Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
File: _nzo-_uEec-5drRDzDx84vcDq34.mft (raw, json)
Hash identifier: JT+rD5sH8QkxMJGP0zryASvKoqo/hzWo+1KrVWJ0HT4=
Subject key identifier: 1F:83:90:9D:19:12:F1:A9:8E:23:7E:C8:35:FD:23:D7:B4:78:A7:FF
Authority key identifier: FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E
Certificate issuer: /CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e
Certificate serial: 019D29294CAA4E9B8A0B02962BE499D96F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
Manifest number: 0F69
Signing time: Thu 26 Mar 2026 08:01:05 +0000
Manifest this update: Thu 26 Mar 2026 08:01:05 +0000
Manifest next update: Fri 27 Mar 2026 08:01:05 +0000
Files and hashes: 1: DT2BesH620-Z5EInWh_qBAeAhFI.roa (hash: yWOOPu9qJtmGuaZJp8ftjrUIR8JbYQlWhmppICknRhE=)
2: _nzo-_uEec-5drRDzDx84vcDq34.crl (hash: 4z7M3Z1jJOvLbwu7oesVm1hy6aPrnn8m6dZGtOr7qA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:4c:aa:4e:9b:8a:0b:02:96:2b:e4:99:d9:6f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e
Validity
Not Before: Mar 26 08:01:05 2026 GMT
Not After : Mar 27 08:01:05 2026 GMT
Subject: CN=1f83909d1912f1a98e237ec835fd23d7b478a7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2a:91:17:e1:7d:be:48:6f:13:ce:70:f3:0b:
29:1b:0e:4f:06:f8:24:be:59:cc:ee:85:9d:29:64:
b8:ef:e9:68:15:49:29:4f:5b:52:29:ff:bb:ef:fe:
9d:48:aa:42:91:51:4c:ed:ec:30:52:7b:cd:81:fe:
55:09:ae:96:e1:e7:49:e7:d8:b6:9f:05:9e:0f:d1:
00:98:a4:4b:20:95:eb:db:89:b2:f3:23:8a:2c:02:
73:db:77:c4:fd:6a:7d:77:8f:72:38:b5:27:38:56:
75:54:2e:9a:70:20:73:c3:36:df:54:1a:fc:3b:d8:
a3:88:66:1b:6f:fd:14:28:e1:ec:c7:f4:0c:d2:27:
dc:71:94:79:7e:fa:5c:a0:05:31:84:7b:ae:6a:ae:
b5:c9:a3:ce:87:90:bc:73:8e:d2:b9:46:12:6b:84:
d3:dc:bd:79:fc:64:73:9b:5f:60:fd:38:09:b9:9c:
25:27:83:db:b1:c6:bf:0d:8e:7e:b4:dc:ba:77:a9:
97:9d:a7:79:af:58:52:0f:c7:01:a1:a9:a6:77:7a:
ff:41:69:9d:d8:60:f5:67:28:41:69:11:c7:24:a7:
a2:7b:72:5e:32:af:cd:71:0c:c5:02:65:4d:b0:c6:
57:e4:98:21:23:f4:1e:9a:82:a5:d5:33:ce:b5:d8:
84:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:83:90:9D:19:12:F1:A9:8E:23:7E:C8:35:FD:23:D7:B4:78:A7:FF
X509v3 Authority Key Identifier:
keyid:FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b5:05:8f:2b:66:b2:98:7b:92:58:18:5f:7d:be:e9:a0:fa:
d8:32:51:98:ab:65:bc:a4:b4:8b:91:11:60:72:72:93:a0:a6:
fd:f6:d9:52:cd:cb:46:6d:c5:49:73:36:7c:71:f9:ec:96:38:
a1:f7:15:9f:e4:53:19:25:da:ce:d9:18:49:9e:7d:c8:58:7d:
6b:65:bc:aa:c0:18:3c:69:f5:81:ed:cb:31:c2:25:04:c5:e6:
c3:46:73:e9:83:bf:17:22:09:92:c9:26:41:57:88:c0:50:8e:
e3:b5:4d:82:62:cb:e9:c5:2b:67:f1:c6:da:ab:6c:6a:51:f1:
99:b3:58:6f:34:e5:b4:92:6b:89:3e:98:fe:bf:12:e1:d3:37:
99:79:a5:ce:6b:51:60:62:a6:6c:5d:ea:9f:19:a6:6c:1e:65:
c0:ea:24:a4:95:ac:6a:e2:14:40:46:02:d5:cd:97:74:35:9d:
71:4f:a3:cc:10:5c:88:c5:e7:10:fc:6b:d7:6c:3f:74:27:74:
e9:fd:d3:11:34:fc:d5:55:9c:16:e8:b4:61:66:6f:a8:77:ed:
59:3e:01:80:bb:30:04:26:cb:43:bf:33:e9:48:ec:94:23:4c:
f7:78:01:a6:45:8c:2e:b5:38:03:8a:04:ed:6d:58:a2:94:57:
aa:ee:86:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:53 2026 by rpki-client