Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
File: RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft (raw, json)
Hash identifier: HqarvcYeoRzn8sLZNsYCo9fTo6hZJrjY0F1J/e+nYPg=
Subject key identifier: 10:C7:64:4A:41:08:71:20:12:72:96:60:57:3A:D6:45:76:9A:81:89
Authority key identifier: 47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
Certificate issuer: /CN=473469a966f4df3cf28171d87c74780fc472f979
Certificate serial: 019E1F478DB74CC5B0ADDB8DCC2F670B876E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
Manifest number: 0C0F
Signing time: Wed 13 May 2026 03:00:43 +0000
Manifest this update: Wed 13 May 2026 03:00:43 +0000
Manifest next update: Thu 14 May 2026 03:00:43 +0000
Files and hashes: 1: DNxT4KfUnSN5D5Pb2TXRMl9CQRk.roa (hash: U4JVcc+2nFb5M82ma1QdMgZr3eKXlGDJ6qSOPbU6n2I=)
2: RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl (hash: heeczwoYIjygDqegcZO/RbIRSYhLIgWXHv1oCHRj1Po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:8d:b7:4c:c5:b0:ad:db:8d:cc:2f:67:0b:87:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473469a966f4df3cf28171d87c74780fc472f979
Validity
Not Before: May 13 03:00:43 2026 GMT
Not After : May 14 03:00:43 2026 GMT
Subject: CN=10c7644a4108712012729660573ad645769a8189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:b6:16:5c:f9:cb:da:cf:97:1f:88:b8:79:
fa:95:30:65:13:e9:5e:91:c2:36:6f:92:ca:f5:6f:
1a:e7:a7:0a:6e:d9:2d:82:ec:39:09:d7:25:ae:b8:
b7:50:73:7c:32:6a:ea:23:80:af:da:1f:c2:62:43:
99:b5:ab:5b:8f:7b:95:72:6c:13:b2:28:e5:c7:94:
51:d4:b5:67:76:6c:05:e4:b7:3d:61:e3:4a:a5:80:
3d:63:04:38:8b:09:d4:44:dc:00:7e:66:b3:38:56:
a4:51:e0:45:18:5b:48:59:43:2a:8e:1c:21:b1:44:
7e:65:9b:1f:d1:96:18:81:78:27:e4:87:74:ec:60:
56:7f:46:54:33:5a:24:7a:e3:e0:36:d7:21:b0:5b:
94:c7:c6:e2:ea:4b:0c:c0:ff:7b:ae:f7:e4:af:30:
74:05:26:20:1c:4e:73:67:bd:8f:ee:fe:9e:de:8f:
99:8c:85:8a:eb:b6:00:f1:8b:ae:93:42:3d:f0:27:
d9:08:00:32:2d:c4:89:f3:5f:1b:5c:ab:61:a4:4c:
fb:2c:90:0b:75:86:70:e2:59:64:6e:32:83:8a:7c:
9b:ad:c7:3d:23:8e:a3:21:2c:6a:cc:49:b8:2c:90:
b0:a0:8a:32:aa:2f:ac:b7:96:3f:6c:84:99:ec:64:
73:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C7:64:4A:41:08:71:20:12:72:96:60:57:3A:D6:45:76:9A:81:89
X509v3 Authority Key Identifier:
keyid:47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:70:38:45:6c:c1:83:b5:1f:22:76:76:54:5c:4e:90:f5:cf:
40:6f:a0:59:63:b5:65:ac:06:cf:db:f3:ea:d0:4d:d6:33:4d:
8f:58:a3:6c:de:e3:a4:a1:ca:4a:98:4e:c7:75:57:56:26:cf:
18:c5:7a:7a:b0:3a:73:f6:ef:33:ac:36:1d:4e:6c:2f:61:e4:
5a:58:5b:66:bb:c1:9e:9a:bc:b1:23:f8:55:ff:85:0e:80:af:
19:00:f4:8f:68:45:cd:3d:14:73:b0:cb:63:30:c1:eb:a6:b8:
76:06:30:4c:2b:27:d8:f1:3c:c1:3b:a4:7c:04:a5:65:65:62:
e1:fc:4e:26:ef:4d:c0:10:eb:6c:9a:56:1b:5a:5e:df:68:b7:
40:0f:d0:1c:5e:31:2d:5b:44:2f:06:54:4d:dc:d0:19:a9:1a:
fb:1b:30:c6:bf:b5:e1:21:99:1c:aa:87:09:77:88:48:19:d5:
60:11:aa:0c:a8:15:1b:a8:9c:3a:fa:dd:2e:be:5b:ca:1e:54:
92:93:d1:e5:3e:49:89:78:8e:32:a5:d4:97:7a:7d:2f:21:5c:
66:b2:fb:09:3a:31:48:65:a5:fe:19:ab:78:68:2b:0e:14:2b:
01:aa:88:b5:66:c2:aa:ce:25:92:a9:52:e7:e1:64:5f:a3:ab:
96:1d:4a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:07:18 2026 by rpki-client