Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
File: RZsv0AU73X53dTmNsWO-6HckeKU.mft (raw, json)
Hash identifier: 5fHYqEh+6QNFOh9YI50lFzhEvhQw6bJGskukugRJBOE=
Subject key identifier: 0A:78:8E:B0:B0:7A:5D:FC:2C:85:BE:11:39:2E:8B:E0:E9:2B:0C:6C
Authority key identifier: 45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
Certificate issuer: /CN=459b2fd0053bdd7e7775398db163bee8772478a5
Certificate serial: 019E1DFDF4C599074574B5E8C48D9B759E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 21:00:42 +0000
Manifest this update: Tue 12 May 2026 21:00:42 +0000
Manifest next update: Wed 13 May 2026 21:00:42 +0000
Files and hashes: 1: 1HXGb5-BWji6FxKqR9J69GxxjeY.roa (hash: +4VLoXs2I/t3CPnVmm9jbZnZFGbEot/glqmRqD+Blr8=)
2: RZsv0AU73X53dTmNsWO-6HckeKU.crl (hash: 0caoWPFUQoWrpyiy8V8/aUMzQ1KOn5KLoiFCvhOnuEA=)
3: WQdZNfyoXAF_mZl28cfENCrtIMs.roa (hash: U3LDO+4WO64Jt5h3Mz2CbjqUHfSHcu4yyw0WNvXOY9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:f4:c5:99:07:45:74:b5:e8:c4:8d:9b:75:9e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459b2fd0053bdd7e7775398db163bee8772478a5
Validity
Not Before: May 12 21:00:42 2026 GMT
Not After : May 13 21:00:42 2026 GMT
Subject: CN=0a788eb0b07a5dfc2c85be11392e8be0e92b0c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:76:71:00:29:8d:5f:ce:da:13:e4:ba:31:2e:
f0:31:d1:5d:35:3e:dd:53:03:1d:d2:3c:b4:10:98:
10:56:e9:c1:3f:ca:72:89:9e:5c:5d:65:e2:b4:af:
80:b3:34:a3:b7:87:63:87:a1:fa:05:ef:e5:0a:2b:
85:68:d0:f2:e4:9a:e7:de:a4:ec:1f:b2:ab:58:01:
d9:fa:3c:04:b7:8a:f3:41:fb:31:d4:da:82:96:05:
29:d8:31:b6:a8:37:54:4a:0b:d8:74:e4:87:3a:bf:
f9:ee:b8:0e:6f:52:43:30:16:2d:a0:91:49:a0:b0:
5e:2c:22:13:22:3f:c7:09:6c:08:a3:1a:f9:a0:7d:
c1:c5:64:e9:50:ea:74:38:67:1e:8a:0e:dc:56:96:
de:c9:0c:d9:7a:14:61:2a:fc:e5:49:a4:2a:0b:6e:
8c:52:70:45:d0:3d:9f:7b:6b:99:b0:4f:64:81:d6:
b7:c9:a9:52:3a:8f:31:e2:5b:1d:e4:09:41:d8:90:
c0:1f:ba:bf:ed:67:0e:5f:b1:df:87:a1:d8:44:89:
cd:87:18:9c:c8:fb:25:24:bb:2b:e8:f9:5b:27:02:
c8:ff:03:4d:22:0e:a8:5e:34:1b:70:ab:85:60:8f:
c8:08:ad:68:6c:b3:fb:11:10:16:2a:37:0c:73:11:
bd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:78:8E:B0:B0:7A:5D:FC:2C:85:BE:11:39:2E:8B:E0:E9:2B:0C:6C
X509v3 Authority Key Identifier:
keyid:45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:25:fc:05:75:4f:3a:3b:64:80:0f:48:5e:c8:56:a4:33:92:
93:a4:65:5a:b0:d9:f5:9b:8e:d0:e2:01:e5:09:d4:e3:8f:e7:
c7:6c:27:21:cc:cf:04:4d:c5:04:1e:7f:e4:d3:83:16:cd:6a:
a2:7f:b6:8e:2e:2d:1c:4a:34:f2:26:7e:12:45:e4:e8:ad:5d:
4d:e1:e9:ed:c2:07:e1:d0:89:67:87:23:d1:fd:69:33:07:56:
f2:f1:72:c2:fa:77:cc:d0:95:0c:ac:4b:4a:75:f0:b5:c1:4e:
52:82:25:94:dc:ab:e9:52:6f:3b:d2:5c:c4:b9:32:f0:2a:cf:
4e:1f:ab:b1:21:10:53:fb:bb:63:5d:4b:01:59:9e:62:a3:57:
7a:3d:52:26:6b:86:4a:20:0a:f3:8f:8f:b9:71:9d:40:0c:14:
27:04:b2:a6:a5:c6:e7:ed:b2:d3:4d:c1:fb:9b:0c:28:26:48:
fc:ea:86:db:f8:66:38:ed:07:65:34:d8:33:46:54:6d:45:db:
49:4a:5b:56:dd:15:4a:df:46:37:05:30:46:78:32:80:82:c7:
66:62:94:53:fe:67:b6:3c:d1:41:40:a9:ee:32:0d:52:c8:e8:
bd:74:8f:1f:21:4b:4e:83:f4:66:a7:ae:dd:85:40:c0:3c:5c:
8d:35:50:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:11:03 2026 by rpki-client