Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
File: NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft (raw, json)
Hash identifier: w87Jin53Zu/sYo8A2JgKEYPWIwpYd/kQ4zapfVegsJ0=
Subject key identifier: F2:81:2D:D1:B3:D0:6C:7D:9F:90:E1:87:C1:3E:DD:22:84:23:A5:C6
Authority key identifier: 35:90:2C:9B:64:0F:C6:D5:7C:23:77:14:ED:24:DA:17:F2:D3:E4:74
Certificate issuer: /CN=35902c9b640fc6d57c237714ed24da17f2d3e474
Certificate serial: 019D28168F7A007E825104EBED702AB7BC6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
Manifest number: 15C1
Signing time: Thu 26 Mar 2026 03:01:00 +0000
Manifest this update: Thu 26 Mar 2026 03:01:00 +0000
Manifest next update: Fri 27 Mar 2026 03:01:00 +0000
Files and hashes: 1: GxZT3TgjmIKtK7JQv_iwpTOXSpw.roa (hash: wlz5MW9CjtjeRzCliv1fAr4V5uA0E+YvY/dHxPuCPaY=)
2: NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl (hash: wMmb91YUXWtst0s+/FXFl8sTQPC1R0hsJtvnipyEU8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:8f:7a:00:7e:82:51:04:eb:ed:70:2a:b7:bc:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35902c9b640fc6d57c237714ed24da17f2d3e474
Validity
Not Before: Mar 26 03:01:00 2026 GMT
Not After : Mar 27 03:01:00 2026 GMT
Subject: CN=f2812dd1b3d06c7d9f90e187c13edd228423a5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dc:d8:7e:ac:68:08:dd:b7:4f:39:56:4d:92:
ac:3a:ad:d5:3f:0b:1d:52:89:b8:b1:42:a4:d6:fe:
29:6c:db:d9:c4:c1:9f:9d:20:32:fd:fd:b0:c6:10:
d8:86:c9:59:cd:45:7a:0b:2f:6a:40:a8:39:94:c0:
81:67:40:31:05:6c:8a:1a:04:68:2c:a7:32:06:0d:
18:ea:22:0e:19:a1:d1:4d:a1:d3:c1:1b:e8:9d:b1:
96:73:b2:a8:9a:87:1c:b8:c7:f6:ec:53:85:6b:2b:
79:a5:4f:a8:d2:24:9f:65:54:20:11:a4:29:42:97:
d1:b0:da:1a:b3:5e:17:ca:46:55:38:aa:5b:53:fc:
9d:44:b1:c7:79:bd:9a:1d:97:0e:eb:69:8d:20:16:
c4:0f:44:1b:90:ba:79:7d:a4:29:74:8b:a6:0b:ef:
ad:39:46:46:09:cd:b5:f9:a3:13:2b:fc:32:cd:10:
e1:4d:bd:5e:47:51:6e:19:f2:dd:3a:f5:1c:c4:10:
7f:68:2c:15:84:fe:02:e6:f7:c9:fa:f0:ec:ca:98:
3e:a2:86:15:2b:d0:5b:a9:54:4d:39:fd:3e:e9:03:
34:80:90:82:21:e7:6b:99:b8:36:7d:25:79:10:ef:
f6:46:a6:e6:bd:b6:ff:c1:98:c3:0d:f7:7c:ab:60:
17:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:81:2D:D1:B3:D0:6C:7D:9F:90:E1:87:C1:3E:DD:22:84:23:A5:C6
X509v3 Authority Key Identifier:
keyid:35:90:2C:9B:64:0F:C6:D5:7C:23:77:14:ED:24:DA:17:F2:D3:E4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:98:63:e2:8f:be:ce:55:62:df:16:25:b1:a2:2c:61:3f:65:
fb:1b:09:41:a1:23:95:ca:f7:f4:9d:55:d2:ba:2d:9a:71:78:
98:98:c9:0b:2c:f2:62:cc:64:70:47:9e:54:03:00:4b:05:5a:
46:b0:d3:83:40:14:b8:03:8d:65:13:53:54:24:a6:33:51:04:
75:36:d6:2d:44:ec:6e:0e:03:70:cc:7b:f3:a3:69:b1:98:7a:
c9:e1:64:4e:b1:0e:5c:f6:20:90:d6:fe:8f:7d:d2:28:62:c0:
a1:5a:47:11:9b:27:8b:3c:6d:19:93:f4:6e:5c:57:21:58:ca:
19:b1:fc:89:0f:5d:02:56:70:df:4a:c4:98:ee:0e:bc:71:a5:
52:c1:22:ff:cf:1a:6f:28:50:e5:87:ef:70:66:9d:a7:15:b9:
3a:80:f4:90:c9:fa:73:45:6d:18:e2:81:96:03:ec:83:c1:d8:
eb:a5:ed:e6:9d:89:e6:8f:1d:e6:67:6e:a6:6f:2c:08:60:a1:
c1:7a:02:1e:05:91:55:bb:2c:09:c7:7a:8c:34:c7:9c:26:5f:
30:0f:21:9a:4d:b0:0b:32:65:56:40:6f:20:13:0a:da:b3:92:
69:20:02:c4:52:a9:61:01:75:4a:49:0e:d8:65:b3:17:0a:54:
e4:52:1b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:05 2026 by rpki-client