Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
File: RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft (raw, json)
Hash identifier: 5911kCyHuF5dvXo6W35npfiNdL8UbGoS6a3BUc5r41c=
Subject key identifier: 6F:F2:D0:E1:BC:28:11:69:E2:D6:2D:8E:04:D0:39:CB:CE:DD:C5:D4
Authority key identifier: 47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
Certificate issuer: /CN=473163527e83542dce693b16d0aedcd126d3319a
Certificate serial: 019E1F10CD871D88BCE2BC7B0FD2230FF32A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 02:00:55 +0000
Manifest this update: Wed 13 May 2026 02:00:55 +0000
Manifest next update: Thu 14 May 2026 02:00:55 +0000
Files and hashes: 1: RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl (hash: Vjb+20SHc6kITQoKnqdZt3WnzusXrxuqSgKuJoypp6Q=)
2: pFkI7meix8Wvnh8I7pdS5zO5VAs.roa (hash: IiBaDlI4V6mbfD8AaxYpOFH+8BQ1zVQO5KQlE9ThC6Y=)
3: wIc-Rh6w6YDK1W-UeGedBj1DHzA.roa (hash: AHq1ZvIykr30MtwSSGLXsUeCsh/Ryu5hRBrmdW7qIMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:cd:87:1d:88:bc:e2:bc:7b:0f:d2:23:0f:f3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473163527e83542dce693b16d0aedcd126d3319a
Validity
Not Before: May 13 02:00:55 2026 GMT
Not After : May 14 02:00:55 2026 GMT
Subject: CN=6ff2d0e1bc281169e2d62d8e04d039cbceddc5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:83:cc:af:c7:ad:b5:03:03:56:40:09:3e:4f:
7b:c9:f0:e0:9c:21:8a:bf:25:e7:df:e1:e0:fa:1f:
19:5f:a2:4c:1f:03:f0:98:1c:70:eb:8c:43:6b:02:
df:54:7a:e1:38:93:d2:06:d4:d5:1d:55:5c:bb:a2:
69:44:56:37:3d:77:25:f7:a8:b3:83:50:19:52:0a:
87:24:a4:e5:35:19:9f:c8:3f:82:8a:2b:3a:f4:b3:
c2:6c:43:31:c6:83:42:04:30:38:df:e2:d0:04:2b:
a3:23:96:bc:bf:95:19:98:2a:fa:6b:03:33:28:e4:
56:40:65:f9:d5:47:18:ce:a9:21:13:8c:c6:be:c5:
ed:d7:79:7a:09:d9:56:b5:32:7c:08:fa:d7:1b:06:
84:f6:37:65:16:2c:cc:5b:35:66:06:59:b5:d6:b1:
04:d0:0f:ca:83:7c:88:6f:ff:ae:b3:6e:69:6c:ba:
c9:e0:c4:1b:54:b8:ab:0a:39:db:ba:be:fa:6d:91:
98:18:48:97:59:1f:b0:f5:64:82:0d:be:bb:32:55:
41:22:9e:91:36:e7:bd:db:c5:d1:ef:59:e6:e5:f3:
f6:b2:04:f6:e5:2e:95:9a:87:ff:c8:73:92:ba:4b:
c2:24:3c:b5:cb:81:e2:1c:52:2d:c5:28:24:05:7b:
92:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F2:D0:E1:BC:28:11:69:E2:D6:2D:8E:04:D0:39:CB:CE:DD:C5:D4
X509v3 Authority Key Identifier:
keyid:47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:88:36:f1:cf:5b:59:c4:d8:8f:b1:59:8e:27:11:ee:b5:ab:
15:18:62:42:30:fb:ad:02:15:5b:2d:11:fe:30:ec:a0:8e:85:
90:66:ce:50:96:d3:cf:1c:bb:3a:51:91:99:8f:82:e1:3d:4b:
a9:dc:e7:35:92:07:9b:01:82:cb:21:16:83:a1:ac:25:e5:55:
cd:dd:b5:55:74:c4:03:ae:46:85:67:d4:f6:6d:c2:34:47:b5:
3d:f8:f1:75:01:50:94:ea:94:32:56:82:54:1f:39:20:0a:1f:
1a:63:9e:0f:8b:63:70:ef:53:51:62:11:7c:b3:ed:3d:92:f1:
c4:e0:af:2a:8e:32:bb:c7:3e:5e:01:52:3b:b5:6f:f8:44:94:
af:38:f6:a8:58:83:8f:c9:63:c9:73:0e:14:d6:42:7e:ab:e0:
3f:74:de:97:bd:0a:eb:0a:06:60:08:e7:33:9f:34:b9:99:7e:
5f:d8:28:9d:7a:ed:a9:3f:30:51:92:2d:42:99:11:50:6e:2e:
20:c1:b7:8b:6f:a5:c6:fd:7f:91:1e:6b:08:1b:1d:1c:64:b8:
a2:25:f4:5a:a7:b1:31:8b:45:35:ee:cf:e1:bf:5e:b3:9a:73:
8a:f7:d2:f2:c5:86:59:91:15:d4:3e:18:4b:c8:9a:0d:fe:11:
95:5c:31:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:48:05 2026 by rpki-client