Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
File: nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft (raw, json)
Hash identifier: Pq51wDIelVxxFOKukTVsm5ez9tSvdT9dsXk/741MSlU=
Subject key identifier: BD:97:9F:56:00:ED:09:C3:B4:E6:5A:C9:A6:FB:AD:A4:CC:5F:B1:42
Authority key identifier: 9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72
Certificate issuer: /CN=9f3640da7f1bc23ed4599f84a0853c8399f35d72
Certificate serial: 019D2583C792E0D88834E30011DB78D195C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
Manifest number: 09CD
Signing time: Wed 25 Mar 2026 15:01:26 +0000
Manifest this update: Wed 25 Mar 2026 15:01:26 +0000
Manifest next update: Thu 26 Mar 2026 15:01:26 +0000
Files and hashes: 1: NIYrG37trab2P9JVD0eE6NO-0Dk.roa (hash: tSXqLOKf3W/YzIEC+Y4rvZIML+H/1ngQ/p6IkWH1HL8=)
2: nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl (hash: mbyn2fruiMClunwOZngBliVu7bABmUe01p6ciM8n53Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:c7:92:e0:d8:88:34:e3:00:11:db:78:d1:95:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3640da7f1bc23ed4599f84a0853c8399f35d72
Validity
Not Before: Mar 25 15:01:26 2026 GMT
Not After : Mar 26 15:01:26 2026 GMT
Subject: CN=bd979f5600ed09c3b4e65ac9a6fbada4cc5fb142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:da:74:e8:4d:ef:97:95:5c:ce:4c:4f:85:1e:
db:0b:6a:f7:cd:ad:30:0b:4d:d3:37:3c:ca:b5:0d:
75:b1:51:5e:61:55:8d:8e:29:ce:e9:78:7a:fa:ff:
f3:6c:5d:65:f3:b2:61:c3:81:10:a2:fb:cf:05:32:
b0:c7:8c:cc:c5:99:b5:e1:5b:c3:90:2c:4b:ce:d7:
33:c9:27:2d:51:ee:31:21:9d:6d:6c:14:f6:03:10:
1f:ef:20:12:57:39:ce:90:93:be:c2:0e:83:d1:bb:
9a:83:3a:ea:50:64:51:27:ab:63:d7:b8:c1:f9:a6:
61:5b:aa:7f:05:d5:b9:a2:d3:3b:bf:89:3b:61:6e:
e5:bf:07:7d:ec:20:7d:d7:37:16:05:e5:db:50:67:
f2:6a:b9:ec:bb:11:66:ac:89:b8:3e:6b:8e:8e:ac:
21:89:74:8e:26:46:fc:14:e4:fe:60:5c:8d:6c:45:
01:a7:47:a6:27:47:32:93:de:81:1e:e3:fc:1b:a4:
81:b7:b4:50:8c:93:5c:d1:b4:01:f2:43:d7:0d:72:
c0:53:3f:c4:4e:54:93:79:47:89:e7:68:46:53:41:
90:5e:c3:c9:75:a1:c6:8d:ed:9a:bc:ff:14:49:14:
57:0c:b9:97:88:42:cf:55:86:08:17:0b:9b:f0:90:
dd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:97:9F:56:00:ED:09:C3:B4:E6:5A:C9:A6:FB:AD:A4:CC:5F:B1:42
X509v3 Authority Key Identifier:
keyid:9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:54:81:ac:10:4d:d3:b2:61:cf:e9:d3:d8:9f:bc:f7:36:04:
c9:8a:12:c7:35:66:5a:7a:2a:ea:9d:ca:47:6f:64:cc:7a:61:
f8:e9:dd:a8:4a:8e:e0:93:a3:96:a6:2a:88:37:ff:d2:1a:31:
6f:16:9d:6d:9e:a9:67:e3:7a:4f:cf:12:09:f6:48:dd:84:c7:
ec:62:fd:3e:96:5d:67:c0:1c:79:d2:ca:b3:6a:67:2d:2d:ef:
c2:65:a9:08:47:6e:87:cc:43:b8:73:36:6f:17:5b:4d:d9:83:
23:41:d7:06:8c:94:c4:b5:d5:40:c3:09:d6:43:73:eb:52:85:
44:2c:fb:37:69:c4:9b:bd:b8:5b:08:75:fd:78:f1:24:98:e0:
c3:02:7f:37:9e:41:fa:02:46:1a:e1:24:67:4b:8c:38:0a:e4:
de:7b:21:9c:7b:bc:1e:4e:6c:8b:6f:c2:47:30:0f:a5:f1:90:
b0:1a:30:33:6e:40:b2:8f:2d:c7:01:6b:a0:5b:1b:50:82:71:
56:fc:c9:b2:15:6d:3c:01:21:29:60:13:93:12:1d:8e:94:c0:
6e:e4:9d:21:3c:d4:c1:18:ee:d0:e5:58:73:5b:7b:5d:15:22:
49:16:55:cb:6f:9c:2b:78:a2:05:ae:99:72:20:89:18:4d:fd:
eb:2b:72:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:28 2026 by rpki-client