Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
File: Zl5NfqijRwyXA-51UUgcNvd0_rs.mft (raw, json)
Hash identifier: rYreZtK30dLCy89PvFb5EdUPCVO2tOSHxfzbDam8Vkw=
Subject key identifier: 8A:5B:37:65:5A:6D:F3:87:E9:7F:EB:1D:C4:39:54:7C:09:14:38:BE
Authority key identifier: 66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
Certificate issuer: /CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Certificate serial: 019D296193DF21D77168005F4303CF6FE701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
Manifest number: 15A4
Signing time: Thu 26 Mar 2026 09:02:33 +0000
Manifest this update: Thu 26 Mar 2026 09:02:33 +0000
Manifest next update: Fri 27 Mar 2026 09:02:33 +0000
Files and hashes: 1: 3dDFlJIiwev5JNzj0uspF-q-hAM.roa (hash: 2MPQXp2XuzXpOvR5MvmUSNMeQLpCxYJhhEk2RjVnZhI=)
2: Zl5NfqijRwyXA-51UUgcNvd0_rs.crl (hash: TJ4t3NbnqJUAk2L3weCfOc0evUEe4dFlHVFx1XXGVfE=)
3: tXb-ZOETTYTckpb9Qysc1kmvy6I.roa (hash: ecwsDlNutKSR5EQe4HHz/G8gZ+2PHPrWaHUQyPF5OHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:93:df:21:d7:71:68:00:5f:43:03:cf:6f:e7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Validity
Not Before: Mar 26 09:02:33 2026 GMT
Not After : Mar 27 09:02:33 2026 GMT
Subject: CN=8a5b37655a6df387e97feb1dc439547c091438be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2b:0b:2a:a6:f3:52:59:b7:67:29:a2:8a:50:
72:dc:ae:33:9b:28:70:e7:d7:4a:91:97:ec:b4:d2:
e5:5d:10:16:16:25:5b:ba:08:6a:13:0f:97:d4:ab:
21:e3:a4:9c:da:f0:f9:e1:57:49:47:b9:ec:9e:43:
90:a7:61:de:19:74:7d:99:ce:21:bc:ee:01:a3:49:
13:41:f5:39:28:02:78:bf:2b:76:46:bf:00:6a:01:
1c:af:a0:c9:53:4f:62:ae:4a:24:0f:23:94:1e:cb:
9b:a2:90:5e:d7:92:fc:8f:14:bc:14:29:35:f3:a6:
aa:77:c8:6f:d6:70:99:b6:f6:70:b6:9c:44:f4:01:
b2:24:ef:53:48:01:0c:e3:0c:db:bc:44:9a:d4:08:
ed:c1:08:ca:73:c3:3f:f2:28:18:f6:db:11:43:35:
40:3a:03:39:06:66:5c:55:df:c1:0e:a7:f9:6a:f1:
30:72:d0:b7:e2:62:07:9e:c4:9c:23:f4:50:c1:1e:
f3:43:7b:72:93:99:67:df:45:db:d6:8d:3a:62:28:
c3:f4:c6:13:f7:fa:ca:5a:68:9c:db:22:f4:8c:88:
2d:f1:dc:25:57:7c:69:4c:e1:8e:ac:77:d2:2f:a6:
5a:38:07:a7:62:8c:c5:9c:85:a4:b9:6c:ab:3b:dd:
2a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5B:37:65:5A:6D:F3:87:E9:7F:EB:1D:C4:39:54:7C:09:14:38:BE
X509v3 Authority Key Identifier:
keyid:66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:80:0a:42:1a:ce:dc:fc:e7:85:75:88:aa:62:73:24:26:af:
bf:66:2d:90:d9:f4:31:ab:e6:df:07:64:57:c4:1e:d5:db:b3:
09:fc:01:df:83:89:1d:26:f6:db:59:fe:78:5a:91:95:d7:a0:
94:aa:2a:8c:19:d0:5c:3d:21:d6:e5:9f:6d:15:1e:ac:c7:49:
99:4d:79:f2:46:6c:4e:b9:b3:ba:9c:6f:e7:01:cf:e7:80:7c:
0e:79:39:b5:61:33:ed:6f:df:80:3d:4c:87:6c:f0:65:e9:41:
d0:a4:db:24:de:ef:ae:1e:ce:bb:b4:d6:c7:3d:22:20:04:33:
b1:84:87:b0:8c:8b:6c:27:fb:4e:08:d2:dc:c8:4a:db:38:32:
36:96:d2:c6:ce:75:ce:11:d8:6d:74:27:45:e8:2f:ee:b2:32:
3e:91:6c:9a:7d:92:bd:e0:21:61:07:5f:5d:f8:d9:17:4a:c0:
59:ed:0b:dc:0a:0b:af:6e:8f:e5:4a:8f:82:dd:36:0c:ef:fe:
f9:81:ee:ea:57:99:0d:a3:bf:da:92:65:93:93:b5:1d:6f:20:
40:df:34:ef:ae:09:07:de:d5:52:df:e0:e7:6b:8e:ec:b6:4b:
66:11:08:b1:68:c4:33:58:e1:4d:81:3a:b7:07:83:8a:5f:70:
79:34:ee:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:35:05 2026 by rpki-client