Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
File: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft (raw, json)
Hash identifier: hYqWHj2uDRPGdcps4/wovdIi/htuImKOsoBeUqh/pSA=
Subject key identifier: 80:AE:12:6A:02:FB:AC:2D:2C:FE:20:08:96:9C:9C:DB:D6:CC:55:5A
Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Certificate serial: 019D2AA9E2462CBC5D1E0E0BA1BE19B5E21F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
Manifest number: 1895
Signing time: Thu 26 Mar 2026 15:01:09 +0000
Manifest this update: Thu 26 Mar 2026 15:01:09 +0000
Manifest next update: Fri 27 Mar 2026 15:01:09 +0000
Files and hashes: 1: 07kKKUMgBwNlGH8ItBg5huXyjBo.roa (hash: 0Db0rW3HyxMoZLKg3qDXyoGcyEgSvoFlGL2izdT+lqA=)
2: A3pW4f2Q0QCXW1ITF5-7J2AGJB0.roa (hash: 3GwoRHIKkL+M5kmrRcgNaVleZoRm14fgCgWnCbfdVU4=)
3: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl (hash: f6tMFKEBbyhiWC5uNaXGv5p2vmi+vk1qc04AFlhJ/Xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:e2:46:2c:bc:5d:1e:0e:0b:a1:be:19:b5:e2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Validity
Not Before: Mar 26 15:01:09 2026 GMT
Not After : Mar 27 15:01:09 2026 GMT
Subject: CN=80ae126a02fbac2d2cfe2008969c9cdbd6cc555a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fa:ef:f2:86:c0:33:32:41:3e:19:b9:3c:80:
9b:6c:fd:49:6d:3c:75:6c:80:f7:4c:84:ff:d4:02:
05:af:36:3a:2f:ea:59:91:75:c0:f8:44:27:10:23:
59:04:1e:be:50:20:f0:92:79:ca:49:1b:41:ad:c7:
e1:10:e8:c4:07:71:e0:bd:3c:4b:50:57:be:26:38:
a2:35:24:9c:3a:c2:a9:a3:8d:49:19:5f:79:50:dd:
72:40:db:60:5c:5e:4f:cb:a6:37:3a:ad:19:18:17:
42:79:b4:71:24:d9:6f:fb:08:ad:fa:31:92:4a:70:
8d:87:e1:69:63:53:b2:85:a9:d3:72:b5:c5:1e:2f:
42:dc:df:4d:47:f7:2b:7f:2b:08:1c:02:a3:fc:60:
76:4a:f5:62:98:a5:35:fa:11:0f:94:bc:cf:6a:0f:
8b:b0:9c:c1:00:4b:16:c2:80:b3:34:b4:15:53:54:
d8:55:c4:0a:9f:65:c0:e7:eb:dc:b4:00:f5:f4:a8:
8e:4b:5d:c2:7e:70:69:49:b5:5b:90:3d:94:c5:83:
cd:3b:bb:f9:e6:af:c0:25:f7:57:65:ed:f0:e2:15:
93:9f:c9:02:d2:42:0f:7a:91:d3:6f:eb:cc:c1:88:
a0:f3:7a:a0:a5:c4:94:1f:53:2a:12:d7:c6:e5:5b:
13:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AE:12:6A:02:FB:AC:2D:2C:FE:20:08:96:9C:9C:DB:D6:CC:55:5A
X509v3 Authority Key Identifier:
keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f6:24:79:d8:ce:da:f8:59:27:f2:5c:5f:2b:8d:68:cd:82:
3b:1b:59:c8:05:61:06:38:85:c5:40:ea:d6:58:4e:72:cb:4e:
a7:ee:67:05:f0:47:50:5d:16:00:17:eb:44:41:6c:10:87:dc:
48:50:70:fc:2d:b3:68:66:24:47:f9:2d:6a:e7:27:06:4c:3f:
04:ac:09:ca:fe:dd:94:2d:b8:77:c8:a6:18:d5:27:b9:85:15:
53:60:d4:62:e2:0d:b4:f1:95:d1:08:b9:5d:66:04:6f:37:03:
85:f4:44:99:03:8a:d3:1a:14:46:4d:9c:1a:c7:ed:9e:51:2f:
d1:e9:d3:df:00:af:da:7e:1a:37:18:96:89:82:80:e2:4d:86:
c4:7f:c6:e9:61:77:b7:e7:23:e4:89:b3:db:64:5b:83:48:e3:
cd:6b:94:ba:13:05:db:a9:89:16:3e:18:62:90:9a:36:e2:1d:
87:38:ad:f1:98:33:7a:48:01:03:8a:60:28:5f:dc:b5:37:75:
c0:69:ae:cd:dd:0f:59:9c:40:48:79:bd:81:bd:35:8f:4c:46:
7b:c7:4b:98:98:a1:78:75:3b:ac:ef:92:c0:72:3d:d2:b4:ac:
d6:34:50:59:19:48:9c:f2:ae:2d:66:f7:d9:ab:21:fd:90:4d:
3c:33:33:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:33:38 2026 by rpki-client