Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
File: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft (raw, json)
Hash identifier: 25Tz7RcmiModuCNradcWorKfISk37v4dWxPscUak60I=
Subject key identifier: 42:CA:51:FC:A6:6F:28:07:F8:A0:34:77:D0:B1:EB:16:3F:07:41:05
Authority key identifier: 47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
Certificate issuer: /CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Certificate serial: 019E1DFE3B1FB1FC19777EA0C9A521E9054E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
Manifest number: 0C28
Signing time: Tue 12 May 2026 21:01:00 +0000
Manifest this update: Tue 12 May 2026 21:01:00 +0000
Manifest next update: Wed 13 May 2026 21:01:00 +0000
Files and hashes: 1: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl (hash: i9gMH270O9KlyObn9S0wOFJxiAA96h0dOndkikOVKaA=)
2: XHT_nValr2j6SKOfGPicLhiXyO4.roa (hash: H5XqJ+imumLxCFtabqMwr2EYqfcFyzubhax0NWhApw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:3b:1f:b1:fc:19:77:7e:a0:c9:a5:21:e9:05:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Validity
Not Before: May 12 21:01:00 2026 GMT
Not After : May 13 21:01:00 2026 GMT
Subject: CN=42ca51fca66f2807f8a03477d0b1eb163f074105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a6:cf:ac:1d:91:9e:ac:60:6c:c1:1d:de:8a:
66:38:22:6c:11:84:bb:ea:d1:7a:d2:a3:e6:1b:54:
29:ed:62:8c:3d:b0:88:50:98:78:32:a1:48:1b:b1:
01:1c:82:1c:20:f9:15:86:8d:e9:16:2a:09:2c:18:
5d:53:b1:bf:1b:ce:6c:4e:c7:6a:89:5f:7e:a3:a9:
01:ca:be:0b:77:ff:a5:5d:a0:32:23:79:8f:8b:7b:
c8:d6:2c:c6:89:6f:85:60:9c:41:5c:bd:b5:f7:c4:
dd:c4:b3:99:bb:91:0b:96:bf:45:9a:87:89:ec:ca:
62:ea:fc:04:c9:cc:a1:dd:f7:7f:c8:32:82:d1:63:
16:98:d7:90:92:c5:db:b5:04:77:fb:0d:17:44:ee:
8f:7f:08:c4:3f:45:01:4a:fb:df:85:e3:86:8b:f4:
46:56:28:5e:52:16:8d:94:8b:bc:3e:4f:00:d3:7c:
e3:54:ae:c9:e6:f7:7b:06:a7:c0:db:4d:14:29:e6:
63:da:07:d5:ca:f8:8c:6c:a9:e6:a8:9b:a1:2d:02:
d5:90:26:e3:6b:cc:63:e9:f1:5f:78:c9:0e:f8:40:
a1:4c:04:46:32:51:e3:56:2f:7f:d1:b5:a0:2b:ee:
6f:53:0b:56:08:f3:6f:61:0b:ac:45:0c:5a:00:47:
37:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CA:51:FC:A6:6F:28:07:F8:A0:34:77:D0:B1:EB:16:3F:07:41:05
X509v3 Authority Key Identifier:
keyid:47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:1e:b5:23:ca:25:d4:d0:c0:63:05:2e:9c:73:57:2e:e9:fa:
4b:ed:60:39:b8:44:2b:fe:84:7a:7a:5c:02:eb:62:ee:56:35:
7b:5d:8b:37:d0:07:7c:16:f5:11:38:7a:dc:6b:60:24:d4:d4:
37:77:b4:35:49:e2:01:03:4c:63:01:91:27:d9:bb:37:e5:03:
10:e7:67:7d:03:a5:72:53:8d:82:f3:7b:02:6f:e1:87:cf:c8:
3c:fa:63:63:ce:b3:63:7c:57:3b:91:37:de:7e:39:fe:99:56:
84:7f:4a:23:2d:e5:e4:ee:47:ba:08:d9:d9:ef:42:a6:02:a6:
1c:2d:84:be:cb:65:9e:c4:b6:7a:a1:37:f5:4b:2a:70:0b:b2:
4f:28:77:65:96:45:3b:74:a8:a4:b1:ab:fd:5c:cc:07:c4:70:
00:ae:98:2d:13:2a:f0:2f:96:f3:20:c8:81:72:f2:24:58:8d:
5e:c1:da:ab:c1:b2:1d:9b:c7:54:5d:74:56:16:69:39:88:48:
c0:42:05:5d:c1:f3:57:37:a7:c8:26:70:61:ff:2e:58:10:16:
6d:37:92:83:c4:17:20:a2:db:62:83:be:f1:c5:cb:39:ff:29:
63:77:20:fe:cf:05:c5:bf:87:5b:33:2a:b5:58:7c:f5:23:58:
77:90:45:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:19:43 2026 by rpki-client