Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
File: NZTKzdk15Fz3HGFngKGx1Kpox7U.mft (raw, json)
Hash identifier: VdLyFc9c9i2hybL9CtcLBXmNYbIm2Uzj7fPTOOZ+OZw=
Subject key identifier: DC:A0:B1:AA:26:48:7C:4C:05:6F:0A:F6:42:3B:86:CF:B5:0A:4E:1B
Authority key identifier: 35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
Certificate issuer: /CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Certificate serial: 01A0D2DEAD890380EAF0BDFC302DD8E74361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 10:03:23 +0000
Manifest this update: Thu 24 Sep 2026 10:03:23 +0000
Manifest next update: Fri 25 Sep 2026 10:03:23 +0000
Files and hashes: 1: NZTKzdk15Fz3HGFngKGx1Kpox7U.crl (hash: YwamUH0symW9b/kb8BJ1gTI1/MyQrG5OQUnlF0CPQMw=)
2: Wdq9UIvFzgDqiYju4znORuRnk4A.roa (hash: eltS6TqFGo2PicugCL3Z+e5ML3gTGzg3RZI9Plv8FIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:ad:89:03:80:ea:f0:bd:fc:30:2d:d8:e7:43:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Validity
Not Before: Sep 24 10:03:23 2026 GMT
Not After : Sep 25 10:03:23 2026 GMT
Subject: CN=dca0b1aa26487c4c056f0af6423b86cfb50a4e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:05:2e:c5:71:7a:a1:76:83:59:de:68:b1:00:
6b:96:47:84:70:b3:e0:d0:51:68:d9:a8:91:c2:1f:
08:e4:2a:87:d7:c4:87:f9:09:59:67:38:88:c9:9f:
b3:a2:87:86:f2:3b:3e:eb:a0:d6:13:bf:78:61:11:
47:be:6a:30:28:75:31:44:fc:a8:18:71:3a:20:fd:
4c:16:f6:ad:40:90:a9:c5:f3:c3:cf:f8:f2:bd:5a:
35:de:d4:44:c9:0e:e9:55:70:ea:d8:cb:ec:c1:69:
12:8b:9b:38:ea:34:03:0b:fd:ff:f5:28:54:17:80:
30:05:ea:98:03:1e:15:d2:7e:ff:53:18:5d:f0:a8:
56:1b:a2:68:b9:db:7e:11:f2:85:6f:54:d7:d4:f6:
11:7f:4d:78:14:58:ca:5b:b6:db:a3:f0:7a:67:85:
11:2e:38:31:77:0d:1f:33:75:f4:5e:9f:91:96:d5:
12:7a:54:77:96:6e:9d:a9:f7:e2:5f:4c:b5:c3:16:
b0:ab:56:00:38:f3:9c:40:de:9a:d9:94:03:06:12:
f8:1d:b5:f5:65:35:91:a3:e7:ac:37:c6:4f:3e:4a:
d5:06:18:c0:d9:8c:3d:9e:f7:30:70:7c:67:22:6e:
a6:a2:9f:6f:27:9d:63:71:05:8b:88:16:5c:b4:c2:
ee:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A0:B1:AA:26:48:7C:4C:05:6F:0A:F6:42:3B:86:CF:B5:0A:4E:1B
X509v3 Authority Key Identifier:
keyid:35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:f8:97:41:19:99:58:b0:00:2b:59:54:b0:93:0c:42:b9:b9:
b0:ea:bd:4b:79:6f:55:7c:86:ab:0c:51:c0:ef:55:ec:50:ce:
9d:08:40:9b:b5:16:50:af:b8:ea:d5:2b:1d:02:c5:10:79:32:
b4:c7:0e:ce:af:a7:3c:2d:b4:b0:54:fd:3c:58:3c:d5:16:8c:
8e:d7:40:f9:d6:4e:7e:ac:f0:0a:08:ff:a7:4c:cb:d5:55:c2:
69:f7:62:0f:a9:38:29:84:9a:ba:88:ed:52:7e:85:d6:c2:86:
ec:da:4f:28:f9:f4:44:40:13:f7:63:df:68:e2:28:9f:78:02:
33:a8:c2:dc:69:bb:7c:3c:68:66:bb:79:75:20:34:22:37:d5:
e7:2d:48:ee:45:4b:6b:6d:0b:00:1f:2d:a8:77:b0:ca:37:b0:
82:26:de:4b:dc:60:7f:a6:1a:b7:7f:01:e5:bc:a2:ce:0a:bd:
8b:81:eb:99:e4:b3:c4:60:be:69:7c:5c:5a:4f:24:df:1c:d1:
6a:bb:e7:c0:dd:95:56:d2:b8:af:01:fe:ff:a6:2c:6d:5c:8a:
4c:79:9c:40:28:aa:4f:ed:6d:fc:6d:34:7c:aa:3e:62:8b:83:
a9:38:48:39:ed:cf:71:fb:a6:79:4f:b7:65:f3:81:5a:87:e5:
0f:4b:0a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:52:58 2026 by rpki-client