Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
File: RZO5rApIawA3dl1gXIscgQQEbwo.mft (raw, json)
Hash identifier: laZWRG7xHmkDMR3Cv+Fx46tQEShKtlOAJKohDT2iB/U=
Subject key identifier: BC:BE:C2:F7:4A:90:A9:85:75:8A:37:2B:E4:63:A1:2A:09:C3:9F:EB
Authority key identifier: 45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
Certificate issuer: /CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Certificate serial: 019D27A886FCE319ABEDB5CAA713D3736DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
Manifest number: 026E
Signing time: Thu 26 Mar 2026 01:00:49 +0000
Manifest this update: Thu 26 Mar 2026 01:00:49 +0000
Manifest next update: Fri 27 Mar 2026 01:00:49 +0000
Files and hashes: 1: L7X-dPadfDyqsml5uaLmtXl56Kk.roa (hash: /6B0qNK7K7/Q2n1ppduNVDvL664tWHJJr6Qb1VYY0TE=)
2: RZO5rApIawA3dl1gXIscgQQEbwo.crl (hash: xObt0adLZfID2SIqBt0V/Op+dJdUaWfgXkL3EbB6YuQ=)
3: dvF6DGgeQycYzO0PrasV3XyKjgQ.roa (hash: y+mb9vuI2SRMIEXtA5lNvvJhpmo6Layb3vm++u5RXUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:86:fc:e3:19:ab:ed:b5:ca:a7:13:d3:73:6d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Validity
Not Before: Mar 26 01:00:49 2026 GMT
Not After : Mar 27 01:00:49 2026 GMT
Subject: CN=bcbec2f74a90a985758a372be463a12a09c39feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cc:92:f8:8c:92:6d:43:4c:dd:4d:99:4a:b0:
02:ac:e9:f0:11:b1:c1:14:8a:f9:f2:b9:0e:cc:b3:
0f:2c:9f:7d:1d:b5:b2:05:df:67:7b:3a:9f:49:51:
4e:8a:f5:11:fc:98:67:5d:2e:d2:63:5d:d0:4b:7e:
92:a1:b1:a5:1d:bb:53:f1:16:62:87:2a:11:d1:2b:
48:ee:a1:ce:d4:a7:e0:63:bb:38:4b:50:fe:a7:24:
08:25:fd:90:a6:25:b9:e8:1a:d5:64:6c:ec:41:ca:
92:55:0a:b5:6d:ef:5e:15:b9:33:cb:37:fe:0e:18:
38:51:8a:25:eb:41:69:dd:7f:fb:45:a0:15:19:34:
09:67:11:ed:09:4a:32:d7:b3:0b:da:22:22:80:5a:
78:01:c5:59:eb:f0:fe:d9:5b:98:45:b1:d1:25:2a:
58:ad:21:98:32:7d:93:3a:98:93:e6:03:b8:1a:af:
70:16:11:f8:50:96:4b:c2:20:86:26:62:af:5c:dd:
a1:de:9c:ba:59:9f:4f:90:f8:64:49:37:95:f6:c3:
c2:32:f1:77:b9:18:3c:fb:a5:a3:fc:15:54:fd:35:
e0:60:45:9c:83:c1:03:27:62:7d:89:54:f1:25:64:
8a:14:0a:d1:43:43:91:ad:37:a7:a9:e4:d0:f9:08:
ea:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BE:C2:F7:4A:90:A9:85:75:8A:37:2B:E4:63:A1:2A:09:C3:9F:EB
X509v3 Authority Key Identifier:
keyid:45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b6:59:d1:53:22:22:38:35:d2:e4:d2:f2:cf:ec:f8:ea:28:
33:67:21:16:e4:40:b0:0e:b7:ef:1f:2d:94:9b:78:42:c4:16:
5d:a8:17:7e:e9:7a:50:9c:6e:cd:6f:f6:76:47:68:d7:d6:3a:
70:69:50:44:c1:f4:a1:1e:c2:94:c5:61:ec:c3:f5:85:06:e7:
d1:5f:01:14:9e:3f:4d:ae:7d:44:6b:bc:1f:fc:55:cc:79:47:
34:c8:19:bc:16:85:97:9f:f0:28:8a:b4:89:4f:6d:58:48:6f:
86:d5:58:c4:93:fe:3b:e4:8e:fe:9b:ab:09:90:ba:85:e9:84:
45:44:3c:84:e2:30:98:0e:bb:89:6f:e2:5b:a2:c1:bc:c4:ee:
4e:0d:26:e1:4e:1c:ca:f5:a0:84:3a:be:3d:a5:2a:b7:29:63:
86:3f:a3:47:86:6a:54:f3:82:c0:6b:58:5d:24:ce:d9:60:06:
9b:ba:ab:c0:1d:b3:a2:8f:13:d0:d3:74:49:15:23:5b:5a:a7:
29:78:ab:ba:a7:77:cb:65:55:32:c7:de:08:b5:d1:3e:2a:52:
e8:db:fc:90:8c:77:20:d0:12:b1:bc:05:63:4e:0a:1d:c9:3b:
d3:de:85:1b:5f:7c:eb:01:33:37:62:41:2b:b1:56:aa:ce:66:
f5:1a:4e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:40:48 2026 by rpki-client