Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
File: RZO5rApIawA3dl1gXIscgQQEbwo.mft (raw, json)
Hash identifier: FZuVEvpO+Ga1WJTnWBeJC1N1iVfU8McL2e00qZY7tBE=
Subject key identifier: 9E:F9:4B:90:09:F4:7F:E5:61:1C:EF:A1:5C:F4:EC:FE:77:4F:73:B9
Authority key identifier: 45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
Certificate issuer: /CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Certificate serial: 019E1DFE22346CF4B1CEAE0AE34A98EDCDEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
Manifest number: 02F1
Signing time: Tue 12 May 2026 21:00:54 +0000
Manifest this update: Tue 12 May 2026 21:00:54 +0000
Manifest next update: Wed 13 May 2026 21:00:54 +0000
Files and hashes: 1: Nh0zkfW3K0-D4B4iOP3oqCU07ew.roa (hash: dzg9viwZUQGspY4wILRo3IQtadu+wvn1MyNHNysHsl8=)
2: RZO5rApIawA3dl1gXIscgQQEbwo.crl (hash: iAG5TQfF5MXOPLJsHbY2Co08im8vn/v4MOPi+teGVgY=)
3: dvF6DGgeQycYzO0PrasV3XyKjgQ.roa (hash: y+mb9vuI2SRMIEXtA5lNvvJhpmo6Layb3vm++u5RXUI=)
4: hRF9ml8v_UduMvXzWno8qvtUHJY.roa (hash: aeqiSYNEe9b/RioY7u2z8TFho5XR5ZNUJdfUaIjcd7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:22:34:6c:f4:b1:ce:ae:0a:e3:4a:98:ed:cd:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Validity
Not Before: May 12 21:00:54 2026 GMT
Not After : May 13 21:00:54 2026 GMT
Subject: CN=9ef94b9009f47fe5611cefa15cf4ecfe774f73b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:3b:eb:ab:06:38:a9:17:2e:77:9b:2d:b2:
62:ec:d7:59:b2:25:2d:b1:69:3e:11:40:ce:aa:de:
bb:f9:6e:c8:0d:3e:8f:25:74:31:46:f2:2b:1a:e7:
27:f3:76:7e:7a:75:2a:c5:84:d0:99:36:7b:86:17:
d8:66:5c:4e:6c:96:b2:d2:93:dc:b4:77:7b:87:ed:
7a:d2:fb:ef:d2:0b:39:7a:be:66:b6:c1:65:32:78:
ab:c7:58:7c:c9:80:c9:0c:3d:a3:fd:c1:a1:3f:7c:
4a:51:44:a8:68:c5:8c:0d:c2:5c:ac:e8:8a:ac:31:
e3:08:59:d4:66:fc:c6:9b:e4:c5:45:34:d3:d9:b1:
fa:c6:10:39:30:51:c0:dd:4a:13:68:6e:c4:30:f7:
b2:d7:e3:72:d1:49:d4:94:84:05:07:4a:4b:f2:ce:
02:be:27:0f:2b:60:a3:d2:1c:3e:0f:03:f0:73:60:
42:27:37:7f:33:e3:7f:aa:71:88:c4:d6:d0:f4:22:
ef:19:b9:84:62:14:7b:a8:7e:93:0e:42:97:10:3c:
12:ba:6a:f6:c1:05:aa:4f:75:78:b6:d8:8e:16:bd:
4c:cd:66:99:27:23:3c:8f:30:2b:4e:e7:8d:86:e5:
64:7e:dd:a5:e5:e5:21:94:35:d8:9e:38:50:bc:d2:
cf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F9:4B:90:09:F4:7F:E5:61:1C:EF:A1:5C:F4:EC:FE:77:4F:73:B9
X509v3 Authority Key Identifier:
keyid:45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:14:bd:39:49:09:0c:f0:fa:cf:de:7c:e4:45:c2:f8:22:45:
de:d0:8e:82:99:71:39:35:a9:df:7c:6e:8e:0b:2e:ec:4a:b6:
55:64:11:86:1a:3f:55:0b:ea:03:89:78:ec:eb:9e:ad:74:94:
25:d5:b7:94:62:55:af:e7:fd:6e:e1:35:c1:1c:54:c5:70:2d:
49:d7:00:0d:33:a0:a0:5f:cc:a2:32:66:6a:05:a6:ec:b7:44:
78:66:67:91:be:91:3b:58:d3:de:b6:a6:8a:a8:b3:bc:98:20:
50:f6:d9:b6:b9:e4:5d:a1:22:dd:02:73:a7:ee:75:f5:71:01:
d1:5e:32:23:71:a6:bd:15:db:a3:78:82:16:94:fa:d3:f9:59:
97:a2:ae:09:34:f2:cc:bb:e2:71:95:7b:7b:5b:ea:c4:00:0b:
b2:be:ec:19:0a:04:e6:d6:ae:3b:73:54:46:8d:34:af:b5:c7:
7e:a0:ac:5b:a0:f4:3d:ea:08:15:af:05:8c:0d:63:eb:0e:65:
4b:76:00:b8:45:70:7b:9a:a9:93:33:f3:56:bf:fb:3c:63:2b:
d0:76:62:a8:b2:5c:c8:a8:1c:65:38:94:59:12:9c:03:32:c9:
1c:4d:79:f9:4b:c4:ee:9c:34:c7:1e:4c:26:c7:98:86:ce:16:
73:df:31:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:09:40 2026 by rpki-client