Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
File: NZTKzdk15Fz3HGFngKGx1Kpox7U.mft (raw, json)
Hash identifier: 7My4ZHVPoXA/y90aR/1IaUNmA0Iv8ZNaW69RQZw6xqM=
Subject key identifier: 1D:D6:4F:8C:9D:1E:D3:8F:95:F1:82:20:80:37:07:D1:00:42:3B:32
Authority key identifier: 35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
Certificate issuer: /CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Certificate serial: 019D265F512BB3E8262A72BB9935036150A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 19:01:14 +0000
Manifest this update: Wed 25 Mar 2026 19:01:14 +0000
Manifest next update: Thu 26 Mar 2026 19:01:14 +0000
Files and hashes: 1: NZTKzdk15Fz3HGFngKGx1Kpox7U.crl (hash: eoM/MGnmajL5AVRH6D+mFLjENx31ThafDuJkJg4Bmvk=)
2: Wdq9UIvFzgDqiYju4znORuRnk4A.roa (hash: eltS6TqFGo2PicugCL3Z+e5ML3gTGzg3RZI9Plv8FIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:51:2b:b3:e8:26:2a:72:bb:99:35:03:61:50:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Validity
Not Before: Mar 25 19:01:14 2026 GMT
Not After : Mar 26 19:01:14 2026 GMT
Subject: CN=1dd64f8c9d1ed38f95f18220803707d100423b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:35:d2:52:ed:0e:c5:d7:d9:b9:73:0b:c9:2e:
6c:39:ee:5d:7c:ba:78:6a:28:ad:8f:dd:8d:b6:18:
20:db:bf:b4:43:8e:5b:11:e0:3c:34:72:00:d3:ad:
50:3a:cc:e2:0d:f6:1b:be:8f:b3:82:2f:64:97:00:
fa:8f:52:fd:11:23:99:f0:de:42:60:02:80:21:41:
8d:84:e5:b4:c2:33:9d:65:95:54:8c:f1:2b:c3:7b:
9c:79:4c:ad:9c:49:dc:49:2b:ed:04:c2:fd:44:96:
df:38:c6:98:64:8a:96:20:e2:60:f1:7a:d7:0e:51:
39:d7:ad:e4:cf:d8:70:c5:cc:4d:4c:79:e4:86:ac:
42:e2:db:b1:19:13:0c:29:f1:1e:e3:58:84:2b:32:
e2:42:8b:6f:be:d6:e6:cb:9a:dc:fe:53:a3:40:11:
85:40:f6:fc:c6:bc:1b:8f:a2:fa:2b:b3:fb:0c:81:
3f:b1:6c:2d:06:f7:4e:b5:f1:e0:c1:d9:3e:f9:84:
a0:1d:67:f9:1a:13:53:ea:b5:e9:a9:e1:2f:6e:5e:
c5:d9:89:61:8c:e4:e5:15:a5:65:99:18:58:97:c8:
5e:62:5f:9c:e9:39:0b:4c:31:55:34:de:8b:30:77:
ed:95:01:0d:0e:85:da:8a:34:d1:ba:e6:db:1b:87:
8b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D6:4F:8C:9D:1E:D3:8F:95:F1:82:20:80:37:07:D1:00:42:3B:32
X509v3 Authority Key Identifier:
keyid:35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:4e:2a:9e:84:11:0c:37:d0:de:e6:c6:29:07:53:66:ce:6e:
e5:d0:ac:62:96:cf:3e:3f:e1:7a:a2:8b:46:5f:ff:27:64:23:
c6:dc:6e:dc:e7:32:20:6d:d9:3a:ae:36:c8:59:18:c2:3f:ca:
b5:8a:a3:53:c6:73:4a:a2:86:16:6d:b0:ba:38:8e:b1:ba:ef:
38:e7:ee:c3:33:c1:99:da:43:89:b6:eb:d9:a7:fc:cc:9b:0b:
97:ca:94:81:4d:ae:79:54:e3:7c:8d:d2:e7:18:06:df:df:72:
12:30:7d:be:dd:62:36:ee:81:4d:65:bd:37:80:04:a4:e2:93:
aa:6d:32:e6:85:65:8f:f0:cb:73:0e:9e:13:f9:bd:26:7a:93:
7d:a7:1a:3b:30:09:f1:d8:37:db:f0:ec:b0:03:01:d1:59:42:
0f:d7:d9:5e:21:09:d3:ec:db:de:3c:51:17:f5:0a:07:0d:e9:
ba:68:29:cb:44:44:fc:a4:44:fa:51:c9:d1:af:80:41:c7:8b:
c9:6d:74:12:ef:6b:a3:51:38:0c:59:3f:0c:f7:e2:23:1b:4e:
3b:30:b3:30:8b:e6:55:72:66:58:23:61:cd:12:d6:a4:f5:a8:
e9:8d:75:16:84:00:91:b3:38:f5:43:eb:20:9d:a6:e0:e1:44:
7d:27:c4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:49 2026 by rpki-client