Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
File: nz7CHhDzZG5NwOI_X37ERQFWDeM.mft (raw, json)
Hash identifier: qUt94C2tRe2UHt7/SmqxRZ3M+zQ310sEWXb6uTg8F2U=
Subject key identifier: 64:49:40:67:88:9A:DF:E3:69:38:AE:C7:9A:7B:BE:CA:54:14:19:1D
Authority key identifier: 9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
Certificate issuer: /CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Certificate serial: 019D2A727C0BDDF5390F0AB5EF6D4C604256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
Manifest number: 0857
Signing time: Thu 26 Mar 2026 14:00:39 +0000
Manifest this update: Thu 26 Mar 2026 14:00:39 +0000
Manifest next update: Fri 27 Mar 2026 14:00:39 +0000
Files and hashes: 1: jtZzVNfgkv6O64KSDJRhp5x3Oak.roa (hash: E3E7x7uNNHcpFaFkOaw9Dbo4xIewCp3qY95ojh1RGaQ=)
2: mEsmgRBnEAKsLjbsbGbasW4ifmc.roa (hash: fHfHZKhEOntqAJkVOSaBpABbPFKRSk/D0x4+wwKsw0c=)
3: nz7CHhDzZG5NwOI_X37ERQFWDeM.crl (hash: 250em433P8W+tFaMxfHSa7ZCNZi3jpqQoqQ7mKyAFi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:7c:0b:dd:f5:39:0f:0a:b5:ef:6d:4c:60:42:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Validity
Not Before: Mar 26 14:00:39 2026 GMT
Not After : Mar 27 14:00:39 2026 GMT
Subject: CN=64494067889adfe36938aec79a7bbeca5414191d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f5:98:f5:13:55:8e:66:2c:b7:a1:0b:df:d5:
09:25:7c:be:01:21:18:c8:aa:67:12:b9:28:54:e5:
6e:8b:db:cf:b3:7d:e0:f1:83:f5:81:ec:89:ee:8a:
b5:61:fb:f5:b4:83:eb:8d:9f:45:1b:ef:a5:0d:94:
dc:c3:ad:db:6f:af:9d:5c:cc:a6:c9:59:3a:6e:f5:
5e:1a:a1:61:57:17:70:93:8e:30:b1:17:67:96:a0:
ba:28:05:83:bf:51:39:ab:75:90:b6:12:a4:a1:96:
a7:44:28:cb:38:a6:26:ee:dc:7b:85:e6:f8:34:03:
d9:7a:cf:bb:8b:b9:34:3b:db:99:71:75:bc:0e:ea:
c5:8f:fe:8c:12:04:63:e6:42:a9:5c:53:12:a6:05:
2a:a1:58:73:c4:2c:4a:b8:bd:c9:e0:1a:00:71:c4:
a8:51:92:03:91:fc:77:ea:9f:d0:84:bd:99:b3:09:
3c:29:4f:d1:b3:31:62:76:4a:22:ef:89:97:ff:22:
3c:1c:42:dd:49:e9:a1:7c:2e:9f:64:50:7b:c1:af:
52:f9:d9:f6:f9:4f:50:22:8e:fe:33:f0:f8:b6:b4:
7b:a0:36:39:48:ad:9a:08:ed:62:44:58:50:c8:70:
98:66:eb:28:1b:af:a6:53:1c:21:5c:31:fa:8c:d3:
85:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:49:40:67:88:9A:DF:E3:69:38:AE:C7:9A:7B:BE:CA:54:14:19:1D
X509v3 Authority Key Identifier:
keyid:9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:98:61:c3:48:9f:74:fc:43:a1:9f:fd:7e:6e:82:06:d1:0a:
f6:b7:e6:3c:ac:78:3b:2d:82:4e:7a:0d:1f:18:96:8b:f5:83:
36:cb:f8:8c:e3:36:f4:27:1b:8a:f2:13:6a:34:fc:ae:c0:35:
cf:53:6e:42:81:27:49:87:f0:ed:ff:9b:52:e4:06:9e:a1:b9:
d2:f4:9d:2c:42:70:96:38:38:50:72:6b:19:8d:95:08:1f:ee:
db:b4:f5:73:f2:70:29:8e:0b:ff:ef:43:be:59:ee:80:98:a5:
ca:6f:67:95:e2:41:3d:b1:7e:40:eb:2e:28:a3:3c:1e:f1:cf:
f4:69:fc:a0:b0:8d:92:65:de:14:81:ff:0b:57:01:3d:11:09:
c6:85:28:27:e9:44:42:a6:34:87:e0:11:dd:d4:ba:3b:5e:bc:
c3:4c:89:38:b1:32:9b:6d:62:0d:38:54:1f:b7:aa:d4:6d:9c:
9c:9c:a7:2b:08:95:a0:ba:7f:28:b4:42:8d:f1:42:8e:0e:df:
62:2f:20:eb:93:20:01:6d:a7:40:ca:fb:0f:bd:f1:6c:d9:34:
ed:7a:43:43:64:d6:45:f2:4b:56:b4:dd:b5:2c:d5:60:9b:04:
bb:5e:2d:45:3f:a2:ca:74:00:9e:5f:3d:6d:73:0e:30:15:8e:
72:6b:08:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qcnwL3fU5Dwq1721MYEJWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmM2VjMjFlMTBmMzY0NmU0ZGMwZTIzZjVmN2VjNDQ1MDE1
NjBkZTMwHhcNMjYwMzI2MTQwMDM5WhcNMjYwMzI3MTQwMDM5WjAzMTEwLwYDVQQD
Eyg2NDQ5NDA2Nzg4OWFkZmUzNjkzOGFlYzc5YTdiYmVjYTU0MTQxOTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfWY9RNVjmYst6EL39UJJXy+ASEY
yKpnErkoVOVui9vPs33g8YP1geyJ7oq1Yfv1tIPrjZ9FG++lDZTcw63bb6+dXMym
yVk6bvVeGqFhVxdwk44wsRdnlqC6KAWDv1E5q3WQthKkoZanRCjLOKYm7tx7heb4
NAPZes+7i7k0O9uZcXW8DurFj/6MEgRj5kKpXFMSpgUqoVhzxCxKuL3J4BoAccSo
UZIDkfx36p/QhL2Zswk8KU/RszFidkoi74mX/yI8HELdSemhfC6fZFB7wa9S+dn2
+U9QIo7+M/D4trR7oDY5SK2aCO1iRFhQyHCYZusoG6+mUxwhXDH6jNOFyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRJQGeImt/jaTiux5p7vspUFBkdMB8GA1UdIwQY
MBaAFJ8+wh4Q82RuTcDiP19+xEUBVg3jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbno3Q0hoRHpaRzVOd09JX1gzN0VSUUZXRGVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS82YmFmZTktODc4Yi00NmZkLWEzMDUt
N2JhMjVkNTU5NWZhLzEvbno3Q0hoRHpaRzVOd09JX1gzN0VSUUZXRGVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS82YmFmZTktODc4Yi00NmZkLWEzMDUtN2JhMjVkNTU5NWZh
LzEvbno3Q0hoRHpaRzVOd09JX1gzN0VSUUZXRGVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfZhhw0if
dPxDoZ/9fm6CBtEK9rfmPKx4Oy2CTnoNHxiWi/WDNsv4jOM29CcbivITajT8rsA1
z1NuQoEnSYfw7f+bUuQGnqG50vSdLEJwljg4UHJrGY2VCB/u27T1c/JwKY4L/+9D
vlnugJilym9nleJBPbF+QOsuKKM8HvHP9Gn8oLCNkmXeFIH/C1cBPREJxoUoJ+lE
QqY0h+AR3dS6O168w0yJOLEym21iDThUH7eq1G2cnJynKwiVoLp/KLRCjfFCjg7f
Yi8g65MgAW2nQMr7D73xbNk07XpDQ2TWRfJLVrTdtSzVYJsEu14tRT+iynQAnl89
bXMOMBWOcmsIwA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:37:54 2026 by rpki-client