Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
File: Zl5NfqijRwyXA-51UUgcNvd0_rs.mft (raw, json)
Hash identifier: EAclmkzzq/6pdX+E7Nubie0GmYldqiFXEj4lRbfZC/s=
Subject key identifier: 43:C6:0D:B3:C8:C2:F9:A7:75:AC:4D:9C:76:EA:C2:A2:E0:18:DF:EE
Authority key identifier: 66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
Certificate issuer: /CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Certificate serial: 019F93FF91FED2D011B1DCBA8797A172C35B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
Manifest number: 16E5
Signing time: Fri 24 Jul 2026 12:00:27 +0000
Manifest this update: Fri 24 Jul 2026 12:00:27 +0000
Manifest next update: Sat 25 Jul 2026 12:00:27 +0000
Files and hashes: 1: Zl5NfqijRwyXA-51UUgcNvd0_rs.crl (hash: Dfc5e48eT0mgy3USsUBuIXneWSXWgV2YcLsdbV3k0LI=)
2: tXb-ZOETTYTckpb9Qysc1kmvy6I.roa (hash: ecwsDlNutKSR5EQe4HHz/G8gZ+2PHPrWaHUQyPF5OHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:91:fe:d2:d0:11:b1:dc:ba:87:97:a1:72:c3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Validity
Not Before: Jul 24 12:00:27 2026 GMT
Not After : Jul 25 12:00:27 2026 GMT
Subject: CN=43c60db3c8c2f9a775ac4d9c76eac2a2e018dfee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1b:a7:be:28:26:a3:7a:59:d3:bd:1b:00:62:
20:1a:0d:ca:5f:d6:79:f1:19:56:32:88:7a:6c:36:
91:e0:54:fa:f4:53:38:72:43:e2:a6:7e:4f:72:18:
39:ec:46:65:29:b2:8a:3f:3f:af:2c:3b:f8:38:b6:
aa:cb:32:1d:44:34:48:f1:e8:24:7b:6c:00:43:35:
63:2f:2c:87:5d:55:bb:f5:17:20:7a:8d:69:14:ff:
2e:06:f9:af:93:1b:c5:2e:7a:05:37:85:4a:a9:c6:
c3:e9:31:2d:fc:6e:80:47:5d:a6:41:bb:37:4f:cc:
b7:ec:02:78:e7:34:bb:d4:fe:42:10:d5:9c:a7:42:
2c:3c:47:10:ce:ae:0e:a0:8e:18:02:91:ea:95:1f:
4a:a3:8f:4e:53:c5:72:e7:08:f5:09:4b:c4:5e:b3:
91:24:07:80:7c:1f:ab:1e:8b:46:c8:e8:5b:99:32:
6c:13:2b:39:35:ea:d7:74:27:ec:00:91:92:9a:e2:
42:c0:6a:00:f5:39:d5:3c:02:34:d7:60:d3:eb:9a:
6b:b3:59:79:45:4e:95:08:40:52:ec:14:ce:25:ac:
95:7c:bc:98:fb:9a:a4:b5:bb:a4:71:3f:6a:c3:f2:
6c:c4:df:25:22:1b:d6:db:d9:bb:51:be:9e:28:b9:
83:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C6:0D:B3:C8:C2:F9:A7:75:AC:4D:9C:76:EA:C2:A2:E0:18:DF:EE
X509v3 Authority Key Identifier:
keyid:66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6a:cc:ae:16:df:e9:21:be:a2:8f:85:96:eb:c7:2f:94:56:
a1:0e:8d:59:f2:b7:52:5c:13:6c:c0:0a:f4:2c:5f:55:d0:9e:
2d:30:f8:3c:bf:19:87:6c:9a:96:c0:8d:bc:4e:c6:7d:ee:bf:
ee:28:7d:52:e0:ba:18:05:46:ac:27:e4:eb:5b:95:3d:9d:76:
ea:50:15:5f:f5:59:7c:61:df:03:35:20:e7:ea:02:30:16:0e:
7a:41:6a:f1:72:ac:dc:00:8f:7e:fb:33:37:56:9e:a6:a5:1a:
86:11:f3:a0:c0:66:3b:a3:67:73:b2:45:34:f8:32:bc:99:f1:
91:35:36:10:d7:06:00:d9:48:c8:4e:bb:bc:3e:bd:41:ab:1d:
55:ef:b2:41:f2:5d:9d:a0:a4:7b:af:2d:12:b1:4b:e5:d0:3f:
60:06:d6:1c:59:42:a5:15:05:af:7f:5b:d6:a6:eb:ef:50:f6:
1f:94:ac:5c:45:c2:7b:02:86:66:b1:f6:d0:3f:32:dd:d0:46:
00:13:f6:50:92:97:e4:fb:60:6a:6f:94:2f:c8:32:12:3b:19:
54:26:13:8c:c1:b1:d9:82:24:f1:69:f7:3b:5f:21:05:0f:88:
be:48:c8:82:30:08:c9:15:65:f5:1c:95:50:09:04:65:62:95:
fa:21:bc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:31:19 2026 by rpki-client