Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
File: RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft (raw, json)
Hash identifier: u1AmxYBBac9nvtEDX4R0QjHGYme0sBvD9wKrTASqoR8=
Subject key identifier: AC:52:07:AC:87:C9:CC:DA:62:BB:10:69:D8:F9:16:FB:7A:32:C3:FD
Authority key identifier: 47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE
Certificate issuer: /CN=4735e807d349d31564f9fd546138e3598e2007ce
Certificate serial: 019E205AAAF755FC4F047392CAE0F6B13C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
Manifest number: 121A
Signing time: Wed 13 May 2026 08:01:13 +0000
Manifest this update: Wed 13 May 2026 08:01:13 +0000
Manifest next update: Thu 14 May 2026 08:01:13 +0000
Files and hashes: 1: RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl (hash: gTFJvZk1mbSXD2vuLu8AeswmjAuJoxRha2JSGRINcOw=)
2: xYQhbQyfXrOfvdiJkCemh8CpZ2k.roa (hash: 3F6vLCFxR75VhJCktR9LybENxtIsB4rpv9WYC6tqfNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:aa:f7:55:fc:4f:04:73:92:ca:e0:f6:b1:3c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4735e807d349d31564f9fd546138e3598e2007ce
Validity
Not Before: May 13 08:01:13 2026 GMT
Not After : May 14 08:01:13 2026 GMT
Subject: CN=ac5207ac87c9ccda62bb1069d8f916fb7a32c3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f2:a3:3a:8b:02:f2:60:3e:77:61:ac:74:94:
ee:66:2b:34:14:a8:33:ad:ab:95:a6:b1:8e:18:6b:
cb:55:98:05:cd:34:17:5c:49:31:ad:a1:4b:ba:57:
00:23:b8:e0:b4:a4:a0:e6:8a:b1:e0:c6:07:d0:bc:
20:c3:d9:ef:6a:29:09:fb:cd:21:5a:29:c8:5e:b6:
3a:c4:03:0c:c0:8e:47:26:46:c9:85:21:13:4a:95:
40:87:04:82:0f:14:06:0e:2f:ea:53:c4:b7:55:4d:
ad:56:94:ca:19:3a:db:63:f9:2e:5e:8c:1b:69:b1:
90:d6:c1:9e:82:10:a1:e6:0d:ea:3e:d9:cb:12:51:
d2:da:c0:1f:35:fd:9a:d4:b7:1b:47:8d:9d:8f:9a:
1c:7b:4a:45:6a:23:41:5f:da:09:14:39:04:29:03:
bd:9c:6a:0a:c7:7b:c4:4b:e6:d1:08:68:d6:ef:3a:
e5:0c:82:61:56:43:ab:23:02:26:40:3f:30:41:bf:
25:1e:d3:82:6c:a2:a8:17:cf:ca:a6:bd:16:39:7d:
d6:dc:9c:5c:43:8c:3f:97:e5:b2:01:d1:2e:e5:31:
bb:a1:98:3c:82:a1:24:e6:72:46:b4:d8:3b:e7:2a:
04:7a:8f:d0:24:6a:05:b8:cb:a4:96:c5:47:57:21:
87:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:52:07:AC:87:C9:CC:DA:62:BB:10:69:D8:F9:16:FB:7A:32:C3:FD
X509v3 Authority Key Identifier:
keyid:47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d2:96:d4:ae:f1:7e:6d:d8:bd:32:19:2e:f6:9a:1e:4b:44:
26:7e:af:5d:9a:4c:b0:d2:a3:f4:d4:2c:5f:c6:af:f6:09:0f:
d8:1a:06:db:10:d9:6a:5b:5c:f1:14:7b:2c:d4:56:b1:67:08:
e7:02:be:be:4e:64:e0:c5:6d:c3:27:d1:a6:20:cc:9f:d5:ba:
a4:47:a3:41:81:ae:4e:4c:1a:10:78:65:65:6b:9b:45:c4:30:
dc:3a:2c:c7:d5:49:8c:7e:b7:fe:13:18:1c:ad:bd:6e:1b:29:
a4:b0:60:99:f3:62:a9:7c:2e:8f:76:5c:79:c3:88:bf:c2:d4:
f5:08:a4:1d:f5:c2:87:e1:5b:58:2d:65:b3:c9:1e:ca:b6:c5:
50:bc:51:b6:1e:db:b1:63:8d:47:75:5a:73:6a:69:bf:17:2f:
69:52:55:31:5f:46:39:42:36:7f:8f:62:3d:26:44:fd:fa:21:
54:8b:05:cd:9b:58:83:d3:22:94:7a:89:bd:ce:26:40:ba:03:
e8:35:54:ac:33:f9:e2:e5:9d:5e:5a:5a:e9:57:7e:60:3d:14:
6b:be:db:77:a1:af:ca:68:6b:48:95:5a:44:89:81:50:7c:fa:
ea:3f:57:8f:27:a5:f6:30:50:6b:db:8a:e6:45:2f:a5:7c:6c:
5e:36:9e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:48:06 2026 by rpki-client