Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
File: nlzy-Led9mJBfsllbtEWbpGquAg.mft (raw, json)
Hash identifier: eTB8+2TT0okEeI3XM9PV8jgEEHHuNqCAq3688aaQW80=
Subject key identifier: B7:BA:FA:71:F9:4F:A0:A4:0B:D3:39:E6:50:03:71:E9:22:AE:36:82
Authority key identifier: 9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08
Certificate issuer: /CN=9e5cf2f8b79df662417ec9656ed1166e91aab808
Certificate serial: 019D2996D9C8DE23E4978920D94E1DEFFE51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
Manifest number: 1109
Signing time: Thu 26 Mar 2026 10:00:45 +0000
Manifest this update: Thu 26 Mar 2026 10:00:45 +0000
Manifest next update: Fri 27 Mar 2026 10:00:45 +0000
Files and hashes: 1: 5hcH1GzZhZ8O8qI4d4Zi7O_RjUE.roa (hash: dxTVG5tLErq0ptsL/SIuT5v8Akxf05W3YRl2mwfObes=)
2: nlzy-Led9mJBfsllbtEWbpGquAg.crl (hash: 50C/cGboIAwWKX9FLD6/Bjqj9ViVj02WTG8Cr+7fIsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:d9:c8:de:23:e4:97:89:20:d9:4e:1d:ef:fe:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5cf2f8b79df662417ec9656ed1166e91aab808
Validity
Not Before: Mar 26 10:00:45 2026 GMT
Not After : Mar 27 10:00:45 2026 GMT
Subject: CN=b7bafa71f94fa0a40bd339e6500371e922ae3682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7a:06:9c:34:3c:40:2f:d2:cb:82:9a:91:11:
49:d9:93:b0:fa:2d:5d:70:aa:03:b2:d3:75:83:79:
1d:54:dc:1d:14:57:3a:4c:49:24:b6:33:e7:14:aa:
83:40:b1:5c:72:38:95:4a:bd:0a:b7:34:93:2a:e6:
e4:e3:3e:29:f6:8f:59:42:cf:1d:0f:9b:c8:30:b4:
c6:c7:98:1d:bd:0b:22:4c:b7:4c:11:67:e1:2f:70:
ee:a5:08:95:2b:71:72:fe:dd:f7:5d:0b:fa:3a:30:
67:11:bb:19:71:7c:30:a7:16:0b:c4:d8:38:49:df:
b3:2a:82:30:3e:aa:8b:7d:db:b8:8e:0c:83:8a:1e:
bd:c2:9a:93:a7:32:f0:03:c9:a0:6d:23:f6:81:1d:
9e:37:c2:6e:47:ea:31:ee:52:80:85:4b:ce:03:78:
f0:5a:9d:04:6d:8a:c9:d8:87:fc:72:86:51:0c:8a:
57:b8:4c:d6:21:1c:d7:98:e4:3f:46:3d:a9:ed:a4:
b9:94:39:61:f7:89:87:5f:82:ab:26:46:58:b0:56:
82:1c:c4:9a:bd:03:44:b1:38:51:3a:1f:e6:f7:12:
57:b6:2c:13:8c:83:ce:84:dd:3c:c3:7f:86:97:84:
bc:96:ea:a0:84:bc:f7:f7:2c:1d:34:4c:e9:46:d1:
3e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BA:FA:71:F9:4F:A0:A4:0B:D3:39:E6:50:03:71:E9:22:AE:36:82
X509v3 Authority Key Identifier:
keyid:9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:4c:e2:87:84:03:ef:fe:97:8f:df:03:f8:d2:c6:30:ae:e9:
fa:84:6b:9b:50:85:c1:c8:04:3d:df:b5:9b:01:5d:4e:aa:d3:
21:97:30:86:46:67:ab:9c:a3:45:b9:a8:fe:15:86:4d:df:7f:
e1:07:a0:31:4a:40:6f:14:c1:69:df:4a:6a:35:67:94:f5:d2:
3c:3e:33:b5:7e:54:db:6d:fa:c6:39:fa:85:48:fb:0c:a7:1a:
5a:08:a8:c9:e8:a0:e8:a6:1a:b7:fe:d2:0b:d5:77:6c:b1:23:
b2:22:be:ab:7a:e8:a8:ff:6b:19:20:1c:fe:98:9b:19:43:b6:
19:07:6e:ca:6f:fd:ad:a3:97:10:c6:c4:17:6f:29:23:68:1e:
27:4f:0f:be:10:a4:25:e1:c4:37:12:8e:65:ce:b3:f5:cc:8a:
3b:5b:82:17:eb:59:85:3c:5f:a2:64:77:3b:83:e1:66:1e:77:
d2:0d:68:4b:68:19:52:0d:bc:b8:29:8f:9b:c4:8c:e5:ba:d1:
3d:a5:05:5e:d0:03:e3:9f:20:18:58:98:8c:3e:aa:a3:18:ad:
81:d3:2a:7d:ea:cf:fe:5b:d8:b4:48:cb:e6:db:67:9b:b0:cb:
b8:84:ea:1b:1d:c4:c4:49:1e:4a:21:ec:fc:cf:6b:07:bb:71:
36:3a:5b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:20:56 2026 by rpki-client