Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
File: nz7CHhDzZG5NwOI_X37ERQFWDeM.mft (raw, json)
Hash identifier: L8cqxv1R/LR8AfjueUEo5XsReXpKUZo6TOmaqpVDlLk=
Subject key identifier: DF:62:27:29:6A:F9:DB:5B:9C:8A:47:EF:CE:EF:01:F8:8F:14:35:4A
Authority key identifier: 9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
Certificate issuer: /CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Certificate serial: 01A1231CCF1E157267A1B34188B1C311D4DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
Manifest number: 0A6B
Signing time: Sat 10 Oct 2026 00:00:52 +0000
Manifest this update: Sat 10 Oct 2026 00:00:52 +0000
Manifest next update: Sun 11 Oct 2026 00:00:52 +0000
Files and hashes: 1: nz7CHhDzZG5NwOI_X37ERQFWDeM.crl (hash: 86AE2NGK1pFiljGIeov7KDaj0TRCn/Js97DuSghgKV4=)
2: ox7NDoqott72gSfdVeIEy83lJT4.roa (hash: aCH7aTLXQZemfAdMz4NruUNoSoIedqNIVC7c6NRNeEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:1c:cf:1e:15:72:67:a1:b3:41:88:b1:c3:11:d4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Validity
Not Before: Oct 10 00:00:52 2026 GMT
Not After : Oct 11 00:00:52 2026 GMT
Subject: CN=df6227296af9db5b9c8a47efceef01f88f14354a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4b:7f:cf:22:f4:4f:a0:91:a4:6d:c3:e6:d7:
f8:2a:09:a8:46:16:13:2c:c0:3a:82:81:9e:e8:42:
aa:1a:0d:00:e8:33:92:37:36:e2:41:17:2f:95:2f:
5c:ec:54:c4:ad:1a:30:bc:92:ec:b8:8e:88:a3:0a:
b5:c1:da:7e:49:b3:2c:29:2e:48:d1:32:b4:57:1e:
7f:1e:ac:d7:da:d3:49:f9:f0:d9:3b:dc:41:f9:41:
06:ed:f9:36:06:db:a8:32:7f:07:2e:a1:8b:28:b6:
a7:ec:55:30:9d:65:c8:07:d5:a2:1b:e9:dd:74:31:
fc:42:a5:1a:0f:f1:6e:80:4a:c4:92:7a:e2:ec:8c:
95:79:bb:4d:73:ac:d4:3e:98:22:ae:24:a9:d6:3a:
43:64:3e:1d:7c:42:02:90:cd:d1:f7:4f:dc:8e:1d:
24:82:6c:6a:92:62:03:6f:0c:12:e5:5e:da:2a:35:
89:36:ee:ca:15:54:6a:50:92:28:ff:a8:07:2c:09:
db:74:7b:13:49:9f:7c:82:2b:85:ac:af:cc:47:c4:
b3:69:18:3a:71:c5:db:fa:2c:5d:bf:d8:9f:15:2e:
e6:1e:eb:ae:77:3d:55:23:cd:a9:41:f3:96:74:fe:
31:ec:cf:c4:c6:46:f7:aa:ec:ed:6e:ec:8c:86:e6:
91:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:62:27:29:6A:F9:DB:5B:9C:8A:47:EF:CE:EF:01:F8:8F:14:35:4A
X509v3 Authority Key Identifier:
keyid:9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:82:e2:22:02:21:c7:95:2d:44:00:52:a8:3e:88:56:d3:5a:
2a:89:0d:b5:08:57:ef:e4:9f:b5:34:2f:b4:be:b4:3c:a2:8f:
52:92:eb:58:fa:95:b8:74:a7:28:4f:1a:88:b2:86:eb:77:b3:
e6:72:0d:2a:84:02:d6:d8:7f:7a:32:2f:20:12:1a:6c:b1:79:
d8:47:4d:40:33:f0:8d:b0:ba:cb:0c:47:e1:c9:4d:c3:f2:1f:
67:1e:c6:fb:36:b1:41:44:46:c3:66:f4:17:52:1b:e0:df:28:
4d:16:a6:b5:84:4a:fa:93:9b:23:03:f2:6c:19:85:4e:fc:06:
4d:74:81:f8:19:92:b6:60:91:a6:d0:0b:d4:b6:d5:4b:70:b8:
1f:6d:72:5a:bc:ff:31:a4:8d:d6:dd:d4:42:28:40:6b:97:ca:
8e:95:9e:0d:6c:13:d0:ac:8a:86:bc:9f:33:a0:79:99:35:8d:
7a:13:30:35:86:28:28:39:59:22:e7:58:b0:7e:c7:78:9e:d5:
71:43:df:d7:db:91:6a:9d:61:da:93:0e:53:cc:d2:55:d0:17:
52:59:50:0c:f4:9c:c3:94:2a:d8:b0:af:bd:56:af:e0:d4:fb:
d3:b4:aa:7b:2e:4d:54:a5:75:d7:08:40:32:b0:99:ca:25:b3:
59:37:30:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:31:59 2026 by rpki-client