
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
File: rkZkQGbOrznTr7D9c1sBnOydo2Q.mft (raw, json)
Hash identifier: aQggIi0nwylK8TqF3v2lDBffHIss67rTGQhqY6/YIWk=
Subject key identifier: 9C:BE:7D:5E:31:E5:01:26:6E:9B:4C:DB:2A:8A:8F:30:87:8B:6E:F4
Authority key identifier: AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64
Certificate issuer: /CN=ae46644066ceaf39d3afb0fd735b019cec9da364
Certificate serial: 019E1E3613B6F72E7DD9D0614CC47F68DC7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
Manifest number: 0586
Signing time: Tue 12 May 2026 22:02:00 +0000
Manifest this update: Tue 12 May 2026 22:02:00 +0000
Manifest next update: Wed 13 May 2026 22:02:00 +0000
Files and hashes: 1: YwZPhm_oPIIN_h73HSe7_TwtVu4.roa (hash: L8RiSrI3D8+7xc9Avh/47HaCMGihyyrZJ30e+0TUw7M=)
2: rkZkQGbOrznTr7D9c1sBnOydo2Q.crl (hash: mDhMNd5VCgOpdT4MXLOJbaOvTGBcfmAF/wWaUIRuTYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:36:13:b6:f7:2e:7d:d9:d0:61:4c:c4:7f:68:dc:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae46644066ceaf39d3afb0fd735b019cec9da364
Validity
Not Before: May 12 22:02:00 2026 GMT
Not After : May 13 22:02:00 2026 GMT
Subject: CN=9cbe7d5e31e501266e9b4cdb2a8a8f30878b6ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:43:4c:08:a9:7d:e2:8b:9d:b4:5b:ef:ae:57:
1c:45:75:7b:fe:df:79:14:e9:7c:db:a3:a7:93:10:
f7:49:36:d9:5d:f3:59:06:f9:6a:3c:33:27:35:77:
78:92:22:4b:e8:eb:5d:77:bb:ea:9f:c3:df:48:88:
43:72:69:23:e0:70:e4:f8:5a:05:30:ce:2b:5b:b0:
d3:fc:6c:fa:a6:df:eb:e5:64:3b:2f:75:d8:b9:62:
e4:da:b5:e1:2e:c2:06:7e:a4:eb:d5:57:6d:cb:08:
2a:97:2d:76:92:c6:68:02:eb:46:3b:1c:70:f7:82:
2e:d9:ad:aa:31:dd:b5:35:4e:0b:e7:b7:21:0d:0a:
2f:79:6e:d1:02:29:41:b8:f1:c4:d3:d3:10:76:e7:
9f:26:e4:9f:93:e1:7d:26:ab:17:f0:81:24:83:8e:
ff:0b:8e:66:22:7c:2a:4d:3b:f0:64:e3:c4:4a:79:
1d:49:29:13:78:c5:b7:3b:42:0b:18:b3:49:c7:77:
f7:ec:a4:d4:3f:fc:f1:76:bf:2d:db:26:17:1e:4c:
94:75:0a:16:57:f7:b0:42:f7:08:2a:14:d4:2a:ef:
d7:05:11:0f:6b:5a:22:9b:4d:c3:99:3c:6c:be:36:
34:af:82:ea:0e:1f:ca:0c:1a:ae:a2:cf:5d:8f:78:
8a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BE:7D:5E:31:E5:01:26:6E:9B:4C:DB:2A:8A:8F:30:87:8B:6E:F4
X509v3 Authority Key Identifier:
keyid:AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:78:ff:b3:c6:1f:c5:e5:b5:43:ed:3d:45:bc:97:0c:44:b9:
d9:3a:35:ad:36:92:46:3d:dd:fc:c4:de:f6:48:06:68:c0:8f:
f2:b8:1c:1f:73:a6:fa:20:be:7f:34:e0:b1:7a:a2:06:b8:9c:
e7:b3:87:6c:26:58:95:ad:7a:7e:b4:c3:39:91:0e:fd:25:bf:
46:43:9a:5d:ef:de:85:28:6f:62:24:a6:97:3d:6d:5c:03:c5:
1d:ed:fc:a5:82:eb:9c:ae:65:2d:77:19:88:48:5f:a8:6f:6a:
b1:bc:b4:84:a4:97:99:4f:2e:7d:cb:e1:bd:f4:1b:d6:f5:d8:
73:69:ca:ef:d5:fa:32:22:33:1e:17:f6:9e:14:8d:f2:21:30:
37:6c:b8:33:a9:c0:83:eb:61:84:d8:e3:93:8b:42:65:27:db:
7e:3e:b8:fd:35:c7:46:42:b4:65:c4:3a:07:51:f8:47:63:b1:
80:e7:47:7e:2b:78:d1:99:e8:91:a1:c8:54:83:70:a5:2f:be:
80:a5:b1:06:fd:28:37:a2:06:10:b9:9c:3c:b3:c8:49:7b:86:
77:ef:e8:1a:45:67:80:ed:42:3e:0d:df:ce:e4:42:9c:8a:62:
14:65:9a:22:2d:91:d8:26:99:70:5e:23:c2:50:19:72:90:ca:
70:e8:99:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:34:24 2026 by rpki-client