Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
File: nzcg6XD6oOB_UKY4nnrlOvpDnas.mft (raw, json)
Hash identifier: 1557/nrXKIYRx0BXbsVXarqvp6ZLYzLq00i2uJxB/h0=
Subject key identifier: 1D:CD:B7:BA:70:BB:49:D3:48:E0:A1:26:02:65:29:90:C1:69:46:6C
Authority key identifier: 9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
Certificate issuer: /CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Certificate serial: 01A0F8D79062C2612800B590731DBB3CF47D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
Manifest number: 1A86
Signing time: Thu 01 Oct 2026 19:01:11 +0000
Manifest this update: Thu 01 Oct 2026 19:01:11 +0000
Manifest next update: Fri 02 Oct 2026 19:01:11 +0000
Files and hashes: 1: DwjBds5b0bny3-dZb3jOPo6oE6o.roa (hash: Rkq+xz9kCRAZI1zfzUNT6Gu5M/oAmAXmbyM5y+/YH1I=)
2: nzcg6XD6oOB_UKY4nnrlOvpDnas.crl (hash: v02qn6GvX+cJlQgmOtv1AUOgFO3jMvahTix9wbY/TeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:d7:90:62:c2:61:28:00:b5:90:73:1d:bb:3c:f4:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Validity
Not Before: Oct 1 19:01:11 2026 GMT
Not After : Oct 2 19:01:11 2026 GMT
Subject: CN=1dcdb7ba70bb49d348e0a12602652990c169466c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ab:45:ac:02:c5:c0:ea:92:15:15:4e:ad:0a:
cc:dd:44:1e:66:f7:16:8d:ee:3f:1f:9f:a0:07:fe:
08:38:29:e9:7a:db:1d:3c:7e:09:4f:bb:91:ad:f3:
69:74:cc:44:f8:38:e3:1d:1f:8a:bd:4b:e4:5e:54:
d8:16:08:ac:72:08:55:76:7b:1e:20:45:9a:f9:6c:
a1:f1:6e:02:92:c4:fd:d9:ce:aa:34:cd:ae:04:4c:
98:64:32:ec:59:3b:43:3b:bf:53:4f:a5:5e:ee:a9:
4e:ee:49:89:75:e6:3d:e5:f2:e8:c6:0f:fc:a2:88:
8b:4f:a2:cf:98:b3:46:d9:4d:ad:42:ed:50:47:6b:
9e:c7:6f:3a:00:ec:04:f0:1b:0e:cf:40:4c:5e:92:
47:0f:12:ca:78:e7:90:19:06:da:04:09:9d:85:5f:
c5:fa:05:7d:6d:5f:c6:aa:b7:38:b7:da:5c:57:71:
10:ec:4c:c9:05:b0:f7:d5:10:1e:49:f4:5d:fb:27:
46:ba:a7:c8:01:31:05:7f:e5:65:2d:f4:a4:e0:29:
01:4f:66:42:96:d0:d5:83:89:52:62:4f:41:23:f1:
b5:07:56:c6:ac:27:6a:56:5f:91:0c:00:d0:6b:e6:
1e:a6:11:15:77:89:18:d5:f8:3a:42:6e:db:33:27:
59:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CD:B7:BA:70:BB:49:D3:48:E0:A1:26:02:65:29:90:C1:69:46:6C
X509v3 Authority Key Identifier:
keyid:9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:16:7e:cb:9f:3e:b2:af:4f:49:6d:6b:08:6e:d0:fe:94:8d:
f6:14:36:67:b8:ca:73:76:6a:2b:55:99:90:1c:d7:b4:57:5d:
ae:c6:7a:32:1b:a9:76:d0:0d:4b:5a:d9:99:13:b8:60:24:de:
28:3f:fc:1b:2a:6e:c2:90:18:41:07:86:f6:1f:d4:88:52:b9:
fd:20:70:1d:c6:44:6f:e9:bd:17:79:3f:1e:c1:99:ee:10:d1:
c4:df:48:6e:61:b6:a7:9e:a2:91:73:98:6a:4d:90:e6:46:b8:
ec:e2:78:d0:46:b4:46:a8:66:09:9e:e8:2f:cf:43:3f:58:af:
16:5e:20:be:4f:63:98:a6:2a:8f:a3:aa:29:3a:b0:94:2d:2f:
30:79:2c:1a:8b:a9:56:e2:e7:aa:b8:21:51:96:70:dd:db:b5:
3d:8e:b0:1e:3b:a9:ca:ce:c2:ba:08:31:cd:ba:c4:2f:0a:fe:
b2:0f:2a:27:69:c6:ea:a4:e7:24:05:bb:15:69:b0:99:09:e6:
2d:a0:86:2d:fb:e2:18:4a:11:67:b7:2c:ec:55:2f:0a:60:03:
3a:e1:17:42:89:4f:9f:6a:5a:6d:1d:e8:01:85:08:6d:40:e1:
98:84:c3:51:b5:9d:45:18:f1:44:1b:a7:98:d0:22:6a:43:7c:
20:11:a6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 13:24:12 2026 by rpki-client