Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
File: rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft (raw, json)
Hash identifier: oA1HgNWLkyuef91suSvzw+q78HbLC5l4UrA8VObaUWg=
Subject key identifier: F0:EE:9E:D4:0B:97:AE:BE:F9:D9:B3:38:FA:E6:C9:EC:80:79:81:1B
Authority key identifier: AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF
Certificate issuer: /CN=ad9479afe3a9a18e1c374fca022d1ff2a255b1af
Certificate serial: 01A0ECD33A8748AEF750637E67FE01A5144F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
Manifest number: 0530
Signing time: Tue 29 Sep 2026 11:01:00 +0000
Manifest this update: Tue 29 Sep 2026 11:01:00 +0000
Manifest next update: Wed 30 Sep 2026 11:01:00 +0000
Files and hashes: 1: 15iMLkZijLxFQhyhHpyZVO_Pbh0.roa (hash: 4vg9pvNIz6AeHAhcqTYuN2xhMEHA7ity8ku3fgSFNxI=)
2: rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl (hash: QtweJ3cgK0gWCOVrLRCuaTP/RXg9CxO6nIQ/ft1VZ6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:d3:3a:87:48:ae:f7:50:63:7e:67:fe:01:a5:14:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9479afe3a9a18e1c374fca022d1ff2a255b1af
Validity
Not Before: Sep 29 11:01:00 2026 GMT
Not After : Sep 30 11:01:00 2026 GMT
Subject: CN=f0ee9ed40b97aebef9d9b338fae6c9ec8079811b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:31:8c:45:92:81:3e:d8:66:6f:da:65:da:a9:
1b:bf:f1:32:ec:73:17:1d:6a:6a:69:47:68:c5:b0:
e3:74:ee:a8:35:90:72:99:07:a6:d6:2f:78:6c:01:
06:b5:10:d2:65:fa:9d:43:53:9e:ab:a1:b0:7c:81:
b7:4b:a5:af:a6:1d:27:f4:9f:7d:ec:68:87:43:d9:
b8:45:57:79:ec:5c:d5:a5:a8:b0:b6:8b:b6:c1:36:
21:ce:2f:bc:36:76:ca:63:14:cf:f4:cb:18:d4:78:
88:f2:88:44:49:ff:50:4b:15:76:bd:4c:59:27:0b:
c6:dc:5e:55:ba:dd:06:cf:bd:67:b1:c8:3f:72:23:
39:09:8b:47:be:7d:2f:ab:bb:f8:07:56:b1:9b:c5:
1d:49:ce:11:68:a9:16:14:bf:f1:d8:16:17:8b:48:
1e:7d:a1:73:d1:47:a2:2f:f5:8e:b2:dd:82:c9:5a:
18:60:93:e6:1f:83:6c:95:e6:60:ad:0f:c3:f1:3e:
c6:92:b1:d9:bb:3b:29:87:53:30:39:1d:bd:ae:2d:
af:cf:02:d4:b5:d7:58:97:f6:d4:19:6b:a8:1d:9a:
7f:66:29:8d:25:45:69:5e:57:08:9f:34:f8:9e:71:
77:b5:a0:77:d9:f8:09:69:a4:87:6a:63:9b:f7:6f:
1b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EE:9E:D4:0B:97:AE:BE:F9:D9:B3:38:FA:E6:C9:EC:80:79:81:1B
X509v3 Authority Key Identifier:
keyid:AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:0b:6a:78:17:57:07:3c:6f:cf:64:b4:ad:cc:1f:10:41:40:
39:69:15:66:03:26:30:e9:47:e9:e4:77:17:cb:c7:87:e2:d3:
0f:9b:55:f7:23:7a:3a:13:d6:4d:2a:e0:0b:0b:34:3a:d0:3b:
82:7c:dc:f8:be:41:05:69:52:9a:4c:d2:2b:54:f6:29:0c:37:
88:a6:a7:6f:e0:05:84:ab:34:6b:d9:b0:90:f6:f8:99:5c:7d:
e9:b8:4c:1a:ed:e4:35:e1:41:2f:ad:02:44:3d:4c:b9:32:f0:
48:fd:83:71:0f:3e:69:54:0d:13:31:07:5d:dc:8d:53:1f:0b:
ec:79:dd:b3:e1:e1:43:ec:19:b9:9e:5a:f5:52:37:5e:16:19:
f0:23:70:e3:4a:6e:87:75:a2:90:8d:79:8a:6a:f6:34:d9:85:
13:73:59:df:9b:42:83:a6:12:6c:46:0f:38:76:5d:a9:86:a5:
05:1a:a5:a0:b8:a9:ac:eb:d2:db:13:cd:6a:64:48:e1:5c:df:
6a:f0:59:b5:ab:d1:5e:36:81:f6:13:51:f4:e3:57:ca:b8:26:
e9:7a:5d:cc:83:07:4a:c0:79:f5:44:c7:fd:a6:d0:d3:75:f6:
14:30:f8:24:d3:9e:9f:59:14:fc:f8:d2:02:b3:f8:dd:55:63:
aa:c0:4b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 21:13:58 2026 by rpki-client