Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
File: NZTKzdk15Fz3HGFngKGx1Kpox7U.mft (raw, json)
Hash identifier: gOJdewCtnOTsISHrRds+ZBzyQ71QW/MrHbPcI7nhTgw=
Subject key identifier: 1C:6A:A5:6C:34:7E:DB:4F:66:AE:ED:9C:89:87:17:11:3C:60:D5:32
Authority key identifier: 35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
Certificate issuer: /CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Certificate serial: 019F905A50E06D7E1BCEF551BBCE2F0AD0DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 19:01:05 +0000
Manifest this update: Thu 23 Jul 2026 19:01:05 +0000
Manifest next update: Fri 24 Jul 2026 19:01:05 +0000
Files and hashes: 1: NZTKzdk15Fz3HGFngKGx1Kpox7U.crl (hash: 2AbYvWK3tk6SnC0MNB5OI7mVmS3o/HJ43CZQme0FhKU=)
2: Wdq9UIvFzgDqiYju4znORuRnk4A.roa (hash: eltS6TqFGo2PicugCL3Z+e5ML3gTGzg3RZI9Plv8FIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:50:e0:6d:7e:1b:ce:f5:51:bb:ce:2f:0a:d0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Validity
Not Before: Jul 23 19:01:05 2026 GMT
Not After : Jul 24 19:01:05 2026 GMT
Subject: CN=1c6aa56c347edb4f66aeed9c898717113c60d532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a5:84:2f:2e:74:dc:81:22:bd:e1:c0:bd:b1:
ad:19:48:49:aa:9d:57:be:7f:3e:30:0b:50:15:7a:
40:53:c0:be:99:93:3d:96:f8:98:cf:15:02:7d:af:
4c:15:59:d8:38:e6:7f:86:5a:33:11:13:23:07:aa:
59:7f:53:a5:63:e3:82:79:b9:03:58:7e:3e:95:07:
d6:e8:5d:8f:5c:1e:8c:04:04:bb:25:98:e2:9b:39:
bd:b0:60:16:8a:78:52:a9:9a:a1:d8:af:77:8d:a9:
0a:d8:b9:79:c8:fc:e1:86:dc:8c:11:c3:70:2c:1c:
63:92:d9:ff:47:ef:e3:cd:e7:9c:b7:fb:4a:7f:55:
00:ab:fe:4b:1d:03:d9:52:8e:8f:54:a7:1f:ad:89:
99:16:8e:81:c2:97:5e:95:f3:8e:a6:b2:a2:4d:96:
28:a4:ab:c1:c0:8b:59:71:9a:c2:8a:d6:91:2f:cc:
3f:08:67:61:7c:30:88:62:8d:16:a9:f7:ac:67:01:
bf:c9:ca:57:54:3f:3f:d6:3b:74:72:65:ef:d2:59:
ea:19:e5:aa:4b:f1:23:7a:bc:0f:a1:cd:ef:3a:3b:
c8:ee:e8:67:c1:6d:f6:08:7d:2a:2a:5b:e0:82:a8:
7c:86:6e:9d:24:65:b0:38:4a:6c:cc:6c:45:12:04:
c3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6A:A5:6C:34:7E:DB:4F:66:AE:ED:9C:89:87:17:11:3C:60:D5:32
X509v3 Authority Key Identifier:
keyid:35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:e9:c4:a8:18:c5:f7:7d:95:ab:e9:d4:6f:4a:4c:20:59:0b:
e7:c2:87:46:fb:14:05:8f:df:26:3b:1b:30:ad:77:be:8a:15:
56:81:47:5a:eb:55:09:74:a6:ff:24:05:5d:14:03:b9:a8:d1:
82:35:0e:62:66:9d:17:ee:ce:2e:84:41:7e:90:68:ad:69:60:
5e:f6:13:86:49:31:0b:2e:90:f7:be:a8:2d:ce:e7:8a:90:48:
54:ae:c0:84:75:c3:a8:78:9e:d0:c3:c3:8b:37:9a:22:03:97:
39:dc:a8:f3:48:16:d1:41:29:0f:7e:d7:0e:61:98:d2:87:09:
8b:09:9b:b7:7c:ce:33:50:d2:39:58:b6:f2:9b:e5:b0:f5:d9:
fa:ae:b6:23:3d:62:9f:39:4b:de:7b:50:2c:4b:45:ca:f1:87:
b5:aa:4f:61:44:61:b5:72:b8:50:61:9c:6a:bc:65:47:e9:91:
36:00:52:ee:69:7c:98:7f:f1:c5:4d:f3:58:ef:72:56:39:3e:
d4:ad:f7:13:1d:d1:f2:63:83:7e:69:80:50:cf:02:1d:ac:00:
8b:9e:2e:ff:a6:8d:c2:4e:75:dc:23:e3:7b:b5:ff:f8:81:b9:
13:81:86:1d:56:b6:79:d1:de:74:41:40:9f:9d:5f:6e:ab:7b:
b4:b2:b0:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWlDgbX4bzvVRu84vCtDdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OTRjYWNkZDkzNWU0NWNmNzFjNjE2NzgwYTFiMWQ0YWE2
OGM3YjUwHhcNMjYwNzIzMTkwMTA1WhcNMjYwNzI0MTkwMTA1WjAzMTEwLwYDVQQD
EygxYzZhYTU2YzM0N2VkYjRmNjZhZWVkOWM4OTg3MTcxMTNjNjBkNTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36WELy503IEiveHAvbGtGUhJqp1X
vn8+MAtQFXpAU8C+mZM9lviYzxUCfa9MFVnYOOZ/hlozERMjB6pZf1OlY+OCebkD
WH4+lQfW6F2PXB6MBAS7JZjimzm9sGAWinhSqZqh2K93jakK2Ll5yPzhhtyMEcNw
LBxjktn/R+/jzeect/tKf1UAq/5LHQPZUo6PVKcfrYmZFo6BwpdelfOOprKiTZYo
pKvBwItZcZrCitaRL8w/CGdhfDCIYo0WqfesZwG/ycpXVD8/1jt0cmXv0lnqGeWq
S/EjerwPoc3vOjvI7uhnwW32CH0qKlvggqh8hm6dJGWwOEpszGxFEgTD5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxqpWw0fttPZq7tnImHFxE8YNUyMB8GA1UdIwQY
MBaAFDWUys3ZNeRc9xxhZ4ChsdSqaMe1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlpUS3pkazE1RnozSEdGbmdLR3gxS3BveDdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS81Y2IyNDUtNDJhMi00OThmLWI3YjIt
NGFiZGMyYmI5ZmEzLzEvTlpUS3pkazE1RnozSEdGbmdLR3gxS3BveDdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS81Y2IyNDUtNDJhMi00OThmLWI3YjItNGFiZGMyYmI5ZmEz
LzEvTlpUS3pkazE1RnozSEdGbmdLR3gxS3BveDdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsOnEqBjF
932Vq+nUb0pMIFkL58KHRvsUBY/fJjsbMK13vooVVoFHWutVCXSm/yQFXRQDuajR
gjUOYmadF+7OLoRBfpBorWlgXvYThkkxCy6Q976oLc7nipBIVK7AhHXDqHie0MPD
izeaIgOXOdyo80gW0UEpD37XDmGY0ocJiwmbt3zOM1DSOVi28pvlsPXZ+q62Iz1i
nzlL3ntQLEtFyvGHtapPYURhtXK4UGGcarxlR+mRNgBS7ml8mH/xxU3zWO9yVjk+
1K33Ex3R8mODfmmAUM8CHawAi54u/6aNwk513CPje7X/+IG5E4GGHVa2edHedEFA
n51fbqt7tLKwfw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:14:40 2026 by rpki-client