Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
File: RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft (raw, json)
Hash identifier: s59ono6dpmsvLz5rpE7qoZKEygrYl/ISXMZ6G3TLzZY=
Subject key identifier: BB:BF:1E:21:08:AA:63:A8:56:03:66:46:85:FA:F9:94:E4:AE:80:04
Authority key identifier: 44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
Certificate issuer: /CN=44d64dac03f1a57c1931667118048d82c43c5540
Certificate serial: 01A1DEA744EBEB4C8259D0C8C0BF9B7C2C23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
Manifest number: 1173
Signing time: Sun 15 Nov 2026 10:01:06 +0000
Manifest this update: Sun 15 Nov 2026 10:01:06 +0000
Manifest next update: Mon 16 Nov 2026 10:01:06 +0000
Files and hashes: 1: 6FlvO6wUgf9ecpKA1EuuoZxooB0.roa (hash: aEzLbUYuZvHpFrzr2sZaateqbjh/th5NR4O+uOuzOMQ=)
2: RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl (hash: h09+yRX7KWAnVDiaU8l5CYcbsk9xXAfQ7RtQyy/mMVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:44:eb:eb:4c:82:59:d0:c8:c0:bf:9b:7c:2c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d64dac03f1a57c1931667118048d82c43c5540
Validity
Not Before: Nov 15 10:01:06 2026 GMT
Not After : Nov 16 10:01:06 2026 GMT
Subject: CN=bbbf1e2108aa63a85603664685faf994e4ae8004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:64:83:68:2f:36:44:39:38:e5:94:01:55:aa:
ed:00:2b:b9:57:57:52:1c:5e:e9:15:a3:8d:64:d1:
ac:d1:25:d0:32:42:a0:f0:7c:0c:9a:ed:d3:29:63:
59:1a:36:1c:78:c4:5a:54:d6:28:91:fd:d7:7c:9e:
2c:6b:f9:84:9e:f8:e0:30:a0:37:9e:f3:65:55:99:
37:ee:db:57:18:b1:fd:7e:b8:cb:01:f8:18:68:3f:
37:05:9e:33:f5:99:a4:f4:cb:8a:49:12:f1:9a:a2:
cb:09:f1:ac:ee:b4:6f:d0:1f:2a:e0:5e:ed:35:c5:
be:13:f2:c1:ae:65:16:01:6a:36:09:95:ff:de:79:
43:9c:3f:b6:fd:ea:a7:0d:5e:ae:76:eb:4e:11:32:
25:64:f1:3b:5e:ce:a2:87:1a:e0:b9:9d:44:32:ca:
ad:99:16:49:89:37:68:9e:87:08:4c:8e:80:f6:e0:
77:61:05:14:51:4f:70:6e:c8:b3:12:47:59:8b:0a:
4b:4d:8a:cc:b2:04:5c:4a:b9:24:57:ce:08:ea:0b:
13:98:12:e7:36:f7:c1:7b:f3:0e:5e:14:30:f4:ec:
7a:ce:d4:b7:9c:57:aa:da:67:22:ad:66:55:51:73:
37:86:70:7e:c7:b1:78:e7:b1:87:28:4f:f3:f8:c4:
d7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BF:1E:21:08:AA:63:A8:56:03:66:46:85:FA:F9:94:E4:AE:80:04
X509v3 Authority Key Identifier:
keyid:44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:3b:d3:be:b6:60:87:77:2d:59:f3:96:24:9b:2e:21:2b:7f:
f7:d7:9b:26:5b:05:a4:fc:b7:70:f7:75:36:9b:c5:aa:d7:57:
ce:10:8c:ba:2b:0f:16:f1:0d:ab:d5:1a:0c:99:ea:20:42:f9:
f5:6b:68:b8:41:94:64:38:ac:e4:ab:52:3e:b8:de:fd:0f:b9:
fe:af:fb:ab:f0:a1:5b:d5:3b:c4:5e:f9:14:72:e0:7b:e9:03:
f5:af:a6:24:ff:38:56:5f:07:40:9a:8e:a5:bb:3a:4c:b7:93:
8e:37:14:81:a0:87:8e:e9:f2:a3:2c:84:34:8e:d6:45:d5:74:
7d:9b:22:19:e1:4b:9d:77:73:c8:4d:1b:1d:23:bf:5d:6c:6f:
20:82:da:07:34:c5:35:7e:53:92:ec:4b:97:60:04:4b:94:66:
3a:9b:a8:d1:f2:6b:da:57:79:26:98:d9:29:b8:89:25:4d:1e:
7e:88:ef:e7:11:dc:b7:94:a8:65:59:c2:fb:d1:11:68:30:97:
23:19:11:d9:76:ba:7e:9e:9d:44:aa:de:85:c3:df:dc:68:f5:
34:34:d2:58:02:9d:81:4d:a8:e9:23:d1:41:f7:a3:28:e3:09:
4f:19:20:b6:d1:87:14:03:b1:92:2a:b9:7e:5c:0e:a7:5f:84:
d7:0e:ee:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:11:35 2026 by rpki-client