Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
File: NZTKzdk15Fz3HGFngKGx1Kpox7U.mft (raw, json)
Hash identifier: v9XrYvGyqrTbSoCXdiMZhy/5XE8BLjgmo0H+4fTzzRU=
Subject key identifier: 83:F2:72:7F:25:67:31:DA:E6:E3:7C:02:34:1A:D8:F2:AC:E4:8C:C6
Authority key identifier: 35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
Certificate issuer: /CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Certificate serial: 01A1DD5E0DB94596D576B0C255D67F754356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
Manifest number: 1AF8
Signing time: Sun 15 Nov 2026 04:01:30 +0000
Manifest this update: Sun 15 Nov 2026 04:01:30 +0000
Manifest next update: Mon 16 Nov 2026 04:01:30 +0000
Files and hashes: 1: NZTKzdk15Fz3HGFngKGx1Kpox7U.crl (hash: yCRws+c7ihu82zzH5ZOHCe1iV1/YSjibOiy9eNXfuUQ=)
2: Wdq9UIvFzgDqiYju4znORuRnk4A.roa (hash: eltS6TqFGo2PicugCL3Z+e5ML3gTGzg3RZI9Plv8FIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5e:0d:b9:45:96:d5:76:b0:c2:55:d6:7f:75:43:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Validity
Not Before: Nov 15 04:01:30 2026 GMT
Not After : Nov 16 04:01:30 2026 GMT
Subject: CN=83f2727f256731dae6e37c02341ad8f2ace48cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:87:18:59:cf:dc:ac:be:f2:df:2d:ad:ff:7b:
9d:d0:5c:37:ff:3e:4f:36:19:fd:a8:10:87:cb:25:
39:c2:5d:bd:2e:2f:50:0b:5a:76:e7:3e:a6:04:c1:
6f:86:25:82:3e:6a:d0:01:cd:07:c8:f4:94:c7:25:
49:ae:d9:f4:f2:2c:1d:e3:50:04:98:9b:93:ba:26:
27:44:80:ac:49:c0:f1:4c:ae:bd:ac:e7:be:2b:3d:
5d:a1:ca:c0:cd:d4:f2:1b:03:0f:4f:8e:09:8c:19:
2b:61:6b:55:c2:d6:86:91:79:09:19:e0:e8:b0:0c:
e1:55:ca:08:00:c6:04:c5:41:8b:b4:31:5f:5d:e1:
58:0f:84:81:4e:0d:3d:a3:c4:89:78:f1:1f:df:ea:
91:91:45:eb:45:88:54:89:28:e1:b5:fc:3e:1b:7b:
57:8b:a1:74:d1:0a:30:44:05:36:41:cd:54:cb:d8:
89:66:a4:6f:92:75:14:70:b8:a2:fb:d9:aa:b2:50:
51:51:ca:ab:d6:3f:23:8b:b9:e3:53:16:2a:e0:d2:
37:6b:7e:fc:53:94:80:b7:eb:0f:ac:f3:6d:fe:81:
81:3f:d0:51:47:59:7c:51:6e:0f:88:74:46:3b:fd:
c1:7a:4c:2d:fc:23:eb:0c:3a:b8:0d:71:7d:c4:16:
75:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F2:72:7F:25:67:31:DA:E6:E3:7C:02:34:1A:D8:F2:AC:E4:8C:C6
X509v3 Authority Key Identifier:
keyid:35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ac:96:86:60:45:2b:73:bb:03:1d:61:66:8f:3c:2d:63:5b:
d3:5b:db:08:0f:47:87:f2:93:5a:9e:b6:3c:0c:0a:13:74:4a:
b2:4c:3d:5e:9c:3b:80:47:4f:79:3b:b5:21:27:71:19:cb:27:
85:52:a4:af:f2:39:b3:27:f7:5a:50:52:9b:a3:ff:3f:5d:e9:
e5:e5:74:8f:d6:7b:68:b8:c3:b7:7c:e4:3a:e3:54:e3:a4:c0:
d8:5d:d1:cc:12:4a:4d:3c:b2:f7:f9:40:30:83:3c:f7:2d:27:
35:2a:4a:c0:b8:89:aa:c0:1d:c3:bd:0d:94:a0:68:0b:d4:19:
00:3d:8d:2b:52:ad:06:01:4d:3d:80:19:35:6d:99:b9:69:6f:
24:81:f6:aa:da:c9:e1:40:c7:74:1a:de:a6:ad:79:17:b1:3a:
37:25:81:3b:83:04:03:ed:c1:cf:a2:0f:f7:03:9f:a8:ad:f4:
6c:80:08:10:e8:69:91:ea:bc:df:b0:14:b7:88:10:7e:5d:5b:
76:d7:0d:ac:f5:78:a1:92:af:fe:bb:ba:2f:14:2b:10:d3:70:
c0:15:d4:62:7c:c5:70:4b:63:29:45:b2:04:24:af:3e:d1:43:
f5:10:14:b5:c1:1d:2c:7e:21:ca:c1:c6:20:73:0f:64:5b:cc:
85:19:e9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:43:05 2026 by rpki-client