Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
File: Nz2PVXyuGOI12Ti608-uF8kbneY.mft (raw, json)
Hash identifier: imgf50QGlb8SFAYnudd23UaviNgkg7/wCfC5xWOMvFQ=
Subject key identifier: 19:1A:D1:D6:8B:FD:2A:A2:1B:36:CF:FC:2D:6E:18:F0:9F:4F:A3:21
Authority key identifier: 37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
Certificate issuer: /CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Certificate serial: 019D2628069B6A5CF67013F56BA724332F11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
Manifest number: 0F47
Signing time: Wed 25 Mar 2026 18:00:50 +0000
Manifest this update: Wed 25 Mar 2026 18:00:50 +0000
Manifest next update: Thu 26 Mar 2026 18:00:50 +0000
Files and hashes: 1: Nz2PVXyuGOI12Ti608-uF8kbneY.crl (hash: C1hioVpiPf3VrxGkLfKnJmuZJHux1mqRXgThHMTEiFA=)
2: ujsftfvLfUwDJ11Q7jqPTwZHvjs.roa (hash: b27HdQ5e99kb9xI2IR4xtsvZ4mT9ALpQe3hu34f+Ci0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:06:9b:6a:5c:f6:70:13:f5:6b:a7:24:33:2f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Validity
Not Before: Mar 25 18:00:50 2026 GMT
Not After : Mar 26 18:00:50 2026 GMT
Subject: CN=191ad1d68bfd2aa21b36cffc2d6e18f09f4fa321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6e:f1:ad:ea:04:86:0a:96:61:56:df:e0:68:
ef:d2:a4:f9:40:7a:8f:c3:2b:20:72:12:04:11:87:
90:74:37:c8:cf:d5:73:82:8a:49:97:4c:91:ef:f1:
3d:29:d3:11:5d:f5:8a:ef:64:32:54:f5:1d:79:b7:
41:ec:5b:05:5b:3c:35:22:13:c4:17:b2:a7:5b:d3:
67:92:c2:38:02:b4:3f:66:c0:0b:ba:f1:9c:f3:a3:
67:03:95:f5:de:d5:ea:2d:0d:e2:93:6b:ca:05:5e:
9a:c9:e8:3a:97:b7:64:84:e8:05:df:af:5d:20:05:
c1:4e:04:34:8c:eb:0e:3e:b9:42:ae:1e:6d:e6:a2:
92:2e:9f:ca:d4:51:8d:35:b8:be:82:71:49:6c:e6:
69:f9:eb:18:dc:c9:d0:3e:34:99:c2:85:5f:92:78:
0c:dc:5f:89:d4:8f:5e:5f:d9:d9:5d:ee:98:7b:42:
b0:69:39:69:3a:e0:3b:89:51:d1:ce:23:8c:16:83:
f9:1f:62:06:be:0d:f9:69:38:09:82:b2:59:13:cd:
a1:c7:d3:a7:9c:1e:eb:f9:c1:08:07:c7:64:ae:21:
b8:e7:1d:ce:44:07:35:7b:bb:19:be:25:95:a9:73:
5d:2a:e6:9a:e7:16:cd:6c:27:a0:ef:73:7e:cc:c2:
24:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1A:D1:D6:8B:FD:2A:A2:1B:36:CF:FC:2D:6E:18:F0:9F:4F:A3:21
X509v3 Authority Key Identifier:
keyid:37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:aa:71:c5:2b:a9:57:d4:94:54:c3:bb:ca:a4:63:b0:d6:08:
ab:0c:fc:6a:d0:8d:e5:a3:66:9c:8d:dd:c4:23:a0:ad:78:85:
eb:fe:bd:c8:a4:34:ce:e7:6c:49:9c:fd:da:ba:c6:3c:86:41:
2e:1a:0c:4a:d4:dc:0d:88:47:f7:5e:5d:1d:06:a0:8f:e2:ba:
12:e0:5c:e0:5d:4e:d5:9c:66:eb:7d:f4:f9:03:d0:54:f5:77:
26:b4:59:15:64:6f:5c:96:1c:e8:ab:5d:c0:2c:66:fb:1f:29:
ea:68:87:36:f3:83:cf:a5:f4:12:18:42:8f:e0:fd:fc:0d:97:
89:30:00:8f:59:6e:fc:2e:42:c5:b5:e7:00:b8:b6:0c:bf:e8:
21:f2:68:b5:c2:e8:d6:47:3b:34:ee:04:fd:0e:f5:8a:d7:9f:
a6:00:b5:41:51:c2:fc:84:8f:7d:e4:ef:08:0f:5c:b3:4a:90:
5b:70:04:94:6c:5b:ce:42:e7:81:8a:95:2e:a4:be:a4:c3:70:
0a:02:7d:9e:b4:59:b2:c9:d4:fa:c6:5c:23:9c:89:8b:2c:c6:
fd:c1:72:2d:4d:47:78:29:ad:92:98:82:d6:e4:c3:ed:af:23:
9e:11:14:1d:39:38:22:ca:e7:ad:58:cf:02:56:2e:43:7a:eb:
db:f3:64:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:17 2026 by rpki-client