Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
File: _nzo-_uEec-5drRDzDx84vcDq34.mft (raw, json)
Hash identifier: kT3nO7lXRFj77h41G9TqINMLl/CklKHSbeNtF1MCJYo=
Subject key identifier: 37:18:B4:8F:43:E7:C9:6E:4C:17:76:0E:50:2C:9C:3B:BF:2A:E1:4F
Authority key identifier: FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E
Certificate issuer: /CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e
Certificate serial: 01A0CFDB79D22300283E9F48622FBB5B2B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
Manifest number: 114D
Signing time: Wed 23 Sep 2026 20:01:02 +0000
Manifest this update: Wed 23 Sep 2026 20:01:02 +0000
Manifest next update: Thu 24 Sep 2026 20:01:02 +0000
Files and hashes: 1: DT2BesH620-Z5EInWh_qBAeAhFI.roa (hash: yWOOPu9qJtmGuaZJp8ftjrUIR8JbYQlWhmppICknRhE=)
2: _nzo-_uEec-5drRDzDx84vcDq34.crl (hash: lpu/wm4ZFfWcxbxQyo6ezX+yofpQEERhY8D6Ifj2Qzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:db:79:d2:23:00:28:3e:9f:48:62:2f:bb:5b:2b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e
Validity
Not Before: Sep 23 20:01:02 2026 GMT
Not After : Sep 24 20:01:02 2026 GMT
Subject: CN=3718b48f43e7c96e4c17760e502c9c3bbf2ae14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:11:f5:0c:5e:1d:c8:29:45:b5:28:38:b5:67:
f2:0b:e3:93:26:8b:4b:65:e4:d2:9f:c4:9b:53:01:
b2:eb:06:11:1e:14:36:a5:02:a2:a6:a9:d2:25:56:
7e:30:fb:5f:4e:9c:60:0d:a7:d1:6d:11:b2:b4:b6:
ff:a3:80:25:fb:37:ad:dd:82:33:43:0c:50:ba:5e:
1b:27:9d:71:1b:aa:c3:ef:56:5f:57:09:b4:83:41:
dd:ef:e4:45:c6:6c:5e:f6:5e:43:98:68:a3:2d:d8:
f6:a3:ab:60:90:0d:6c:28:1e:e1:4f:64:7c:93:8b:
dd:bf:f4:74:94:49:c3:70:b6:38:be:1f:ff:18:4b:
87:c9:ba:4f:c7:a5:cf:ec:2b:0b:d4:95:d6:b9:fc:
2e:6f:66:80:53:b0:0b:5a:64:44:f7:36:90:32:c5:
f5:63:db:49:67:d2:8d:8d:2e:c5:d5:0e:5d:08:a7:
ab:ba:c4:8e:4f:a0:a7:12:69:aa:e5:2c:76:8a:94:
f7:1c:53:d2:39:bb:21:24:a4:ca:e4:b2:ba:e1:e6:
7b:33:0a:30:94:cd:10:63:99:cf:46:ee:cd:1d:83:
50:c8:55:6e:ff:92:b8:41:43:d7:5f:51:02:14:17:
7e:3b:23:05:3c:00:36:72:3e:55:ee:f8:9b:b9:10:
e0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:18:B4:8F:43:E7:C9:6E:4C:17:76:0E:50:2C:9C:3B:BF:2A:E1:4F
X509v3 Authority Key Identifier:
keyid:FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:cd:d8:1e:5f:79:38:cc:cf:fb:cc:03:86:93:82:c0:90:39:
37:e4:fb:16:aa:46:f5:39:17:da:e7:8d:ad:be:3d:d6:d4:da:
38:84:0b:96:09:e0:2e:96:cd:b7:fb:70:a2:a9:e2:f1:71:bd:
8e:ee:38:ff:b1:57:02:8b:cb:5d:6e:9c:df:5c:2d:fe:4b:02:
e0:83:38:1c:f0:66:ea:3c:12:e0:b5:92:e3:4f:5d:a1:0c:fc:
3e:9b:e6:02:9c:1f:47:81:4d:eb:cd:3f:01:57:4b:08:6a:a5:
1a:ac:7d:63:b3:bd:35:2f:e6:8b:5b:95:cf:98:d9:99:13:fc:
3b:e0:0e:23:b0:1b:ef:8e:09:68:df:fb:e2:66:a7:97:01:99:
a6:c0:8d:31:7c:61:75:71:20:75:70:90:05:a4:31:5b:38:d5:
ed:c4:63:6a:c4:54:f3:0c:e6:be:7f:bb:d4:a5:f6:5a:a8:c1:
1a:bb:06:26:21:41:d3:34:6e:b7:58:35:69:fd:cb:f0:3a:dc:
ec:9f:48:d1:e3:fb:9b:50:ea:ca:f8:b3:97:f6:7f:be:6a:a7:
6a:e3:fe:9a:34:f6:8d:82:dc:79:24:a3:33:78:13:72:45:04:
12:40:e7:50:95:dc:3e:7a:21:75:b3:27:0e:f4:f1:ba:77:d6:
96:8e:c0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:08:40 2026 by rpki-client