Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
File: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft (raw, json)
Hash identifier: XqWu+cZF8Lo3WobmITL4zgEO79gQ6o+10clmYv/d9CM=
Subject key identifier: 46:5F:52:F5:7E:6A:FD:4E:6F:43:3B:03:C1:23:D5:E5:51:C4:39:B9
Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Certificate serial: 019F91DA6CBD6E9AB618CF1EC96E145B96DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
Manifest number: 19D4
Signing time: Fri 24 Jul 2026 02:00:38 +0000
Manifest this update: Fri 24 Jul 2026 02:00:38 +0000
Manifest next update: Sat 25 Jul 2026 02:00:38 +0000
Files and hashes: 1: A3pW4f2Q0QCXW1ITF5-7J2AGJB0.roa (hash: 3GwoRHIKkL+M5kmrRcgNaVleZoRm14fgCgWnCbfdVU4=)
2: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl (hash: 7/1WkkZFV3IxkL+ijqptj4be5NFNpg3Q+T3TLdtORG8=)
3: YsmjC0C0fqf9CY4wLhiPtFlxZEw.roa (hash: N0lxxgZ/gBnqbm0d/xg3YbjefGLIyBpN9+tqlNMsVRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:6c:bd:6e:9a:b6:18:cf:1e:c9:6e:14:5b:96:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Validity
Not Before: Jul 24 02:00:38 2026 GMT
Not After : Jul 25 02:00:38 2026 GMT
Subject: CN=465f52f57e6afd4e6f433b03c123d5e551c439b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f6:3a:fe:ca:a1:6a:2e:4a:70:81:36:e9:88:
b9:62:82:51:ae:b0:a7:c0:83:56:ab:23:1c:05:a6:
51:f8:a9:17:73:4d:b3:dc:4c:aa:e6:5a:8b:f7:97:
42:c0:9a:00:b0:be:6f:c4:bc:1a:c1:b3:65:35:fe:
a9:a4:ed:39:68:9a:76:4c:ee:fb:a3:fc:21:bd:f4:
d6:7c:ac:1a:f5:d9:0f:6b:fd:5a:93:47:d9:40:af:
43:db:6c:09:ce:ee:a6:0e:b7:f8:52:13:1e:ba:c6:
64:82:74:12:82:bb:7f:ae:ba:5f:0f:69:70:b1:ff:
24:d0:eb:6c:50:f2:e7:9c:a3:72:66:c3:a2:ef:53:
3f:e1:9c:99:17:12:5b:ef:60:56:56:fc:e7:1f:40:
be:b4:42:9e:fe:b3:c8:9a:95:7c:dd:c3:85:ff:cc:
57:0f:05:4d:67:6e:ac:5b:29:0b:3c:0d:e3:bd:de:
a8:1c:30:bb:5e:aa:8b:23:88:a4:43:b4:41:25:9d:
10:c9:e4:d0:b9:7c:d0:97:8e:0c:c7:9e:5b:df:6a:
2f:a7:7e:38:91:ca:a0:8f:ed:62:11:8c:58:47:d2:
a7:c8:82:3f:8b:3f:0b:0e:33:76:39:4a:1f:6f:97:
40:fb:ab:df:ca:7c:e0:7a:be:cf:16:96:ed:9a:ed:
53:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5F:52:F5:7E:6A:FD:4E:6F:43:3B:03:C1:23:D5:E5:51:C4:39:B9
X509v3 Authority Key Identifier:
keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a7:07:3b:f6:04:57:68:00:8e:6c:70:b7:cf:ed:c0:b9:dd:
c4:01:17:b4:e1:3c:5b:6d:37:ae:99:17:42:d6:9e:30:09:e9:
1f:95:48:bf:70:c7:fa:66:50:13:86:e1:3a:a4:57:93:b3:45:
f5:e1:27:31:6d:1a:16:d7:a1:70:31:02:99:2a:76:99:cb:4b:
88:73:a1:ae:15:e2:1b:40:fc:57:85:47:ae:ce:f2:8d:d9:94:
0f:67:6a:e3:76:c7:9b:41:23:57:8b:38:0a:13:87:cc:5f:58:
94:d1:56:5e:5d:9a:4b:9c:29:98:37:fa:68:11:89:59:64:ab:
36:4e:7a:b0:e0:64:75:2e:45:59:ff:c5:9d:31:27:3e:1f:11:
2c:49:f5:40:26:b8:8b:69:cc:e8:22:0e:77:de:24:06:19:2c:
f7:07:7f:e3:a5:b4:7a:2a:c2:4e:6b:eb:4d:ea:3c:4e:67:77:
5a:1c:70:b2:7d:9e:6f:8e:05:48:30:f1:af:e5:8b:23:5f:6a:
94:24:51:9b:0d:36:7b:4e:72:ed:9b:d0:c1:73:cd:ce:12:cc:
6b:c6:63:2d:a4:9a:57:25:2a:cb:e7:4c:ee:f5:5b:96:de:3a:
53:e6:04:0b:9c:2b:f7:a8:2c:32:d8:4f:38:fc:75:6f:d7:5c:
e6:49:66:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:14:53 2026 by rpki-client