Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
File: RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft (raw, json)
Hash identifier: AT8zDuSnHhcBDg+zeXWLOt24knMTtjVM4eBd5Yrt4uo=
Subject key identifier: EC:C0:4F:BC:FB:58:96:CD:6F:6F:54:82:49:E1:66:44:0B:93:82:07
Authority key identifier: 44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
Certificate issuer: /CN=44d64dac03f1a57c1931667118048d82c43c5540
Certificate serial: 01A0DFBC54869673D8386943A65667E6363B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
Manifest number: 10EF
Signing time: Sat 26 Sep 2026 22:00:56 +0000
Manifest this update: Sat 26 Sep 2026 22:00:56 +0000
Manifest next update: Sun 27 Sep 2026 22:00:56 +0000
Files and hashes: 1: 6FlvO6wUgf9ecpKA1EuuoZxooB0.roa (hash: aEzLbUYuZvHpFrzr2sZaateqbjh/th5NR4O+uOuzOMQ=)
2: RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl (hash: tS0+RhkjVEnaMy0POCagZ1EVxS3a7F5eBsAm8oFrryU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bc:54:86:96:73:d8:38:69:43:a6:56:67:e6:36:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d64dac03f1a57c1931667118048d82c43c5540
Validity
Not Before: Sep 26 22:00:56 2026 GMT
Not After : Sep 27 22:00:56 2026 GMT
Subject: CN=ecc04fbcfb5896cd6f6f548249e166440b938207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:44:e6:ae:c7:7f:1a:af:36:cc:d6:95:ee:22:
b3:34:60:d3:3d:63:43:dc:ae:2a:90:48:0b:cf:53:
7c:11:f3:a3:23:57:94:c9:8a:1e:08:6d:ea:7b:19:
f9:bf:82:b0:02:f9:45:b3:10:61:0b:45:22:56:d8:
3d:40:de:68:8c:9c:71:63:4c:da:09:57:76:cd:cb:
c0:c8:ce:2e:28:9a:f7:6f:2d:6d:ef:a4:d1:a5:1b:
4f:47:35:84:98:72:8e:83:63:77:30:18:9f:e1:a8:
9e:0b:e5:a6:2a:83:7c:0e:7e:41:52:37:73:ef:0e:
34:17:ab:70:35:76:9e:fe:2d:cc:7c:87:eb:48:76:
6a:d0:b7:5e:4e:63:42:54:f9:f1:10:b3:3d:24:a6:
f5:30:96:81:9d:4a:c8:e2:ee:69:10:86:01:c5:c0:
96:39:6c:08:34:0d:22:53:e7:4a:0c:28:f3:dd:9d:
09:b9:cc:b0:ba:f5:0f:6a:75:70:8d:bc:a6:7d:9f:
62:a4:6e:ec:84:ec:62:ab:f6:de:d7:27:56:3d:6a:
8b:e3:25:65:dc:2c:19:f1:10:e3:0e:a5:cd:74:d5:
09:38:20:ac:31:08:e5:71:f1:90:30:e3:08:4b:7d:
37:ef:7f:54:b4:5a:61:dc:31:40:bf:21:35:82:bb:
d4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C0:4F:BC:FB:58:96:CD:6F:6F:54:82:49:E1:66:44:0B:93:82:07
X509v3 Authority Key Identifier:
keyid:44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0b:17:a3:30:0e:dc:4d:0a:9a:71:cf:69:3b:38:c8:96:0a:
88:7e:8d:92:3a:ff:29:57:f3:35:30:fb:f3:1f:39:60:40:4f:
c0:2b:94:45:58:f7:f6:cc:15:18:9f:92:9c:bf:da:2b:13:0b:
b7:94:17:a6:97:23:1a:3c:32:db:1e:eb:a1:29:48:8a:24:d7:
ad:d4:87:83:e6:33:64:37:54:8b:bb:5b:46:3b:34:86:52:05:
6d:e2:66:bf:ca:27:e2:3f:15:41:93:eb:2c:2d:62:cf:3f:37:
28:25:ad:14:86:27:45:05:07:58:b2:3e:6c:4b:27:cb:1b:41:
08:fb:4a:98:04:ab:9f:d3:2c:b5:d3:89:3e:a4:76:42:8f:17:
e7:f6:29:97:f4:65:ac:98:9c:b8:60:5c:fe:22:8b:0b:4d:ff:
ca:61:17:06:2d:04:a0:b6:71:f1:51:c2:1e:57:54:f6:44:47:
16:05:38:ca:7e:68:73:4e:c6:fd:e3:af:b7:d6:a2:88:64:b6:
91:2a:fb:ba:89:0c:e1:26:e6:c2:e8:cc:b8:b5:4d:f6:ba:38:
da:f8:e1:5b:57:8a:8b:76:c7:11:5e:c1:a9:04:eb:4d:9c:4b:
e2:be:09:f6:8b:47:6f:54:0b:7c:64:0a:18:c2:e1:76:61:76:
2b:59:47:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:11:31 2026 by rpki-client