Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
File: nz7CHhDzZG5NwOI_X37ERQFWDeM.mft (raw, json)
Hash identifier: 7ypgU6/iPcaknQDvv1cIkpun24ACmLaUo33zDYGMf1k=
Subject key identifier: 12:D0:6B:F1:EE:28:5C:E6:00:D6:38:C9:22:4F:70:98:F5:9F:15:7A
Authority key identifier: 9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
Certificate issuer: /CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Certificate serial: 019E2023B19927DD8691A11218096C7E528F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
Manifest number: 08D7
Signing time: Wed 13 May 2026 07:01:10 +0000
Manifest this update: Wed 13 May 2026 07:01:10 +0000
Manifest next update: Thu 14 May 2026 07:01:10 +0000
Files and hashes: 1: mEsmgRBnEAKsLjbsbGbasW4ifmc.roa (hash: fHfHZKhEOntqAJkVOSaBpABbPFKRSk/D0x4+wwKsw0c=)
2: nUE0Oddv4YkeQI7iXvreM5ZLtJg.roa (hash: e35k/hWFhNoP6OXE0gOQ2vpFvd0hf+wf6J6udXQDs0w=)
3: nz7CHhDzZG5NwOI_X37ERQFWDeM.crl (hash: ZAYOEwD7vthhHbAX7r6Ii0JHqf+GaBUF9WtKu1syszk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:b1:99:27:dd:86:91:a1:12:18:09:6c:7e:52:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Validity
Not Before: May 13 07:01:10 2026 GMT
Not After : May 14 07:01:10 2026 GMT
Subject: CN=12d06bf1ee285ce600d638c9224f7098f59f157a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f6:2e:35:49:d6:64:98:62:97:4b:21:0c:e8:
f5:f7:f5:8e:f8:b2:d7:63:53:e1:a6:af:6e:35:33:
14:3e:26:2a:e6:e2:3c:54:f8:2f:fa:97:d6:2b:5f:
a1:99:88:ce:63:43:a2:05:69:d6:28:7b:3c:ad:35:
c9:bc:75:07:bf:03:76:7d:a9:23:cd:37:73:b7:a8:
61:ba:a2:d7:f2:54:eb:f1:7a:df:e3:3f:63:9b:e2:
54:df:a1:22:9d:7f:c7:6e:cb:9d:c4:a9:0d:80:35:
93:99:4a:cf:43:2c:07:2d:f0:cb:95:ae:0d:70:39:
f3:1e:0d:77:b4:69:1d:25:76:0b:c5:f5:b0:5b:8b:
39:20:b0:06:e7:7b:89:41:dc:d1:82:5f:5f:5d:a9:
32:30:7f:46:29:39:08:7c:cd:da:11:43:13:8d:6a:
e5:3d:9f:ba:2c:19:56:bc:d1:7e:1c:45:7b:04:ae:
ed:7d:cf:c8:e9:27:00:ac:0e:87:6b:b8:79:f7:ee:
b4:98:67:b5:11:ff:64:e6:aa:04:16:2b:f8:d2:5d:
47:6c:ce:c4:42:15:d4:0b:98:59:3b:f7:53:2c:c7:
05:e2:1a:ef:01:71:5c:39:0a:3b:5e:b5:f0:b6:f6:
48:9f:0b:43:8d:0d:26:c2:10:f7:28:ef:9e:79:60:
2b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D0:6B:F1:EE:28:5C:E6:00:D6:38:C9:22:4F:70:98:F5:9F:15:7A
X509v3 Authority Key Identifier:
keyid:9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f4:eb:3d:3d:84:20:e6:48:48:3a:36:1b:fb:1e:f2:04:ca:
07:10:be:7c:1a:8c:c9:c3:91:b1:fb:54:41:79:48:75:32:7f:
d3:57:c4:4b:2f:ea:13:a5:f3:30:9a:76:90:1d:32:ad:b9:45:
48:1e:fb:78:80:db:cd:4b:26:db:d2:68:03:39:69:de:d6:5e:
2f:e7:cc:3e:62:ca:9d:16:c9:ef:6f:b1:07:d4:43:11:0b:4c:
e0:54:75:6b:8d:fc:9a:91:79:80:ff:cb:62:37:fd:c5:e2:34:
7e:46:f9:bd:bd:10:39:f1:f7:92:6a:d9:10:6f:5c:93:f3:ab:
29:a0:ca:4f:ca:6a:ae:23:0c:76:e5:8b:f7:37:fc:9e:65:ae:
aa:c6:82:ed:e2:cd:37:13:91:6b:37:3c:60:c2:1b:d0:f4:4f:
ac:7b:0b:cf:72:54:d7:77:7f:cc:b3:48:8c:26:91:c8:4e:57:
57:d1:ee:ac:f3:6e:4f:e6:77:4e:1c:4f:5a:ce:d0:1f:c1:e2:
32:6a:7a:5a:57:57:6f:36:45:da:9f:89:18:67:51:a7:dc:0e:
eb:a4:aa:9a:ab:9f:1b:55:57:c3:93:0e:05:c0:6c:e7:a6:f5:
9d:3f:89:2d:22:97:68:c7:d3:b2:80:40:ab:10:02:33:ed:77:
fe:1a:70:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:20:18 2026 by rpki-client