Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
File: NZTKzdk15Fz3HGFngKGx1Kpox7U.mft (raw, json)
Hash identifier: gggdppDigyePNPAJMVAxPe7NX0mGFAWaGsgsBwW2QMY=
Subject key identifier: 34:44:F8:30:AD:EF:1F:4C:AE:7D:45:41:AA:A6:DC:73:80:EF:40:84
Authority key identifier: 35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
Certificate issuer: /CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Certificate serial: 019E1D905AD0D1AE5998E75B4BA45DB3198F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 19:01:00 +0000
Manifest this update: Tue 12 May 2026 19:01:00 +0000
Manifest next update: Wed 13 May 2026 19:01:00 +0000
Files and hashes: 1: NZTKzdk15Fz3HGFngKGx1Kpox7U.crl (hash: TmiaJz042hHmwI5WNk8QlB60kzTbTLJwWY2v7o12BZ4=)
2: Wdq9UIvFzgDqiYju4znORuRnk4A.roa (hash: eltS6TqFGo2PicugCL3Z+e5ML3gTGzg3RZI9Plv8FIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:5a:d0:d1:ae:59:98:e7:5b:4b:a4:5d:b3:19:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Validity
Not Before: May 12 19:01:00 2026 GMT
Not After : May 13 19:01:00 2026 GMT
Subject: CN=3444f830adef1f4cae7d4541aaa6dc7380ef4084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bf:17:97:47:ae:ac:d2:c3:46:4e:eb:7b:21:
2f:34:78:d6:20:9a:f6:24:09:68:8d:e9:a8:30:c9:
87:b7:a6:77:85:34:8b:57:34:dd:7f:63:b6:a2:97:
e9:e1:6d:da:f9:79:5e:d9:73:c6:ba:6d:1b:35:17:
2b:4a:08:71:1d:c8:ad:54:0a:6c:e4:d0:3d:2c:df:
89:67:dc:0f:c7:22:9b:ba:ec:c9:11:09:a3:8b:7d:
ed:b3:93:b7:a0:ef:c5:b4:18:f9:84:c3:a3:f9:7d:
64:3f:f0:32:d3:a6:24:2f:56:a5:13:ce:8b:fc:bd:
a1:06:55:48:e0:c7:04:9b:d0:ee:9a:7b:d8:6c:e2:
ad:2c:6d:d3:5a:85:46:22:73:e0:d2:0d:a9:a5:82:
59:f5:9f:02:9a:57:88:e5:9e:10:b7:8d:2c:9b:44:
7c:b2:b7:a7:85:f5:9c:47:d8:96:41:6e:c2:15:44:
a7:1a:cb:f4:7e:a3:15:fc:b0:bd:91:c2:99:74:1b:
68:88:cb:7d:44:ca:32:71:f8:51:d9:24:10:5a:14:
c3:de:ae:f2:73:d8:7c:dd:dc:ac:39:bf:15:e1:f4:
87:38:9e:76:cd:1d:da:0b:0b:f7:16:56:11:b8:49:
04:b9:59:b8:12:86:81:c4:93:c9:93:01:33:32:b6:
fc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:44:F8:30:AD:EF:1F:4C:AE:7D:45:41:AA:A6:DC:73:80:EF:40:84
X509v3 Authority Key Identifier:
keyid:35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:28:99:c6:f8:d3:b7:f7:cf:ae:2c:86:e6:1e:6e:1c:56:75:
a2:d2:af:0d:5a:0c:e4:1e:97:7d:e3:48:f3:a7:10:5b:6d:ad:
c4:59:f9:7e:45:42:94:ac:03:ab:4b:39:a0:c1:69:c7:1c:4c:
8d:1c:ea:8d:85:1d:19:26:0e:ad:cb:20:35:a6:2b:fb:a1:eb:
57:da:d7:e0:1f:5b:fe:76:72:ad:d5:93:20:df:e0:b3:f0:55:
a3:63:b4:89:74:8e:49:41:aa:13:b3:8a:0a:90:15:18:b6:ad:
bb:89:d0:0b:0e:69:d0:a0:8c:a7:ad:c1:9f:8f:5d:1e:e4:1f:
b3:3a:3b:05:f1:1f:a7:7c:17:ac:36:08:cb:28:18:4f:9a:c0:
24:e1:d2:52:b1:2f:24:e9:59:75:b6:92:61:6a:6a:51:df:30:
53:0b:1d:db:97:79:c7:e7:17:84:f1:f2:a2:a9:3a:69:63:4b:
e0:4e:c6:e1:4f:01:b6:c1:8a:91:2a:e2:ee:e2:bc:14:3b:5e:
a1:5a:f7:59:18:b6:bc:83:8c:4e:cc:1a:b3:dc:4c:02:39:5a:
5f:7d:6a:48:d4:75:77:11:a7:61:c6:c4:d9:81:07:61:95:37:
82:e4:ad:60:cf:17:97:a9:44:97:b2:9a:90:a3:5f:ed:37:c0:
10:3e:6e:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkFrQ0a5ZmOdbS6RdsxmPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OTRjYWNkZDkzNWU0NWNmNzFjNjE2NzgwYTFiMWQ0YWE2
OGM3YjUwHhcNMjYwNTEyMTkwMTAwWhcNMjYwNTEzMTkwMTAwWjAzMTEwLwYDVQQD
EygzNDQ0ZjgzMGFkZWYxZjRjYWU3ZDQ1NDFhYWE2ZGM3MzgwZWY0MDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr8Xl0eurNLDRk7reyEvNHjWIJr2
JAlojemoMMmHt6Z3hTSLVzTdf2O2opfp4W3a+Xle2XPGum0bNRcrSghxHcitVAps
5NA9LN+JZ9wPxyKbuuzJEQmji33ts5O3oO/FtBj5hMOj+X1kP/Ay06YkL1alE86L
/L2hBlVI4McEm9DumnvYbOKtLG3TWoVGInPg0g2ppYJZ9Z8CmleI5Z4Qt40sm0R8
srenhfWcR9iWQW7CFUSnGsv0fqMV/LC9kcKZdBtoiMt9RMoycfhR2SQQWhTD3q7y
c9h83dysOb8V4fSHOJ52zR3aCwv3FlYRuEkEuVm4EoaBxJPJkwEzMrb8GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRE+DCt7x9Mrn1FQaqm3HOA70CEMB8GA1UdIwQY
MBaAFDWUys3ZNeRc9xxhZ4ChsdSqaMe1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlpUS3pkazE1RnozSEdGbmdLR3gxS3BveDdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS81Y2IyNDUtNDJhMi00OThmLWI3YjIt
NGFiZGMyYmI5ZmEzLzEvTlpUS3pkazE1RnozSEdGbmdLR3gxS3BveDdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS81Y2IyNDUtNDJhMi00OThmLWI3YjItNGFiZGMyYmI5ZmEz
LzEvTlpUS3pkazE1RnozSEdGbmdLR3gxS3BveDdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAryiZxvjT
t/fPriyG5h5uHFZ1otKvDVoM5B6XfeNI86cQW22txFn5fkVClKwDq0s5oMFpxxxM
jRzqjYUdGSYOrcsgNaYr+6HrV9rX4B9b/nZyrdWTIN/gs/BVo2O0iXSOSUGqE7OK
CpAVGLatu4nQCw5p0KCMp63Bn49dHuQfszo7BfEfp3wXrDYIyygYT5rAJOHSUrEv
JOlZdbaSYWpqUd8wUwsd25d5x+cXhPHyoqk6aWNL4E7G4U8BtsGKkSri7uK8FDte
oVr3WRi2vIOMTswas9xMAjlaX31qSNR1dxGnYcbE2YEHYZU3guStYM8Xl6lEl7Ka
kKNf7TfAED5u0A==
-----END CERTIFICATE-----
Generated at Wed May 13 07:19:21 2026 by rpki-client