Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.mft
File: RQzxzHOCYRH_l1ZlsDomSLuMjRA.mft (raw, json)
Hash identifier: BGXEWAmrL+sF6iH8eOeL7raivPWaEuGUPSgBpVbdaDw=
Subject key identifier: 5B:2A:2C:AA:81:CA:45:0C:94:1A:F8:57:D3:8D:93:63:C4:0F:10:93
Authority key identifier: 45:0C:F1:CC:73:82:61:11:FF:97:56:65:B0:3A:26:48:BB:8C:8D:10
Certificate issuer: /CN=450cf1cc73826111ff975665b03a2648bb8c8d10
Certificate serial: 019E1D90E7390515DE6B391583AE84B03C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQzxzHOCYRH_l1ZlsDomSLuMjRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.mft
Manifest number: 4D
Signing time: Tue 12 May 2026 19:01:35 +0000
Manifest this update: Tue 12 May 2026 19:01:35 +0000
Manifest next update: Wed 13 May 2026 19:01:35 +0000
Files and hashes: 1: 9YAXEYjhmhkxq2c5qhBIIlTvS2E.roa (hash: 55R+jdR0UJQmE1oLQNFzIpJd7w8rR1Qa8V5eWHVN66M=)
2: Kl8Av8HTSqqtsIKPFJ9eAM1tcW8.asa (hash: 6I/UFrfGHL7pXTEoCzAXCGu9B83vEUFGM5JCdXCnrA0=)
3: RQzxzHOCYRH_l1ZlsDomSLuMjRA.crl (hash: AO+EAWP0bk/cUslSiOnu0mK/tBSuQw2Kvoky2wkEL1s=)
4: Rmzfw1Pn6oVl0YpHmqW6MW62cKY.roa (hash: ez1Yu6hc8zQKp0+BPfF1FCgIwY7OKVfVqthIubkAHaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQzxzHOCYRH_l1ZlsDomSLuMjRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:e7:39:05:15:de:6b:39:15:83:ae:84:b0:3c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450cf1cc73826111ff975665b03a2648bb8c8d10
Validity
Not Before: May 12 19:01:35 2026 GMT
Not After : May 13 19:01:35 2026 GMT
Subject: CN=5b2a2caa81ca450c941af857d38d9363c40f1093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ca:10:36:67:b6:88:04:94:3f:b7:7e:7d:e7:
6b:61:09:db:3d:39:80:5b:7f:23:ad:9e:f6:45:27:
44:48:2d:0e:65:6e:68:89:d8:30:d3:84:05:37:b5:
9f:2b:48:50:76:de:38:25:67:40:5e:67:4b:68:8b:
32:b9:b6:fb:5c:7f:b9:a4:94:0d:04:5f:a3:30:a1:
fc:49:b6:18:17:af:d0:aa:e2:49:8c:d5:5d:06:e7:
5a:0c:d9:a3:09:01:4c:b5:3e:c2:0c:2a:fe:07:21:
5e:15:84:9d:0b:6d:a5:34:15:bd:35:34:f6:48:a3:
44:a4:10:7f:62:6c:c2:43:2d:16:86:cc:95:c0:87:
85:6b:ec:05:7a:b1:68:1d:25:38:92:64:91:86:d3:
46:9d:5d:c4:ea:c2:60:34:ac:47:1a:43:40:9f:13:
ee:cf:2d:9a:bb:56:48:da:7c:11:b9:a6:ae:4a:70:
9d:37:cd:f6:87:5f:70:b3:93:a0:86:67:76:cb:5f:
6d:fc:eb:ec:34:a6:39:c6:3e:b5:dc:c9:31:dd:09:
03:a4:03:9f:ae:63:58:d6:83:00:1f:b8:ef:c9:fa:
82:73:46:ff:19:b5:09:72:63:45:e5:f1:33:7d:33:
41:90:80:98:c0:6f:24:d0:c7:46:40:21:dd:64:b1:
3c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2A:2C:AA:81:CA:45:0C:94:1A:F8:57:D3:8D:93:63:C4:0F:10:93
X509v3 Authority Key Identifier:
keyid:45:0C:F1:CC:73:82:61:11:FF:97:56:65:B0:3A:26:48:BB:8C:8D:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQzxzHOCYRH_l1ZlsDomSLuMjRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:4c:ed:38:12:ef:f3:2e:02:f5:fd:4b:5d:0c:13:23:7a:43:
33:d3:7b:5c:ff:0c:e6:26:92:ce:22:1b:c6:6a:52:6e:d1:06:
ba:09:67:96:35:b9:51:01:c2:3f:29:6e:8d:d1:a6:bc:ce:b3:
17:d0:0f:17:e6:43:a5:4c:86:1b:74:bf:91:2b:ba:d9:ad:42:
30:a2:6c:f6:7e:73:79:46:33:19:b9:c4:20:73:20:76:46:a9:
41:9b:2c:1a:f8:03:cd:b7:c2:fc:9a:93:98:d2:0e:0b:f3:e9:
a9:fb:19:a3:b0:a3:d1:6e:68:cf:27:e5:3b:5d:d5:be:ea:b2:
f6:b4:ad:8f:42:9f:c9:cf:ac:67:d1:ef:d6:38:fc:a8:bd:ae:
3f:d1:ca:a9:51:06:78:be:97:cf:dd:77:fe:fe:58:bc:87:c4:
60:8c:ba:f1:77:3d:50:8c:a5:b0:27:2b:4e:11:18:9a:ab:25:
ea:e3:63:cc:bc:f5:d1:db:e1:1c:df:70:73:f5:96:63:5b:fa:
22:a6:a2:e9:c5:9c:e2:f5:f2:8d:3d:a3:31:25:d5:94:b0:fe:
7a:a5:ff:7d:de:a9:3d:10:87:c1:18:24:22:a9:74:ae:85:e3:
63:81:62:e1:c0:a2:65:1f:31:c2:90:01:60:ac:54:73:55:5c:
a7:8d:32:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:48:03 2026 by rpki-client