Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
File: RZsv0AU73X53dTmNsWO-6HckeKU.mft (raw, json)
Hash identifier: 8jRoubQwFcxLRpaowbNPmhYQeR8su15nzoCYojoNybo=
Subject key identifier: 22:15:08:64:0C:00:68:F5:F9:04:65:8A:C9:7C:84:D1:9F:DC:97:36
Authority key identifier: 45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
Certificate issuer: /CN=459b2fd0053bdd7e7775398db163bee8772478a5
Certificate serial: 019D3263767EB51790E31983750F2D2C37CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
Manifest number: 1890
Signing time: Sat 28 Mar 2026 03:01:12 +0000
Manifest this update: Sat 28 Mar 2026 03:01:12 +0000
Manifest next update: Sun 29 Mar 2026 03:01:12 +0000
Files and hashes: 1: 1HXGb5-BWji6FxKqR9J69GxxjeY.roa (hash: +4VLoXs2I/t3CPnVmm9jbZnZFGbEot/glqmRqD+Blr8=)
2: RZsv0AU73X53dTmNsWO-6HckeKU.crl (hash: gcSIjOAy6O2eCGYL48y5On26LH2YUjz9nOigMtkqFbk=)
3: WQdZNfyoXAF_mZl28cfENCrtIMs.roa (hash: U3LDO+4WO64Jt5h3Mz2CbjqUHfSHcu4yyw0WNvXOY9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:76:7e:b5:17:90:e3:19:83:75:0f:2d:2c:37:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459b2fd0053bdd7e7775398db163bee8772478a5
Validity
Not Before: Mar 28 03:01:12 2026 GMT
Not After : Mar 29 03:01:12 2026 GMT
Subject: CN=221508640c0068f5f904658ac97c84d19fdc9736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:85:52:a7:31:b9:77:d4:fc:56:b4:cf:b5:f7:
dc:72:bb:c1:c4:48:67:d4:68:89:1c:a9:60:a9:bd:
17:aa:50:61:e8:d4:bb:5c:df:33:e9:6a:55:7f:3a:
1a:6e:7b:87:d3:ad:b7:09:74:9b:56:11:44:85:00:
c6:be:4c:90:53:f4:b7:b4:77:ab:48:5d:d3:93:88:
64:b1:8e:8a:ad:95:cc:70:0b:4f:d6:7d:7d:c4:a9:
70:3e:a0:3a:9a:ee:8d:0e:a8:04:d2:68:be:3a:61:
4c:56:75:2a:3a:0e:e4:bc:9b:d8:38:00:14:b9:98:
c2:46:78:81:f4:91:70:a6:ff:74:40:99:d9:75:01:
95:c3:4d:ae:a8:e0:58:72:6a:21:81:0c:0e:ba:2f:
91:e9:18:61:df:a6:ea:81:39:ba:95:e7:8f:de:f8:
ba:23:91:0e:c6:da:95:ee:da:47:07:ee:fe:88:2a:
ad:e6:6d:c0:fa:f8:89:ee:4f:57:58:c5:5f:36:6c:
b9:9c:76:89:05:f9:69:bc:9d:9b:24:1c:92:50:cf:
38:69:25:33:c1:e2:44:27:ff:9c:b6:e3:70:7a:44:
03:58:3e:ac:43:86:21:2b:31:31:bc:7f:13:9d:4b:
c7:05:c6:83:74:d7:1a:0e:20:fe:80:c3:d4:4c:b1:
02:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:15:08:64:0C:00:68:F5:F9:04:65:8A:C9:7C:84:D1:9F:DC:97:36
X509v3 Authority Key Identifier:
keyid:45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:30:a7:f2:b7:7e:bf:3d:87:98:47:8c:a9:df:a5:d4:4e:94:
4f:3e:7f:10:9d:a4:52:e7:11:a3:55:00:ea:e9:9c:87:6a:16:
02:40:a9:dd:15:84:e9:ed:e3:60:10:86:17:ff:75:d1:15:4e:
43:b8:35:50:1f:aa:7e:f6:ae:33:a1:14:ab:9f:de:42:b8:f3:
0b:cb:c0:cb:9e:b1:86:d1:8c:02:38:c4:be:ca:80:9d:a4:8d:
53:86:19:aa:d5:b5:a4:44:e5:61:2a:ef:c6:63:2c:64:00:30:
7f:18:51:77:e5:63:b7:e2:15:05:2c:9f:01:69:46:7c:1a:71:
68:a6:b7:57:9c:e8:15:26:3b:af:c5:e2:df:65:4d:e7:6a:f0:
7a:26:3b:5d:16:09:f7:17:cc:59:24:b9:21:c2:bd:6e:95:25:
cb:63:04:a2:20:13:57:a5:ec:86:40:91:3a:23:7d:5e:42:b0:
6a:24:4e:ae:e2:57:75:9d:26:9c:c2:b3:e3:aa:10:5e:54:f7:
ac:37:4c:53:7d:2b:12:4c:cb:6b:b0:0a:8d:3d:b0:62:ea:a0:
c5:de:ca:dd:c0:07:cf:8c:6f:f2:16:dc:a7:69:44:3f:75:dc:
64:5b:cf:82:28:f6:44:cf:10:0e:0b:03:45:5c:92:aa:a4:a4:
d5:69:0d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:48:56 2026 by rpki-client