Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
File: nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft (raw, json)
Hash identifier: rDqQsSCng8njnxWMpHGx4FcrCc0FGwneW2RM0vHH20Y=
Subject key identifier: FB:D0:62:5E:8B:1E:CE:48:ED:A3:0A:9B:AE:9E:1D:A0:2F:78:60:55
Authority key identifier: 9F:33:CD:CE:77:B6:BF:02:09:D8:9C:99:B2:68:EA:08:53:57:6C:D3
Certificate issuer: /CN=9f33cdce77b6bf0209d89c99b268ea0853576cd3
Certificate serial: 01A0D5026D058EF02E8902C22FB895A5BDDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzPNzne2vwIJ2JyZsmjqCFNXbNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
Manifest number: 025D
Signing time: Thu 24 Sep 2026 20:01:40 +0000
Manifest this update: Thu 24 Sep 2026 20:01:40 +0000
Manifest next update: Fri 25 Sep 2026 20:01:40 +0000
Files and hashes: 1: LL4V8sco-bLn6X62NhH7oSncxGQ.roa (hash: XyYD4raxZ15vCOfOVeQTnYj1yOHNjolcltnv8E/D12M=)
2: nzPNzne2vwIJ2JyZsmjqCFNXbNM.crl (hash: 5hTbBGPj222OwQ3txJvADj20whITTtkljFENsnvnxKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzPNzne2vwIJ2JyZsmjqCFNXbNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:6d:05:8e:f0:2e:89:02:c2:2f:b8:95:a5:bd:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f33cdce77b6bf0209d89c99b268ea0853576cd3
Validity
Not Before: Sep 24 20:01:40 2026 GMT
Not After : Sep 25 20:01:40 2026 GMT
Subject: CN=fbd0625e8b1ece48eda30a9bae9e1da02f786055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e1:8a:e9:a9:f6:04:01:54:9d:9d:79:6f:f4:
24:11:74:80:ac:3d:7c:27:56:e6:d4:8e:46:08:fc:
bc:ec:5d:0c:cb:69:17:51:06:63:43:41:fb:fd:49:
5c:2b:ff:29:20:8e:c9:5a:a5:6a:7a:25:8b:d3:7b:
ed:29:75:11:ca:bb:0e:9e:f2:39:ab:c4:26:87:1e:
51:42:88:27:84:02:4e:1f:39:b0:0d:f4:71:81:94:
b5:eb:ff:98:56:45:04:91:9f:14:b5:51:c2:21:6b:
ea:7a:13:30:57:b4:23:2b:19:7c:b4:81:94:1c:0a:
3e:71:2f:24:b2:2f:1d:b8:bd:be:98:9c:57:de:b2:
05:51:6d:b8:49:7c:99:f1:28:3e:10:c2:df:ea:18:
54:25:49:e4:5e:a9:bc:27:e2:e2:c0:dc:31:e7:c8:
04:1c:c0:3f:88:e7:67:03:52:4e:df:7a:9f:4c:6c:
2d:4b:e2:d9:44:3d:15:da:51:00:45:34:69:72:94:
3a:04:12:d7:64:81:d0:bd:5a:5f:18:ed:4a:89:f6:
d1:a2:66:68:5b:b0:96:9c:c1:1c:0b:bc:bb:45:fd:
95:c0:56:02:2c:58:c0:aa:b0:4c:91:3f:48:74:fb:
dc:cb:b7:02:ab:ae:e1:13:ff:7d:92:83:93:47:dd:
4b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D0:62:5E:8B:1E:CE:48:ED:A3:0A:9B:AE:9E:1D:A0:2F:78:60:55
X509v3 Authority Key Identifier:
keyid:9F:33:CD:CE:77:B6:BF:02:09:D8:9C:99:B2:68:EA:08:53:57:6C:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzPNzne2vwIJ2JyZsmjqCFNXbNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d3efd2-09ca-43b4-ab0a-4b666de2e98f/1/nzPNzne2vwIJ2JyZsmjqCFNXbNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d7:52:0f:b3:75:45:e7:98:97:14:39:a0:84:a1:5f:78:06:
e3:f8:82:71:c0:cc:9b:f3:0a:24:a0:35:a6:93:54:bb:3f:4e:
fe:fc:21:07:11:49:18:b2:91:7a:f9:d7:6f:2b:0a:07:2e:2a:
ba:5b:b3:7b:24:da:d1:e1:37:60:a3:01:7c:89:4b:15:4b:88:
f5:67:e0:2a:d0:57:f5:d4:4d:d7:3c:89:8b:31:70:25:83:30:
d4:1c:bb:08:21:d0:e3:f9:e5:17:1c:f0:d7:f2:99:9a:96:f2:
ce:14:f1:62:87:a2:0f:81:7c:70:50:01:bd:2a:e9:8b:cd:e2:
d5:0b:9a:d8:66:69:dc:88:00:d3:45:33:7a:3f:61:50:4b:53:
c9:6b:68:5b:8a:fd:19:43:11:da:cb:61:d0:ae:9d:23:69:c3:
d4:67:ef:ba:09:f4:90:b6:f5:a0:56:fe:b8:ea:ff:03:63:b5:
53:57:75:51:f7:20:f2:70:bf:b2:08:6e:3c:ca:46:db:80:44:
2c:61:77:79:a6:6e:99:33:03:90:74:f3:b2:6a:a0:a3:d4:a8:
9a:0a:83:41:a4:8d:c6:89:29:8e:11:8e:33:58:2a:5c:88:54:
89:da:45:ba:96:df:f2:57:4b:60:2f:e3:49:f1:f3:66:31:b5:
67:e3:21:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:19:45 2026 by rpki-client