Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
File: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft (raw, json)
Hash identifier: 7IFAw8Fr5Uon7KOpQgoq7e1fbAkgZ8z2dA9wIYWy7qw=
Subject key identifier: 10:0A:63:D6:A4:5A:2F:68:FB:72:44:E5:C1:6E:29:EB:84:C0:17:B3
Authority key identifier: AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
Certificate issuer: /CN=af3adce3664bf0e7f688ff4122551734c4d14756
Certificate serial: 019E1C477CC76E8136A1469FA18B11603B4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
Manifest number: 033B
Signing time: Tue 12 May 2026 13:01:47 +0000
Manifest this update: Tue 12 May 2026 13:01:47 +0000
Manifest next update: Wed 13 May 2026 13:01:47 +0000
Files and hashes: 1: WKKdAS92LVILbjnTiiXNrRI_064.asa (hash: WU7xtDYPq+tmZfgD8wJKGXUqlisupARfwtckbBQ0ds0=)
2: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl (hash: TIfv0XxgKxNEXIq/w6i64EMYnBfTp5Hu9fHapYyMIxI=)
3: ymjEj-AVl-jhoYqun7KK_jww1EY.roa (hash: Lravz6mXezUcFlH14r837C4PlhGpAXXPBKh9Ost0iM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:7c:c7:6e:81:36:a1:46:9f:a1:8b:11:60:3b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3adce3664bf0e7f688ff4122551734c4d14756
Validity
Not Before: May 12 13:01:47 2026 GMT
Not After : May 13 13:01:47 2026 GMT
Subject: CN=100a63d6a45a2f68fb7244e5c16e29eb84c017b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:94:3f:f3:aa:2c:1e:bc:5e:57:7e:2e:cc:e4:
1f:80:0b:06:24:28:80:0f:1a:f5:0c:54:e2:97:74:
58:86:df:f3:0e:2f:b0:d6:44:8f:c6:be:74:2b:25:
e9:0f:e2:6e:e0:3a:25:86:09:b0:75:c4:5b:78:f5:
a1:b8:5d:7e:56:7c:34:b3:cb:e3:25:3a:5b:2d:1a:
f2:79:08:6d:a1:b7:af:33:b2:2d:b4:64:4d:a1:68:
2b:35:5a:d4:18:fd:aa:4e:bd:64:3a:4d:0d:5e:71:
ca:ba:b9:c6:db:74:84:e0:cf:3e:8d:33:2d:b2:05:
1c:1e:e8:7f:b9:f0:9b:a2:96:fc:64:02:1a:9a:dc:
77:a1:62:db:54:da:da:d0:db:36:b9:3d:9c:e3:0c:
9c:07:ef:e9:fe:9e:88:97:95:e9:ce:a1:46:bb:7d:
1e:53:5a:4c:55:17:b7:76:d7:7e:3d:9c:87:9a:56:
96:6c:47:53:77:a9:d3:46:20:71:21:8a:be:9d:ab:
67:26:1d:e8:64:14:8a:51:f7:ab:ce:d4:b4:89:29:
c8:5c:a4:8d:44:e6:53:65:c3:5a:f6:1c:3d:21:2b:
b5:3b:6b:37:a0:03:01:95:7b:0d:5a:74:79:b5:39:
0e:25:4e:32:36:41:61:04:b9:84:0b:8a:e2:e4:71:
d1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0A:63:D6:A4:5A:2F:68:FB:72:44:E5:C1:6E:29:EB:84:C0:17:B3
X509v3 Authority Key Identifier:
keyid:AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1a:f0:68:21:04:a9:56:51:d5:b5:a4:07:83:3b:00:cd:fc:
9f:f0:6d:07:3c:4c:55:75:51:25:c4:f7:1b:28:9c:4c:d8:71:
14:45:0f:7e:00:b4:24:23:c2:07:01:12:06:f7:24:e4:e3:1f:
d6:35:d0:da:19:0c:0f:9d:ea:ea:80:05:5d:e7:cc:59:e5:c0:
d0:63:4e:d8:99:51:21:05:fa:95:45:13:04:db:9c:0f:d3:fc:
10:f8:a9:f5:52:c3:13:be:af:06:4c:73:a9:9b:86:74:84:7e:
b9:d0:9e:71:df:d8:91:d0:07:9c:ee:18:a3:dd:30:cb:45:52:
b7:00:64:3e:5e:83:d1:d9:f3:42:ef:8f:4e:be:76:0a:e1:34:
5d:39:82:ca:45:e2:48:7f:79:02:4a:d1:56:59:13:43:0d:88:
96:98:ba:2d:29:94:c9:fe:c8:f6:98:dd:44:92:e8:a4:ef:c1:
85:ae:76:50:86:60:25:ac:57:83:e1:da:8c:59:bf:17:88:2c:
59:42:21:09:45:97:29:b3:a6:f0:e7:d9:5d:0e:31:9d:9d:2f:
30:54:33:5b:5a:64:51:f6:ab:e3:27:0b:4e:75:cf:f8:f8:05:
cc:3e:1b:71:e4:32:77:b3:ce:cb:08:4d:b2:17:86:ce:c2:f7:
9c:89:44:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:29:34 2026 by rpki-client