Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
File: nzcg6XD6oOB_UKY4nnrlOvpDnas.mft (raw, json)
Hash identifier: MmzwtjCFHQkshfvBwLSi07WIWIeCivk5IPpRPA3hFqw=
Subject key identifier: 20:67:92:CC:CB:6D:FC:CD:85:2F:70:23:90:E2:60:90:40:C6:C1:DB
Authority key identifier: 9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
Certificate issuer: /CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Certificate serial: 019E20C8AB8A2231848F08F51A6F07C139C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
Manifest number: 190D
Signing time: Wed 13 May 2026 10:01:22 +0000
Manifest this update: Wed 13 May 2026 10:01:22 +0000
Manifest next update: Thu 14 May 2026 10:01:22 +0000
Files and hashes: 1: DwjBds5b0bny3-dZb3jOPo6oE6o.roa (hash: Rkq+xz9kCRAZI1zfzUNT6Gu5M/oAmAXmbyM5y+/YH1I=)
2: nzcg6XD6oOB_UKY4nnrlOvpDnas.crl (hash: qPQ04h90uy0hm8V1mSJlb9WHBPcZxe9K1Y9ec12IM30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:ab:8a:22:31:84:8f:08:f5:1a:6f:07:c1:39:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Validity
Not Before: May 13 10:01:22 2026 GMT
Not After : May 14 10:01:22 2026 GMT
Subject: CN=206792cccb6dfccd852f702390e2609040c6c1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:12:f2:05:c0:f7:ba:33:ab:b8:8a:9a:21:47:
ca:d4:66:ee:9f:52:b8:ca:c7:1c:05:85:08:d7:46:
40:89:0a:b0:7c:21:f7:da:42:86:64:b2:ad:aa:b8:
b0:11:0b:9a:55:5f:9c:86:10:4b:f4:e0:02:44:99:
56:32:db:0e:35:75:4f:a9:16:f1:ea:2a:57:04:70:
2b:62:ae:7f:a4:63:3c:5f:8b:80:88:63:85:fd:02:
1a:e3:da:9b:c4:9e:ff:22:c1:e6:da:dd:5d:a6:f0:
fe:c8:75:69:3e:01:bd:8f:70:0a:c5:0d:49:62:f5:
8c:c7:cc:34:70:6e:a5:4b:ba:2d:36:15:e7:b0:b9:
1a:3a:70:41:31:73:3f:ef:52:c8:e8:d0:f5:f2:1c:
cc:84:4d:38:10:7f:b7:7a:9c:c9:23:3a:00:bb:60:
64:ec:47:8e:48:a5:5f:92:2d:c9:3f:d4:98:23:d8:
f4:63:26:db:fb:d9:ce:38:3a:22:1d:aa:49:93:6a:
50:3b:50:31:cb:a8:6f:28:ae:76:41:a2:7b:23:fe:
5b:52:b4:70:24:3b:dd:c7:46:68:a9:47:f7:83:d4:
41:28:5b:b4:c2:0d:5f:4e:c5:a1:1e:01:2a:40:e6:
1f:03:70:b4:05:bb:a8:79:bd:ca:15:04:44:a7:90:
12:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:67:92:CC:CB:6D:FC:CD:85:2F:70:23:90:E2:60:90:40:C6:C1:DB
X509v3 Authority Key Identifier:
keyid:9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b3:1a:54:57:ed:fe:01:7d:e5:0b:21:60:bf:af:09:c3:83:
61:21:7f:1c:d8:ce:18:76:3e:3a:2e:e9:00:f8:e9:93:fc:f5:
4f:63:0c:9c:e7:8e:6e:07:89:1e:75:61:83:7b:89:be:23:a4:
ba:5f:ca:35:08:7a:81:83:64:6a:53:14:27:87:c2:6c:c3:98:
92:79:15:18:33:c6:f2:3c:be:68:b5:eb:b8:6f:a7:4a:0c:63:
a6:9f:4e:da:8f:53:8b:ff:8d:e7:e2:49:c2:5a:11:07:b8:ea:
af:5d:0a:eb:6e:8c:88:25:04:e9:b7:81:b0:60:1f:a0:65:a5:
6f:d7:76:d1:55:f6:39:be:b1:bf:4d:b7:7c:da:77:63:82:9d:
76:4e:40:dc:70:11:1c:f7:79:3f:0d:9f:5e:24:ee:fe:9c:87:
ea:9d:08:a6:5d:07:5e:cb:7f:6e:01:5e:24:99:0c:37:6e:3e:
53:d4:75:4f:5b:46:89:93:c4:90:e2:af:53:f0:b9:97:15:ae:
33:5c:e6:38:e5:e3:fa:75:b9:19:7e:d6:ce:93:83:06:a9:4f:
9f:42:32:88:24:de:58:74:b2:79:3a:61:91:c5:f3:7d:20:ed:
1e:3a:e7:65:48:0d:9b:8b:c0:2d:a6:d6:de:15:ce:ac:19:97:
d2:a1:87:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:54:03 2026 by rpki-client