Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
File: U_NZCAnRh_ezYfskzUP5P2ZLILM.mft (raw, json)
Hash identifier: iscVYS10gdsqsaiIXi2/Ip1xhjLRPIvkHWeuBNJ0Zi0=
Subject key identifier: 1B:2C:C0:EE:7E:FB:B1:79:F2:BA:36:AB:FF:CB:09:F2:EE:71:F0:09
Authority key identifier: 53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
Certificate issuer: /CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Certificate serial: 019D27DFC47011D6CA2EC9B5BB5C6069997B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 02:01:09 +0000
Manifest this update: Thu 26 Mar 2026 02:01:09 +0000
Manifest next update: Fri 27 Mar 2026 02:01:09 +0000
Files and hashes: 1: 1-UcYB_bC1Q74xvMeMptRl_v4GSM.roa (hash: CZsJE/C7u1KFT+BSHVUsJyL6cOqDP5qXckw/MXkpdZw=)
2: IADl1Gv9BuddIG-0OHvNCj39-5w.roa (hash: S9Dxk12pt58eWH9jO5GDFxrOLIjhAQo2JWChQTtOvm0=)
3: U_NZCAnRh_ezYfskzUP5P2ZLILM.crl (hash: ERJjp/penxtjXpD373LuU7bYsArULw4zi+miYgLOUFs=)
4: ctdO6KeqKtoQl8jil7v642rgLAY.roa (hash: 0Ysbxgr5wlnCLuuipo5HyI6PWUVSDIOqUxGUbxE7UC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:c4:70:11:d6:ca:2e:c9:b5:bb:5c:60:69:99:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Validity
Not Before: Mar 26 02:01:09 2026 GMT
Not After : Mar 27 02:01:09 2026 GMT
Subject: CN=1b2cc0ee7efbb179f2ba36abffcb09f2ee71f009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:af:8a:1e:cc:3a:fc:a7:11:42:a7:ff:a2:19:
12:fb:8e:b6:cf:bb:f2:7f:4a:05:22:a9:52:fd:17:
46:dd:5b:22:fb:ea:cd:06:62:2a:e5:36:2b:95:d1:
50:ef:b1:9f:8d:17:57:cc:50:d9:95:6d:18:41:79:
00:d1:72:f9:c4:62:36:f2:d9:3a:5f:ba:8f:6e:b1:
25:61:33:a2:90:39:d6:61:8a:9c:89:66:7c:7a:e0:
cd:fd:88:ef:c1:0a:b6:62:a5:2b:57:c7:a2:c3:bd:
78:75:09:b3:82:16:c2:00:7e:37:ef:33:9e:08:70:
2a:f6:2f:9f:11:06:3c:82:ca:bc:2a:7b:29:37:9a:
42:56:5e:60:38:91:94:1f:55:eb:6b:83:e0:a2:6f:
56:fe:34:d8:71:9d:c9:8d:ac:2d:ba:7d:63:2c:b9:
25:78:4a:70:c1:16:30:ad:a8:71:5e:8e:19:54:f4:
92:e5:33:e9:81:67:89:93:c3:0f:ce:a8:c5:18:9e:
9c:e3:1b:d7:43:7d:45:f5:1f:c4:ab:96:e3:10:6a:
57:b2:ae:df:92:cc:17:a1:2e:93:8d:40:ce:76:fc:
0f:94:44:d6:5d:9b:c2:17:77:be:dd:bb:2d:94:f4:
cc:4b:73:02:49:1a:85:5c:2b:de:4a:ef:a9:38:4b:
3f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2C:C0:EE:7E:FB:B1:79:F2:BA:36:AB:FF:CB:09:F2:EE:71:F0:09
X509v3 Authority Key Identifier:
keyid:53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:51:23:d3:f9:1b:ed:08:d6:9d:95:16:0e:f8:fd:7b:df:8f:
ef:fc:3b:c8:09:79:c0:0e:61:b4:9f:3b:24:c2:35:80:0b:6e:
fa:46:29:31:30:f9:e5:dd:cf:eb:9a:41:62:7c:84:b1:51:cd:
22:e6:77:77:c3:1a:93:f8:89:81:13:ca:dd:12:e0:fb:86:0b:
07:1b:a6:fe:12:a8:2e:9a:84:5a:ac:2c:be:dc:94:0a:86:ba:
16:ae:fa:47:ba:80:8a:74:a8:c5:08:ee:1f:31:d2:6b:f3:84:
59:24:35:62:65:de:e9:4f:8f:8b:39:bb:f7:67:91:2b:ef:ba:
e0:a2:26:ee:d9:9a:b2:55:5a:10:52:70:26:1e:4e:d2:28:dc:
57:49:4f:75:b2:81:de:be:c5:d2:e2:cf:11:db:65:cb:75:73:
7d:64:e7:b3:5f:6f:93:da:88:cc:4f:5f:42:ce:94:18:36:c1:
49:dc:63:00:fc:dd:a8:57:d2:de:19:d0:92:be:9e:22:ca:80:
4e:84:d0:61:b7:83:95:66:c0:bf:f5:52:3d:ce:ec:bd:ad:c7:
c3:f7:13:84:3a:04:12:7c:a4:18:ec:3e:8b:c3:35:3d:fe:9c:
97:6a:47:7e:8b:e5:13:e3:45:01:65:a8:65:49:d4:b0:5e:b2:
29:af:f5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:13 2026 by rpki-client