Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
File: U_NZCAnRh_ezYfskzUP5P2ZLILM.mft (raw, json)
Hash identifier: yWLRrAP6mSNx9ZLFmM5AoiLDXnRKhA5VMb1+fcyXMak=
Subject key identifier: 28:8E:2F:91:EB:6E:22:60:76:17:84:2F:8A:76:68:00:35:DA:7B:29
Authority key identifier: 53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
Certificate issuer: /CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Certificate serial: 01A10692F988E69AE2879941D6812035D4DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
Manifest number: 1A8D
Signing time: Sun 04 Oct 2026 11:00:57 +0000
Manifest this update: Sun 04 Oct 2026 11:00:57 +0000
Manifest next update: Mon 05 Oct 2026 11:00:57 +0000
Files and hashes: 1: 1-UcYB_bC1Q74xvMeMptRl_v4GSM.roa (hash: CZsJE/C7u1KFT+BSHVUsJyL6cOqDP5qXckw/MXkpdZw=)
2: IADl1Gv9BuddIG-0OHvNCj39-5w.roa (hash: S9Dxk12pt58eWH9jO5GDFxrOLIjhAQo2JWChQTtOvm0=)
3: U_NZCAnRh_ezYfskzUP5P2ZLILM.crl (hash: crYbSUSTowjG/irMLVtLrWHs37aYWesYyXzxLcgtFKQ=)
4: ctdO6KeqKtoQl8jil7v642rgLAY.roa (hash: 0Ysbxgr5wlnCLuuipo5HyI6PWUVSDIOqUxGUbxE7UC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:92:f9:88:e6:9a:e2:87:99:41:d6:81:20:35:d4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Validity
Not Before: Oct 4 11:00:57 2026 GMT
Not After : Oct 5 11:00:57 2026 GMT
Subject: CN=288e2f91eb6e22607617842f8a76680035da7b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f1:0a:8f:3e:ce:4c:c1:bf:3b:ab:58:bb:45:
55:fc:db:0c:10:24:81:cc:03:d1:d9:68:b2:33:dd:
21:9c:11:8b:27:48:69:59:08:8d:ae:bc:f6:f7:f4:
e8:83:87:72:13:c3:3c:25:48:82:0c:65:d7:e8:26:
81:6c:a8:b1:73:71:d3:bd:48:ac:fa:11:f2:28:03:
f6:35:65:c5:6b:a4:da:67:8f:4a:ad:98:3c:25:cb:
f7:0e:a6:80:e2:23:c3:c4:a8:8a:64:f9:03:88:0d:
ea:0a:77:eb:3a:07:d4:b0:e9:eb:24:e0:71:f0:bc:
46:14:a3:43:d7:ad:8e:7c:11:88:fc:1a:f8:85:55:
dd:7b:50:41:b4:10:8f:52:94:68:32:a5:43:89:cb:
36:cd:5d:cb:3a:d2:6b:4a:18:ec:7d:e8:ac:d4:83:
29:31:d4:9c:2b:f9:5c:bc:e4:84:2d:eb:b8:b5:6d:
d9:88:2d:58:5b:9e:db:77:85:28:ad:9b:0b:3f:11:
da:d9:38:1a:42:e9:f5:62:52:a6:ee:35:9f:3f:45:
26:13:73:19:74:dd:d3:79:c5:18:6c:f9:c8:e3:20:
de:59:f6:78:8a:d4:8a:a0:cf:e7:8d:fb:43:84:18:
9b:33:8e:73:b5:70:7e:69:e4:6c:8a:a3:6b:4a:5e:
37:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8E:2F:91:EB:6E:22:60:76:17:84:2F:8A:76:68:00:35:DA:7B:29
X509v3 Authority Key Identifier:
keyid:53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:46:8e:47:8d:5e:d8:1d:d9:98:ee:75:f3:72:05:e0:83:d3:
57:3f:a9:cc:63:53:19:af:86:39:9f:12:e2:55:2c:60:d4:46:
a2:44:3f:a6:16:2b:53:09:d3:54:c6:e5:4b:cc:0e:11:76:5e:
3a:65:b7:0d:8c:32:0d:cb:3b:9f:c5:c2:63:0a:bc:77:7b:6c:
67:48:63:09:bd:bd:9a:e1:7f:e5:1c:fd:29:2a:22:61:f5:75:
86:77:d5:b8:0e:42:90:68:79:70:44:15:ba:35:33:03:31:48:
26:f9:3b:90:b6:0d:44:06:2e:e4:ac:4e:83:53:40:1a:a7:f0:
93:15:73:0b:2a:fa:10:07:db:62:cd:64:47:6e:d9:b6:2d:43:
fb:b3:b1:d3:63:b7:61:c8:34:06:61:3b:44:c8:89:76:f0:5b:
b9:54:4f:2b:87:c7:3c:01:61:39:34:db:f1:47:56:39:22:5b:
06:3c:3c:e0:43:08:24:45:6c:61:60:e0:40:5c:64:e1:a1:88:
8e:ad:7e:f5:c0:6c:94:99:bf:e2:01:ae:2d:96:79:0f:3e:4f:
28:03:87:14:3a:73:4c:1c:8f:d9:ec:b0:9c:e9:e5:81:81:80:
ff:db:b9:22:6f:07:14:cb:96:ad:58:49:12:c4:ae:cd:9b:c5:
5c:06:03:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:35:43 2026 by rpki-client