Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
File: nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft (raw, json)
Hash identifier: nxEEekQzhre2VE7FJmR4BlOU1TN+Zpda1+d2xFf75XI=
Subject key identifier: 5D:EA:ED:B9:4D:BA:F0:AE:75:A7:6B:92:60:2B:EF:E5:B9:55:B8:15
Authority key identifier: 9F:33:CD:CE:77:B6:BF:02:09:D8:9C:99:B2:68:EA:08:53:57:6C:D3
Certificate issuer: /CN=9f33cdce77b6bf0209d89c99b268ea0853576cd3
Certificate serial: 019D269641137B1F296AA5D5B49ECCA682B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzPNzne2vwIJ2JyZsmjqCFNXbNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
Manifest number: 75
Signing time: Wed 25 Mar 2026 20:01:14 +0000
Manifest this update: Wed 25 Mar 2026 20:01:14 +0000
Manifest next update: Thu 26 Mar 2026 20:01:14 +0000
Files and hashes: 1: LL4V8sco-bLn6X62NhH7oSncxGQ.roa (hash: XyYD4raxZ15vCOfOVeQTnYj1yOHNjolcltnv8E/D12M=)
2: nzPNzne2vwIJ2JyZsmjqCFNXbNM.crl (hash: CTt/vIIfG9Tkx9dxnL9lVaKhV8VP9VGe/zFW4ms1Vm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzPNzne2vwIJ2JyZsmjqCFNXbNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:41:13:7b:1f:29:6a:a5:d5:b4:9e:cc:a6:82:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f33cdce77b6bf0209d89c99b268ea0853576cd3
Validity
Not Before: Mar 25 20:01:14 2026 GMT
Not After : Mar 26 20:01:14 2026 GMT
Subject: CN=5deaedb94dbaf0ae75a76b92602befe5b955b815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:02:14:ec:e7:7d:97:de:e6:6b:26:e3:d4:71:
68:0a:93:94:09:f1:55:29:7b:21:54:d4:a0:82:a8:
52:1a:37:ed:b5:67:8c:42:76:8c:53:1f:44:85:54:
44:ca:37:c1:1c:dc:f2:b8:d6:f6:8f:b5:e5:1d:2d:
23:ec:85:cf:98:96:f1:3b:a7:b8:9e:11:fe:97:fb:
bf:b9:25:62:86:1d:6d:60:c5:5a:80:8d:d4:b3:86:
74:4d:bb:61:65:b4:1e:67:af:62:81:33:d3:c7:fc:
c2:fd:4d:9d:fa:a7:39:49:6b:4a:f5:25:03:02:d3:
6a:6f:f9:6a:4d:cb:57:1a:a2:e9:f6:47:b0:b5:a8:
72:e2:35:9d:3c:28:74:ae:51:a2:d5:bd:ad:94:06:
76:a4:fe:fc:44:c4:a5:99:d7:23:11:d7:8a:bb:63:
58:3c:dc:d9:a6:d5:f4:95:9a:ac:98:72:30:71:08:
e9:34:77:33:e2:10:1c:f8:6f:0f:66:93:7c:13:8e:
9e:05:2d:b0:59:85:bc:09:be:35:7e:56:5e:65:b7:
57:aa:4d:c1:c8:8f:a6:7f:44:31:ce:ed:be:e9:6d:
75:6c:d6:30:de:40:d4:99:c3:c6:23:25:0a:57:0d:
34:d9:a3:c8:24:4e:0f:e5:2f:97:9f:d2:f6:0e:ce:
f9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EA:ED:B9:4D:BA:F0:AE:75:A7:6B:92:60:2B:EF:E5:B9:55:B8:15
X509v3 Authority Key Identifier:
keyid:9F:33:CD:CE:77:B6:BF:02:09:D8:9C:99:B2:68:EA:08:53:57:6C:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzPNzne2vwIJ2JyZsmjqCFNXbNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ff:2a:ae:54:b3:23:45:c7:1f:8c:ca:56:1f:b7:d3:ff:35:
d7:9e:b9:ca:06:19:ab:6e:cc:5a:95:a8:ae:32:f5:de:0e:e6:
bc:b8:37:55:70:4a:34:ea:a0:8b:d2:6e:48:29:8a:85:86:c5:
88:0f:6c:9d:75:1a:10:22:c6:99:0c:6b:f6:53:21:13:75:3b:
59:29:4d:98:94:00:2c:91:0e:d5:0b:03:7d:cf:08:10:94:88:
1a:66:80:75:17:87:21:54:ed:67:64:6d:b7:2f:8c:47:59:72:
54:a6:c7:ed:99:99:91:93:e1:ca:85:62:57:d6:38:10:51:6e:
f5:57:e4:1f:1b:0f:c1:da:44:fe:2f:20:dc:11:03:26:9e:e0:
f6:bf:3d:bd:bb:b4:8d:c8:59:47:eb:98:18:b6:48:88:82:d8:
d6:65:e3:15:7e:9b:19:9c:b8:cf:32:84:d2:34:5c:99:ca:f2:
ad:17:3d:77:e8:d3:7e:1b:d8:2b:bc:9c:4f:b4:4e:ea:c5:aa:
14:8e:c3:7b:7b:39:55:f2:fe:ec:83:48:0f:25:24:92:82:7b:
4c:93:86:b3:46:ee:bb:f7:32:9b:0f:85:12:28:02:c8:e1:c8:
3d:c6:1b:7e:6a:26:c5:db:74:be:d0:91:ef:e7:e2:81:68:a9:
79:f9:81:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:58:38 2026 by rpki-client