Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
File: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft (raw, json)
Hash identifier: AQqcHB2yyS0C3GMQG1oK/y5Dm2010gyEfNvTipXABCA=
Subject key identifier: 35:83:3F:AE:E9:A2:26:CA:A9:9E:1A:74:65:BC:21:C8:51:82:A2:92
Authority key identifier: D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
Certificate issuer: /CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Certificate serial: 019E1CEB94E93856F48A57BAF078B88E529A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
Manifest number: 0468
Signing time: Tue 12 May 2026 16:01:01 +0000
Manifest this update: Tue 12 May 2026 16:01:01 +0000
Manifest next update: Wed 13 May 2026 16:01:01 +0000
Files and hashes: 1: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl (hash: 3KFSzQ5KtXwTmF2hvvvqzXYzuGgzF+ZR20t91fMf+SY=)
2: 7jgvwOfbTS9EcboNY_mci-_zFzQ.roa (hash: SGXWMpwVSmLMAKNP+kPKK/+5RwAE6AIl6oVDLelweNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:94:e9:38:56:f4:8a:57:ba:f0:78:b8:8e:52:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Validity
Not Before: May 12 16:01:01 2026 GMT
Not After : May 13 16:01:01 2026 GMT
Subject: CN=35833faee9a226caa99e1a7465bc21c85182a292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:87:30:4f:74:a2:96:0d:b7:ee:70:32:63:49:
7c:ff:a1:64:e2:54:9b:3f:77:85:43:71:69:45:ed:
c9:88:2d:7f:b4:a6:a5:b7:19:ec:67:e3:89:c8:3f:
5f:d4:d1:8c:57:c6:ba:0e:5e:f5:aa:d0:41:52:a2:
81:4b:de:c8:43:7c:7b:b0:92:9b:bf:ba:4b:a4:96:
82:bb:ec:40:9c:4c:d6:8e:f3:91:59:35:ed:a0:73:
77:9c:b1:eb:7e:83:ce:4f:35:97:d1:14:fb:a4:e4:
19:33:67:12:72:7a:d5:c8:19:3c:3d:7c:7c:25:43:
15:58:2b:af:8a:20:3c:d3:eb:48:7c:fc:14:50:a9:
1d:6e:96:b7:eb:01:f9:38:cc:40:7e:03:65:d6:00:
51:a6:62:47:61:8c:98:2e:b2:00:04:20:d5:87:ad:
8d:b2:1b:51:f5:1d:7d:45:d3:58:b1:59:e8:30:df:
21:a4:84:d5:1d:82:05:f5:0c:92:86:45:7c:6e:16:
ea:9e:67:25:24:9a:27:c1:c0:0c:fd:51:dc:2c:b2:
7a:d1:3f:84:0d:94:82:df:68:28:35:3f:1b:a1:58:
e2:21:90:1a:e0:3a:fd:37:01:3e:9a:eb:e2:b7:77:
c2:e7:3e:9f:aa:3e:eb:67:bd:7c:cb:37:52:5d:b0:
61:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:83:3F:AE:E9:A2:26:CA:A9:9E:1A:74:65:BC:21:C8:51:82:A2:92
X509v3 Authority Key Identifier:
keyid:D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b1:21:23:f7:0d:5d:97:06:df:ef:7c:f4:76:53:4e:a9:81:
ec:91:00:c4:1c:d8:7d:65:f1:48:70:2d:c6:f1:e2:b4:2e:14:
56:73:a9:6b:28:0e:70:79:10:52:96:25:48:c5:bc:a6:c3:40:
e9:25:65:00:04:92:37:2d:ac:1d:6b:ab:78:bf:ca:44:05:75:
dd:92:3a:56:f2:31:06:2d:bb:fb:34:82:d2:1e:58:c4:f3:af:
62:eb:6a:6d:bc:1a:e2:24:e6:13:9e:dc:65:d1:ef:df:f7:ea:
dc:d6:f5:80:21:61:12:64:9d:2a:dd:de:ae:91:1d:d0:cb:be:
56:e4:07:75:fe:65:fc:a0:ea:2b:29:98:72:e9:8e:38:d0:f4:
42:13:8b:b4:34:f1:a7:c6:7c:da:d3:f3:aa:c3:06:cf:ca:07:
3b:66:9a:a0:3d:ca:6f:32:68:d7:14:57:b2:a8:b5:e4:c9:20:
ad:64:63:89:cc:f3:81:9a:00:d7:9f:b3:e2:5f:21:d3:3d:81:
1d:d8:56:d5:37:fd:f0:28:84:87:2e:93:5f:38:37:41:7a:45:
ed:2a:03:99:e1:ba:bb:6d:5c:80:5c:fb:d9:10:29:b1:bf:6e:
4a:90:82:4b:1a:36:ad:c2:8b:c1:1a:4e:d3:1c:43:b8:6d:c0:
97:45:af:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:29 2026 by rpki-client