Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
File: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft (raw, json)
Hash identifier: zGZBghplYs+I/5xUlWFMrnyCGLFy4QXvx4+zUfSuKgY=
Subject key identifier: B6:05:1B:D3:D2:EF:DB:4C:C1:00:A0:C0:6C:75:D5:8D:5D:C0:7F:F0
Authority key identifier: 47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
Certificate issuer: /CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Certificate serial: 01A1DDCBFBEA64DE2A6609FB79776177F923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
Manifest number: 0E19
Signing time: Sun 15 Nov 2026 06:01:35 +0000
Manifest this update: Sun 15 Nov 2026 06:01:35 +0000
Manifest next update: Mon 16 Nov 2026 06:01:35 +0000
Files and hashes: 1: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl (hash: mpmRnnJSpyvyBGyL0wQ2xnHHt8DtV4mhZULKoOSWNWg=)
2: XHT_nValr2j6SKOfGPicLhiXyO4.roa (hash: H5XqJ+imumLxCFtabqMwr2EYqfcFyzubhax0NWhApw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cb:fb:ea:64:de:2a:66:09:fb:79:77:61:77:f9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Validity
Not Before: Nov 15 06:01:35 2026 GMT
Not After : Nov 16 06:01:35 2026 GMT
Subject: CN=b6051bd3d2efdb4cc100a0c06c75d58d5dc07ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b6:c1:66:72:6a:9f:d1:28:e2:86:d6:53:0f:
0e:dc:d9:5c:59:2f:21:b0:9d:77:0c:82:66:ea:58:
03:e6:97:ab:83:d5:29:14:0f:b6:84:17:6b:f4:3f:
66:60:c4:28:d8:ca:d6:98:35:6b:59:3a:35:2a:9b:
a6:60:4e:a1:aa:4e:35:bb:28:2e:e7:4b:e5:0e:2e:
61:82:1c:45:f0:bb:29:92:7f:ad:72:36:55:2a:3c:
fe:db:1a:31:74:05:1e:b7:88:34:1f:58:ca:1f:1f:
c9:a2:1b:96:78:26:f0:3e:ce:7a:f9:a5:3b:a6:e4:
b9:b0:b8:76:47:a2:e7:65:4e:1e:bb:02:da:34:e2:
37:ee:b7:23:00:94:f1:c0:62:4d:eb:fe:f6:78:f2:
9c:8a:2c:91:3e:d0:84:5d:5e:43:cb:55:f6:5e:ee:
22:2d:cd:b2:ce:0c:94:2e:bf:b3:8b:60:7f:4b:23:
b7:ae:49:5f:07:05:af:b5:73:2c:44:e4:2d:7a:38:
63:27:a0:40:34:04:a9:fe:f9:7f:6a:d8:be:e8:f7:
5d:70:be:02:fb:f6:65:62:1c:72:24:d1:17:0b:cb:
78:ac:47:3e:92:d6:c7:96:62:ea:c9:bd:df:2b:65:
2d:aa:0f:dc:98:d6:83:bf:f8:a5:6f:5f:aa:b6:e3:
3c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:05:1B:D3:D2:EF:DB:4C:C1:00:A0:C0:6C:75:D5:8D:5D:C0:7F:F0
X509v3 Authority Key Identifier:
keyid:47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:83:64:df:22:a3:34:d1:22:36:22:f8:57:ec:b3:95:8d:01:
37:7f:0b:b2:69:71:8f:f6:e0:a5:e2:1b:c3:a5:01:d4:e5:a9:
69:44:bb:d9:8a:f0:00:6a:f5:75:88:af:3c:a6:28:80:71:ce:
75:cc:5d:ae:ce:87:a7:20:19:07:3e:61:c0:ec:84:ef:8a:5f:
2d:cf:63:d5:fe:5f:24:3c:84:05:1d:b5:a1:18:7e:9e:d5:73:
70:d7:99:59:c4:b6:a7:ac:b9:a8:b8:e3:68:46:bb:2b:fc:4c:
54:ae:d6:ec:20:6b:43:44:e5:1d:2b:57:bd:2e:69:70:b9:9d:
64:c5:68:af:77:ec:ea:8d:e5:3f:59:ee:4f:06:ad:77:2b:7e:
52:ef:e1:f6:99:cc:2b:74:39:6b:42:db:d8:e6:43:b4:26:c8:
a4:90:55:4f:18:33:a6:6a:f7:8c:78:2c:bc:2e:61:fa:82:dc:
81:9c:ff:c5:e2:88:5c:6a:57:00:e4:45:51:eb:d9:76:88:bc:
b4:82:0d:b7:df:7e:39:86:fb:e1:ed:96:88:52:ff:7f:bd:9e:
6f:89:df:2c:fc:2c:c3:ca:4f:a2:ad:7f:2e:4e:f1:1f:74:bd:
7d:d2:50:af:10:cd:b0:f4:bf:47:11:31:03:13:7d:4b:0e:5c:
0e:81:e0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:10:09 2026 by rpki-client