8:8c:ae:1d:10:74:a6:e7:60:75:bb:f9:1f:ac:9e:51:88:
c1:4f:72:ea:bf:26:0f:ef:00:b7:a5:31:ab:58:8d:81:48:9e:
da:92:b8:4a:01:45:3e:79:e1:01:c8:93:73:00:58:e5:04:27:
8a:89:d5:dd:a8:9e:b2:c2:c8:32:f5:c2:15:e9:6e:86:9f:59:
09:0f:33:88:f5:15:9b:47:17:ff:da:28:74:71:db:4a:33:c4:
90:6f:de:dd:52:94:c0:72:09:6c:bb:44:1b:c5:7d:2d:ff:14:
b0:cf:2a:37:44:55:cf:a0:05:69:7c:d8:24:91:6c:9b:bf:e8:
e3:a9:f7:7c:68:7f:d3:77:11:ca:dc:b2:11:1a:19:8f:c1:54:
26:8e:23:a0:3c:55:17:91:5b:82:55:40:24:df:6d:2f:d4:5a:
1f:6c:43:30:d3:e9:4a:41:16:08:7a:1b:aa:f6:e3:0c:94:92:
8a:74:14:c6:97:15:37:d8:a7:d0:24:c9:01:a3:47:b4:7c:f1:
b5:f5:5b:0e:a2:b9:31:64:d6:0d:6f:96:a8:a5:13:a2:4f:c6:
31:09:9d:1e:4c:a1:32:67:b3:05:b9:69:e8:51:5c:da:4a:9a:
a2:1c:77:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pl2qVoG9IGjrbcO1DkBOiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzk5NjY4NjNkODJmYThiZDFjYTM5MzY5MDVmYTFlMjRh
OWEwYmYwHhcNMjYwMzI2MTAwMTIyWhcNMjYwMzI3MTAwMTIyWjAzMTEwLwYDVQQD
EyhiYzhhNWMxNWEwYTliNWU2NWQ3YjgwZDIwYjJhMWQwMTcwYmQ1MzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSIlT6mKM80ZfLF8C9bKS5RGBjvo
dlv0is8os+sb8ByViNE1doczJWFPNh9qzA59p+R7S4epyTEv9pBznXnCx8r0q67d
VhfuOkYfk4shW3oVJ05H0kTwQlLQQk/wRdPTXz7MfRbjmHqs00ZO0ISZjSRfwoCm
VBP6bsc1r9y93lfBz2EuomJJDJiPwQ18VO9haJV7mjvlzbJ2aBhu2028CYuqMRqK
xdVWX31Y4CIyhsgMqEYZGJuCn5AX64HPKwc2X8eTONKkFFEj7sqzf4+keAUQO8f+
NAbTVLbIBV/o6dyrZxNNx/Snb2VP5gHC0C7tDkMqxV8byznZC2w7z6Kv7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyKXBWgqbXmXXuA0gsqHQFwvVMeMB8GA1UdIwQY
MBaAFJ85lmhj2C+ovRyjk2kF+h4kqaC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnptV2FHUFlMNmk5SEtPVGFRWDZIaVNwb0w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9jM2UzYWQtNTFlYi00ZTk2LTk4YjIt
MGIxZDA5NDk4NTM0LzEvbnptV2FHUFlMNmk5SEtPVGFRWDZIaVNwb0w4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9jM2UzYWQtNTFlYi00ZTk2LTk4YjItMGIxZDA5NDk4NTM0
LzEvbnptV2FHUFlMNmk5SEtPVGFRWDZIaVNwb0w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJeqZm8G
HOQsjvx/3i+bXPKoFKiMrh0QdKbnYHW7+R+snlGIwU9y6r8mD+8At6Uxq1iNgUie
2pK4SgFFPnnhAciTcwBY5QQnionV3aiessLIMvXCFeluhp9ZCQ8ziPUVm0cX/9oo
dHHbSjPEkG/e3VKUwHIJbLtEG8V9Lf8UsM8qN0RVz6AFaXzYJJFsm7/o46n3fGh/
03cRytyyERoZj8FUJo4joDxVF5FbglVAJN9tL9RaH2xDMNPpSkEWCHobqvbjDJSS
inQUxpcVN9in0CTJAaNHtHzxtfVbDqK5MWTWDW+WqKUTok/GMQmdHkyhMmezBblp
6FFc2kqaohx3gw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:58:58 2026 by rpki-client