Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
File: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft (raw, json)
Hash identifier: pJhhNpOuCYnltJZ8sSgOoDZgB++coZNcr+ehVUJ/e5k=
Subject key identifier: B3:12:47:58:1A:0F:F8:CC:0D:50:12:F3:F1:85:E9:80:6E:3F:4A:7A
Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Certificate serial: 019E1F10CECFB5E7DD95DA91FD1E87E8A7BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
Manifest number: 1914
Signing time: Wed 13 May 2026 02:00:55 +0000
Manifest this update: Wed 13 May 2026 02:00:55 +0000
Manifest next update: Thu 14 May 2026 02:00:55 +0000
Files and hashes: 1: A3pW4f2Q0QCXW1ITF5-7J2AGJB0.roa (hash: 3GwoRHIKkL+M5kmrRcgNaVleZoRm14fgCgWnCbfdVU4=)
2: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl (hash: F/B7Mv4Fgzc1A6+Elv97zdsJORhenyrPK3Mo8AQfSe4=)
3: YsmjC0C0fqf9CY4wLhiPtFlxZEw.roa (hash: N0lxxgZ/gBnqbm0d/xg3YbjefGLIyBpN9+tqlNMsVRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:ce:cf:b5:e7:dd:95:da:91:fd:1e:87:e8:a7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Validity
Not Before: May 13 02:00:55 2026 GMT
Not After : May 14 02:00:55 2026 GMT
Subject: CN=b31247581a0ff8cc0d5012f3f185e9806e3f4a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:55:00:16:df:40:1d:95:7b:49:1d:c3:28:4b:
ab:22:a6:33:06:62:0a:c1:ce:ae:d2:c3:cd:03:65:
35:74:8c:55:5f:ae:c5:55:0a:d9:75:24:ab:b7:7c:
2e:f7:20:09:b7:b5:05:1c:47:b9:27:f7:17:ec:e8:
8f:48:ae:9d:ed:8a:e6:07:9d:fe:28:50:6c:da:79:
ee:b8:4b:c4:5a:ea:db:c4:08:bd:7e:74:2c:3c:cc:
26:c6:6f:15:90:37:c0:7f:fe:d3:21:d9:8c:bf:de:
e4:11:5e:28:ba:74:eb:5f:0a:8f:75:4c:79:04:d9:
eb:36:3d:b6:bc:77:23:be:6c:28:2a:c7:9a:6c:26:
27:79:99:85:b9:16:65:f0:e5:5d:a6:d2:ae:e6:03:
77:b0:6e:de:04:45:51:6e:79:82:b2:b9:13:85:ce:
67:fc:2c:3c:c8:8d:96:27:ae:10:42:48:25:a1:04:
f1:ff:15:e9:67:68:10:cf:9d:07:98:37:9a:a5:31:
3d:4d:3f:e6:82:34:c7:16:2e:95:ae:0d:ac:87:c0:
f8:2b:b9:11:a2:ef:81:43:63:86:16:a1:db:25:08:
59:fe:c2:24:16:ac:0a:0b:13:b8:86:2a:4f:5d:27:
2f:8c:e9:c1:20:ec:38:c2:b8:86:1a:1b:b8:fd:74:
2d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:12:47:58:1A:0F:F8:CC:0D:50:12:F3:F1:85:E9:80:6E:3F:4A:7A
X509v3 Authority Key Identifier:
keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ed:98:79:41:ff:88:95:44:5e:9c:b3:0d:86:ae:26:9f:fe:
08:f6:ae:93:16:a5:73:de:3c:47:c8:db:e5:d6:56:92:19:48:
54:26:24:ca:76:d7:9a:d4:f8:84:be:1f:7c:cb:3a:d3:ad:63:
c5:95:0f:5f:34:99:64:ec:0e:41:9a:b5:d9:3f:2d:06:51:3a:
f1:1e:5e:4b:4b:f6:2b:20:17:93:0a:df:09:3a:28:bf:97:a6:
9b:8a:79:22:ec:84:9a:0b:95:09:3a:d7:1f:52:e6:d0:18:c0:
59:9b:be:60:b2:25:98:fb:a3:a4:82:d8:1f:a7:e6:62:f7:98:
42:fb:bf:4e:37:76:c5:68:29:84:d8:51:33:e1:b2:81:b2:b7:
44:1a:3e:08:a7:5a:1f:6d:78:0f:6f:ca:6b:bd:f2:ea:d7:72:
01:3d:29:40:6f:b7:40:04:ce:ae:2c:72:9a:63:50:97:42:d9:
5e:cd:0e:fb:f3:5f:84:a0:24:12:d1:d8:16:a0:7d:2e:a6:64:
3b:3e:53:a6:f3:85:ac:c6:4d:0b:aa:2a:ec:a8:d1:2f:d9:96:
53:ac:b7:9a:66:be:2e:db:70:8e:89:03:85:fc:8f:5a:c5:3c:
a5:54:ee:15:cc:95:f9:d8:bb:6a:b4:8b:23:e3:37:dd:62:08:
ef:28:36:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:03:13 2026 by rpki-client