Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
File: Zl5NfqijRwyXA-51UUgcNvd0_rs.mft (raw, json)
Hash identifier: xsvPIdV2TBD8omYjsRnqxgAZIk9NRhyq/4WBc2aAudY=
Subject key identifier: 30:43:E6:24:A6:AD:A1:19:E9:1E:0C:A4:23:1E:2F:65:8C:37:09:A4
Authority key identifier: 66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
Certificate issuer: /CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Certificate serial: 019E209187A9853C506C6DFCFEBD9706F146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
Manifest number: 1624
Signing time: Wed 13 May 2026 09:01:08 +0000
Manifest this update: Wed 13 May 2026 09:01:08 +0000
Manifest next update: Thu 14 May 2026 09:01:08 +0000
Files and hashes: 1: 3dDFlJIiwev5JNzj0uspF-q-hAM.roa (hash: 2MPQXp2XuzXpOvR5MvmUSNMeQLpCxYJhhEk2RjVnZhI=)
2: Zl5NfqijRwyXA-51UUgcNvd0_rs.crl (hash: PS44+32wWQASDb85CxC3Np6Lphf690yyoi2GMfbuNow=)
3: tXb-ZOETTYTckpb9Qysc1kmvy6I.roa (hash: ecwsDlNutKSR5EQe4HHz/G8gZ+2PHPrWaHUQyPF5OHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:87:a9:85:3c:50:6c:6d:fc:fe:bd:97:06:f1:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Validity
Not Before: May 13 09:01:08 2026 GMT
Not After : May 14 09:01:08 2026 GMT
Subject: CN=3043e624a6ada119e91e0ca4231e2f658c3709a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:22:85:1d:9a:f3:b6:87:28:3c:64:8d:5e:
b0:f1:b1:e3:28:d8:49:cb:ac:4b:14:9f:84:b6:be:
36:48:9a:ef:b9:ee:76:ee:2c:d3:2c:93:52:7d:c1:
e9:e5:f9:e5:23:36:37:c8:ea:98:a9:d4:ae:8b:4c:
24:a0:90:33:95:be:2c:da:c8:c8:34:22:70:dc:f8:
5e:e0:fa:66:f0:92:81:9d:f6:bc:d7:82:3e:2e:08:
98:65:93:4c:05:cf:1d:d8:8c:83:6a:3c:33:39:61:
87:bd:df:ca:79:6e:25:54:78:20:01:e4:4f:ca:31:
96:6a:70:95:a8:e6:a2:48:66:0d:c9:08:9a:a7:d9:
c4:4c:da:a7:6b:c0:08:e2:54:cd:35:b5:ca:10:5c:
91:84:e0:8f:c9:dd:82:17:7e:57:39:cf:34:88:d9:
75:be:84:11:67:58:30:ed:f4:4e:1b:c1:23:2e:1b:
b0:49:60:1f:f3:52:76:58:ec:86:67:34:30:09:95:
ac:2a:78:b3:71:27:81:23:4b:e3:1a:7a:fe:1c:28:
25:7a:84:4a:9a:fb:81:60:25:ab:cf:97:05:c4:c5:
55:32:bb:62:07:54:4d:69:74:80:eb:86:e5:21:ad:
01:b0:f3:bb:06:03:97:c4:38:ca:4f:f0:27:3d:7e:
d6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:43:E6:24:A6:AD:A1:19:E9:1E:0C:A4:23:1E:2F:65:8C:37:09:A4
X509v3 Authority Key Identifier:
keyid:66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:3b:ae:ee:52:b4:0d:4b:bd:ad:61:1e:55:79:62:47:5a:4f:
ed:ca:72:58:63:2c:7f:ef:6d:36:65:29:37:77:84:4c:37:94:
db:fe:f9:a6:55:d5:50:49:e9:ff:cb:e1:6c:89:3a:4f:10:66:
2c:56:4d:34:b7:58:68:72:dd:35:60:31:82:60:c8:e8:d5:b2:
99:78:55:46:44:58:3a:ea:37:10:9a:7c:52:93:16:a8:0b:8c:
51:92:37:db:8a:ba:30:27:d5:86:6f:1b:27:85:8d:5a:66:70:
ef:68:bc:3b:10:14:a7:ae:cc:e0:8f:b3:f8:31:98:16:93:fa:
54:19:a9:84:61:27:b5:71:43:e3:d9:9a:64:1d:8b:14:f8:51:
7d:c7:3f:70:94:c6:70:e2:55:b1:f4:f0:33:d2:26:bd:c1:1d:
65:fc:d4:6d:54:1f:64:49:9d:91:c2:e5:f3:2c:b0:84:50:25:
7f:1b:3c:31:d2:09:8c:8f:7b:4a:14:83:14:19:d9:c1:e7:68:
86:b0:bb:13:17:e6:44:a1:a0:16:65:7a:90:7d:51:5d:e6:cc:
cc:69:8f:4e:53:af:77:fc:31:16:e6:f9:56:40:c5:a2:0f:d2:
76:8e:66:56:9a:ff:d2:40:d1:ea:53:44:c2:2d:a2:11:0f:49:
75:d3:de:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:18:40 2026 by rpki-client