Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
File: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft (raw, json)
Hash identifier: e5MfarengZ6tf6Ohh1tCCh4Tmtq7d/5N403KqPlsfeQ=
Subject key identifier: 35:B5:F4:5C:BC:F0:DE:DA:6A:99:16:E2:6E:D5:76:60:70:D3:AE:86
Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Certificate serial: 01A100C7D2CEC25FF3805772FCB9A7295565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
Manifest number: 1A92
Signing time: Sat 03 Oct 2026 08:00:57 +0000
Manifest this update: Sat 03 Oct 2026 08:00:57 +0000
Manifest next update: Sun 04 Oct 2026 08:00:57 +0000
Files and hashes: 1: A3pW4f2Q0QCXW1ITF5-7J2AGJB0.roa (hash: 3GwoRHIKkL+M5kmrRcgNaVleZoRm14fgCgWnCbfdVU4=)
2: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl (hash: tUMWd6Lrx1zXy4JGR6tIoJhdYHxvrxqbfS+AH1X8SJU=)
3: YsmjC0C0fqf9CY4wLhiPtFlxZEw.roa (hash: N0lxxgZ/gBnqbm0d/xg3YbjefGLIyBpN9+tqlNMsVRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:c7:d2:ce:c2:5f:f3:80:57:72:fc:b9:a7:29:55:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Validity
Not Before: Oct 3 08:00:57 2026 GMT
Not After : Oct 4 08:00:57 2026 GMT
Subject: CN=35b5f45cbcf0deda6a9916e26ed5766070d3ae86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:43:cc:97:bd:09:06:2a:46:1f:a4:c1:e6:03:
19:8e:48:42:0d:9e:3e:ee:44:32:70:c9:ff:89:22:
37:14:e2:02:cf:de:2f:6c:23:5f:78:bd:17:b8:d5:
44:95:d0:5b:fe:56:7e:2f:ac:0c:a5:3e:de:0b:d1:
45:a4:2a:46:fd:aa:81:4f:d2:02:a7:dd:89:74:16:
7b:45:6c:cd:f4:a9:bf:61:6b:2c:0b:4f:a6:aa:8b:
68:db:29:f0:aa:20:8a:36:d2:27:7c:dd:87:f3:38:
13:c1:9d:50:f5:61:1d:bf:db:6c:42:e1:43:5b:55:
d2:26:a2:6b:74:a4:fb:e3:55:14:d3:fc:9e:80:03:
a1:ee:4d:2c:e0:d4:77:35:9b:c6:27:56:b8:78:33:
e6:53:22:f6:73:13:1d:7f:5a:ba:2a:7c:4f:76:1c:
13:c6:34:f8:1d:f1:cc:4b:1e:cd:7c:da:bd:e5:b6:
91:8e:4b:15:e0:a9:e7:58:c1:38:2c:64:51:4d:93:
5a:60:eb:1d:05:33:8f:46:44:5b:9e:e8:3f:b9:5f:
bd:c0:20:8d:df:ee:a3:e2:5f:f3:af:7f:1d:87:a7:
12:46:d5:dd:a5:f3:aa:b6:a1:b1:b3:17:14:8a:45:
53:1a:2c:e8:8d:69:ab:aa:a3:64:45:41:41:cd:51:
9b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B5:F4:5C:BC:F0:DE:DA:6A:99:16:E2:6E:D5:76:60:70:D3:AE:86
X509v3 Authority Key Identifier:
keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a9:63:11:70:c2:fb:cb:d2:94:25:3f:29:76:4a:75:c0:cf:
44:a3:31:43:e8:f1:c2:3b:70:47:ef:1d:7d:b4:0b:40:b7:59:
3d:9e:d5:2a:6d:8c:08:52:18:95:35:f7:9c:52:09:29:12:e9:
10:df:47:fa:0d:5b:7d:b8:2f:ae:d1:43:d6:50:40:31:19:60:
7c:d3:a6:f6:06:fb:7d:f2:8f:77:98:f8:b5:9c:85:be:7b:e2:
f3:ee:f6:07:83:d5:42:b5:28:2d:74:b1:dd:0e:8f:f4:b7:3d:
e5:f0:15:74:43:f7:ea:f1:ea:d2:fc:57:a7:ff:c0:7a:4f:98:
09:00:a7:cc:8e:42:b8:67:4e:f8:ae:f8:1f:7e:10:1c:ee:7b:
0d:2b:d1:30:81:14:c0:d8:55:fe:a5:e3:9b:55:c2:e4:da:dc:
42:24:7f:08:cf:35:48:4f:80:f6:71:77:8a:50:44:0c:0a:0c:
4c:79:33:fd:75:50:03:b9:8c:79:2a:fb:73:7b:53:c1:be:d5:
c9:88:e6:81:e5:40:2f:19:87:d5:cf:6b:81:d1:30:39:ba:a6:
9d:65:37:ea:ef:17:9e:e2:01:e0:84:52:21:32:ba:68:d0:c6:
1c:cc:99:3d:42:e3:c9:bb:61:77:05:7c:73:32:d8:38:e6:bd:
3a:86:bb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:45:53 2026 by rpki-client