Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
File: nzcg6XD6oOB_UKY4nnrlOvpDnas.mft (raw, json)
Hash identifier: L5vWCP8l0kcUhJG7cCaAm53PgUmgJDg553HDi3Rx4MY=
Subject key identifier: 72:AE:BE:68:DC:6A:BE:34:46:44:CA:10:49:FB:F2:CD:7C:9A:DD:56
Authority key identifier: 9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
Certificate issuer: /CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Certificate serial: 019D27A94A613CB49F94091F7ED75448514E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 01:01:39 +0000
Manifest this update: Thu 26 Mar 2026 01:01:39 +0000
Manifest next update: Fri 27 Mar 2026 01:01:39 +0000
Files and hashes: 1: DwjBds5b0bny3-dZb3jOPo6oE6o.roa (hash: Rkq+xz9kCRAZI1zfzUNT6Gu5M/oAmAXmbyM5y+/YH1I=)
2: nzcg6XD6oOB_UKY4nnrlOvpDnas.crl (hash: vIHxpP3VtPzdsfM61lMFpbHL6tu6x4OkO5dmUqel2/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:4a:61:3c:b4:9f:94:09:1f:7e:d7:54:48:51:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Validity
Not Before: Mar 26 01:01:39 2026 GMT
Not After : Mar 27 01:01:39 2026 GMT
Subject: CN=72aebe68dc6abe344644ca1049fbf2cd7c9add56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cc:fd:53:4e:e5:75:83:c5:88:60:01:08:3a:
3a:f4:10:b0:f8:7c:05:47:a2:ff:e0:76:70:de:48:
ec:c4:ec:d8:88:27:00:30:48:6c:af:67:16:df:43:
0a:61:7c:2d:af:8b:f7:c2:5c:f1:5f:65:c7:ce:47:
03:0f:5f:bf:2f:f3:d1:37:28:0d:a3:43:a2:80:92:
e7:c7:8d:0a:49:8d:98:4b:82:bb:25:11:cc:53:9d:
ab:c4:03:19:d8:64:1a:2c:5d:15:a1:33:01:3d:ec:
e6:cd:f2:90:42:f2:ae:36:9b:83:d9:98:12:44:0f:
67:e4:3e:e5:08:af:b0:80:21:fa:8b:c0:6a:5b:f9:
02:c5:2d:25:38:ce:66:24:44:71:ae:b9:1e:dd:11:
ce:4b:ec:3c:df:26:76:33:4c:08:5c:6f:32:7d:90:
4f:b5:a7:f5:83:c6:24:d0:e7:69:dc:cb:a7:97:f3:
e1:84:0b:97:53:b9:62:59:18:c7:ce:a2:b7:47:5a:
2b:e8:e4:65:83:e1:5f:3a:73:ad:d6:85:7f:a9:bc:
c2:9d:59:12:46:1b:ca:8f:54:65:0c:fc:0d:7d:b2:
ba:4f:b5:0f:ef:34:39:07:24:8a:27:75:c9:06:46:
4a:6e:05:25:e9:00:b1:33:8e:3c:3e:8e:8d:c2:48:
de:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AE:BE:68:DC:6A:BE:34:46:44:CA:10:49:FB:F2:CD:7C:9A:DD:56
X509v3 Authority Key Identifier:
keyid:9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9f:e8:8d:09:5d:74:c5:a4:a2:07:e8:37:d7:d9:93:15:fe:
c6:7e:13:6c:12:db:4e:7d:28:d6:69:d6:c8:59:cb:72:3a:e5:
63:a0:14:d7:a9:22:4d:d0:bb:98:9b:cf:08:6d:f7:76:25:bd:
ce:0e:fe:f7:b9:2f:97:7c:c8:95:bc:94:5a:37:23:bb:cf:e8:
d6:7b:6f:02:3f:3a:1c:67:b5:45:83:76:9b:21:4a:d4:30:95:
ae:88:91:d7:92:13:1d:96:58:54:d1:9e:ea:e7:8c:66:60:48:
6a:aa:e0:6f:81:ae:2b:b9:4d:58:c0:03:d9:f3:af:3c:6b:9a:
7c:4d:5a:8b:d8:93:20:74:b8:c8:4f:ef:65:d4:f8:7c:d0:a5:
b9:fd:5d:8c:6d:c3:b9:6c:3d:3e:be:b5:85:c1:d1:d1:b9:14:
5b:73:eb:d6:be:ba:ff:80:a9:9c:2d:62:8e:5a:0e:6e:ea:f5:
00:fe:e7:49:98:17:1e:a8:42:87:a7:29:50:79:69:06:6f:43:
24:45:50:a3:87:ac:03:93:58:de:7f:5f:c7:bb:fc:36:17:ae:
33:43:c3:24:e5:bc:2d:7c:2d:4c:86:28:fb:de:34:30:cc:76:
9e:c9:cb:4e:dd:ba:07:f6:d0:4c:a4:5d:3e:0e:4a:33:69:0c:
e1:cf:41:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqUphPLSflAkfftdUSFFOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzcyMGU5NzBmYWEwZTA3ZjUwYTYzODllN2FlNTNhZmE0
MzlkYWIwHhcNMjYwMzI2MDEwMTM5WhcNMjYwMzI3MDEwMTM5WjAzMTEwLwYDVQQD
Eyg3MmFlYmU2OGRjNmFiZTM0NDY0NGNhMTA0OWZiZjJjZDdjOWFkZDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Mz9U07ldYPFiGABCDo69BCw+HwF
R6L/4HZw3kjsxOzYiCcAMEhsr2cW30MKYXwtr4v3wlzxX2XHzkcDD1+/L/PRNygN
o0OigJLnx40KSY2YS4K7JRHMU52rxAMZ2GQaLF0VoTMBPezmzfKQQvKuNpuD2ZgS
RA9n5D7lCK+wgCH6i8BqW/kCxS0lOM5mJERxrrke3RHOS+w83yZ2M0wIXG8yfZBP
taf1g8Yk0Odp3Munl/PhhAuXU7liWRjHzqK3R1or6ORlg+FfOnOt1oV/qbzCnVkS
RhvKj1RlDPwNfbK6T7UP7zQ5BySKJ3XJBkZKbgUl6QCxM448Po6NwkjeHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKuvmjcar40RkTKEEn78s18mt1WMB8GA1UdIwQY
MBaAFJ83IOlw+qDgf1CmOJ565Tr6Q52rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnpjZzZYRDZvT0JfVUtZNG5ucmxPdnBEbmFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iYjdjMGUtZWU2OC00YmY4LWJiMzQt
MTJlNmEwZDQzMThhLzEvbnpjZzZYRDZvT0JfVUtZNG5ucmxPdnBEbmFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9iYjdjMGUtZWU2OC00YmY4LWJiMzQtMTJlNmEwZDQzMThh
LzEvbnpjZzZYRDZvT0JfVUtZNG5ucmxPdnBEbmFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi5/ojQld
dMWkogfoN9fZkxX+xn4TbBLbTn0o1mnWyFnLcjrlY6AU16kiTdC7mJvPCG33diW9
zg7+97kvl3zIlbyUWjcju8/o1ntvAj86HGe1RYN2myFK1DCVroiR15ITHZZYVNGe
6ueMZmBIaqrgb4GuK7lNWMAD2fOvPGuafE1ai9iTIHS4yE/vZdT4fNCluf1djG3D
uWw9Pr61hcHR0bkUW3Pr1r66/4CpnC1ijloObur1AP7nSZgXHqhCh6cpUHlpBm9D
JEVQo4esA5NY3n9fx7v8NheuM0PDJOW8LXwtTIYo+940MMx2nsnLTt26B/bQTKRd
Pg5KM2kM4c9Bsg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:31 2026 by rpki-client