Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
File: rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft (raw, json)
Hash identifier: 1qOM7eTLNS1yyURJ4p4tL+qgaI6pu4jlxrwOOA7UZXk=
Subject key identifier: 48:B7:1B:56:CC:EB:3F:AB:9A:C3:22:DB:12:CA:A1:E4:D5:55:D4:3C
Authority key identifier: AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF
Certificate issuer: /CN=ad9479afe3a9a18e1c374fca022d1ff2a255b1af
Certificate serial: 019F932450C90AC6F408DD8F0182F6C3660D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
Manifest number: 047D
Signing time: Fri 24 Jul 2026 08:00:58 +0000
Manifest this update: Fri 24 Jul 2026 08:00:58 +0000
Manifest next update: Sat 25 Jul 2026 08:00:58 +0000
Files and hashes: 1: 15iMLkZijLxFQhyhHpyZVO_Pbh0.roa (hash: 4vg9pvNIz6AeHAhcqTYuN2xhMEHA7ity8ku3fgSFNxI=)
2: rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl (hash: 0zhQHmNzeTQcQaeqmcKvHvvGj+CGTBIs3jHOB3/L0z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:50:c9:0a:c6:f4:08:dd:8f:01:82:f6:c3:66:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9479afe3a9a18e1c374fca022d1ff2a255b1af
Validity
Not Before: Jul 24 08:00:58 2026 GMT
Not After : Jul 25 08:00:58 2026 GMT
Subject: CN=48b71b56cceb3fab9ac322db12caa1e4d555d43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:74:a0:28:cb:79:1d:3e:4e:e1:d5:10:24:0a:
1e:99:e2:f4:40:83:f5:cc:88:c2:e4:4b:47:24:91:
04:2f:d6:87:f7:22:dd:8a:bf:f4:77:96:8c:6e:f9:
7d:ac:52:73:82:41:fa:06:17:e5:a6:db:48:7d:73:
d0:8c:95:ac:6c:f9:49:89:cf:83:30:bf:56:df:64:
1d:00:62:9f:ad:a5:d3:2f:61:e2:d7:b3:3e:28:07:
70:67:0f:39:b5:43:cc:bc:d9:a2:d9:fc:07:4d:07:
51:af:19:47:14:ce:b9:c7:a2:37:85:20:35:9c:e3:
8c:48:43:5f:1c:fb:4b:3f:7a:5b:b7:0f:31:47:74:
45:d3:ca:fc:05:5a:97:da:2d:48:b6:c5:cd:d0:2e:
31:e9:f8:02:eb:36:f1:6a:81:09:9a:75:5c:08:4c:
62:bc:61:47:4f:6f:a3:93:ac:31:00:8e:c3:7c:0a:
31:7e:90:57:09:2a:24:e7:cd:8c:b4:48:4a:59:a2:
92:65:ff:d9:42:c1:ce:9a:de:0c:be:91:65:5b:28:
8d:5f:dd:3a:d7:16:05:32:48:cd:b1:63:e0:0d:2c:
33:9e:b7:de:94:17:64:ec:88:b3:63:e8:fa:66:69:
33:fb:07:c1:b3:00:6d:8e:86:d4:a7:70:ca:f3:73:
62:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B7:1B:56:CC:EB:3F:AB:9A:C3:22:DB:12:CA:A1:E4:D5:55:D4:3C
X509v3 Authority Key Identifier:
keyid:AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:14:89:cf:f8:44:2c:4d:6b:96:b5:b3:46:16:57:2f:07:9a:
2b:31:11:e8:b9:4b:c9:3d:6f:56:9f:fb:dc:ac:b2:30:8a:87:
fe:c4:cf:3f:09:68:65:c4:c6:28:6b:ee:30:7a:34:b8:da:7c:
5b:4a:4c:34:30:c8:b7:42:15:33:74:eb:fb:bc:f7:f2:3f:b9:
08:08:f8:ab:e4:73:7b:14:dc:c5:dd:a5:cb:6b:90:eb:30:30:
e3:73:6c:55:67:b3:43:a6:21:9c:9f:49:86:4b:94:dd:7f:4f:
56:cf:11:eb:64:40:7b:d8:bd:35:ca:b7:ac:74:2d:ff:78:37:
b9:64:64:6c:99:da:81:02:c9:14:3e:90:c0:2f:26:12:b3:c2:
6b:51:3a:58:08:c3:39:64:3c:40:b8:8d:f8:a0:4f:59:13:e7:
69:6a:69:d6:72:b7:19:b0:af:4b:c3:ab:89:55:a7:f6:b6:1a:
39:6e:80:89:24:a9:b2:a3:8d:8e:91:44:88:a5:2a:eb:ef:f7:
33:24:f5:ad:a1:12:02:51:48:3b:86:2a:df:62:7b:77:e2:2f:
61:f5:35:74:12:0a:c3:38:f7:31:23:64:e4:ce:40:c0:0d:74:
1f:c9:78:81:44:c8:5c:8e:c3:f4:6e:a5:a6:9a:71:0f:44:4e:
7a:d9:96:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:07:48 2026 by rpki-client