
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
File: RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft (raw, json)
Hash identifier: 3wWCS8do3Z6mL5SA73H8g5os5qIY+S7RmYJn9odPZUU=
Subject key identifier: 1F:C4:53:B7:62:CB:E5:4E:11:BD:46:52:B9:F0:44:2E:59:C5:48:0A
Authority key identifier: 47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE
Certificate issuer: /CN=4735e807d349d31564f9fd546138e3598e2007ce
Certificate serial: 019F95124F6922E940C2E80275D30C91CF4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
Manifest number: 12DB
Signing time: Fri 24 Jul 2026 17:00:32 +0000
Manifest this update: Fri 24 Jul 2026 17:00:32 +0000
Manifest next update: Sat 25 Jul 2026 17:00:32 +0000
Files and hashes: 1: RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl (hash: 9QjHQUf4n1R1kzBZnwODhQSn8EPzBdhkcx6v93rMtsU=)
2: xYQhbQyfXrOfvdiJkCemh8CpZ2k.roa (hash: 3F6vLCFxR75VhJCktR9LybENxtIsB4rpv9WYC6tqfNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:4f:69:22:e9:40:c2:e8:02:75:d3:0c:91:cf:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4735e807d349d31564f9fd546138e3598e2007ce
Validity
Not Before: Jul 24 17:00:32 2026 GMT
Not After : Jul 25 17:00:32 2026 GMT
Subject: CN=1fc453b762cbe54e11bd4652b9f0442e59c5480a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:87:2d:71:29:14:3a:9d:70:ac:75:e3:0b:65:
55:56:e4:62:db:6b:89:98:5c:bf:bb:52:41:40:51:
81:c4:58:ad:8d:ce:aa:1c:d6:c8:3a:4e:fc:68:97:
5c:54:2a:8b:7a:d5:5a:58:4c:52:01:a8:2f:79:93:
27:75:d3:f1:26:e1:aa:5a:75:bf:11:46:f1:cf:2b:
ee:b0:88:c9:40:b6:e5:84:24:c7:9d:ae:ac:58:96:
99:04:dd:b0:91:27:a6:ef:5e:cb:a7:8a:62:22:a7:
c0:8c:85:7a:db:0a:f2:45:b7:93:a2:8f:b8:5d:9c:
85:13:c9:8c:f7:49:b8:26:32:0b:2d:1f:29:af:ef:
a1:ed:79:59:8e:57:a4:da:2d:4d:7b:d9:83:b2:31:
f0:6b:f9:fa:06:89:5d:7f:0a:ea:56:50:f7:13:cd:
7b:c4:62:7b:81:ff:9d:45:bb:d7:9c:e5:d1:75:a1:
97:a0:e8:e9:06:fb:bb:d2:69:7f:79:07:e8:35:17:
b6:31:19:55:7d:94:e2:82:01:d8:6a:17:59:4e:0a:
4e:c5:2b:4d:c9:7c:f7:97:7b:d3:ee:66:52:6a:11:
cf:b0:63:c0:3e:65:c1:22:81:e2:bf:6a:58:3a:d4:
d1:8a:ae:84:95:36:3a:cf:2f:a1:93:5b:d7:97:c2:
a8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C4:53:B7:62:CB:E5:4E:11:BD:46:52:B9:F0:44:2E:59:C5:48:0A
X509v3 Authority Key Identifier:
keyid:47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:de:39:9a:8d:bb:cf:e5:68:9a:c5:ca:94:1e:cd:7a:df:8c:
70:70:9a:2d:d5:4d:93:79:e8:0d:91:5c:65:75:24:1d:67:36:
fd:a2:8d:ad:30:50:9f:e0:d6:e1:46:6b:e5:5c:b2:77:bb:10:
e9:7d:f4:f7:43:bd:15:05:e4:5a:96:99:c1:80:f1:03:9d:70:
1b:ba:14:69:a5:1c:71:15:19:3b:41:35:b0:59:eb:4a:5f:f2:
bf:fa:1a:31:0d:57:7d:20:c2:8c:70:d3:59:b9:2a:bb:8f:06:
80:5d:6a:de:db:99:13:50:49:ff:6b:01:08:7b:a6:5f:f3:52:
08:7f:7e:37:4f:ab:17:db:00:bc:e0:e3:85:f7:ff:6e:bf:51:
2b:bd:e3:ea:00:a6:6b:0d:74:32:98:0c:44:87:f1:39:d5:b4:
33:18:34:2e:39:25:85:fe:e6:4d:42:e2:4b:91:bb:25:9e:1f:
cd:61:76:23:64:33:f9:8a:e6:34:fb:29:a5:ce:44:f0:fb:3d:
8d:fb:da:14:62:c5:58:8a:7b:b6:b8:59:7d:39:90:da:6e:c5:
6e:e3:f8:d5:81:d6:86:be:f9:3e:f7:74:14:e6:d1:8e:0e:19:
b9:2c:eb:a5:15:3a:1a:8e:48:02:11:d0:1e:cb:c1:cf:d5:ee:
e4:10:2e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:38:51 2026 by rpki-client