Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
File: rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft (raw, json)
Hash identifier: iJQ3Yk/12aIgUvc9WG/b77u3mV1DuI62LUNVbiCwDcg=
Subject key identifier: 34:DD:1A:00:4D:47:35:13:D7:68:43:A5:59:D3:8E:C3:10:63:15:EC
Authority key identifier: AC:EB:F3:96:C9:AD:F9:4F:84:DC:90:16:56:E2:55:CE:6D:50:66:0C
Certificate issuer: /CN=acebf396c9adf94f84dc901656e255ce6d50660c
Certificate serial: 019E20FFB63960E41FF56E72C4030B67ED95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
Manifest number: 057E
Signing time: Wed 13 May 2026 11:01:29 +0000
Manifest this update: Wed 13 May 2026 11:01:29 +0000
Manifest next update: Thu 14 May 2026 11:01:29 +0000
Files and hashes: 1: Rr66ufKb1MLh9Wv3Z89vKrKFJI0.roa (hash: Yiy6bWp1Un5UwdmVbAZxKqnd38OQfcX3Y4LJySknw8Y=)
2: rOvzlsmt-U-E3JAWVuJVzm1QZgw.crl (hash: cVtwlWFOUqruHfz7XB09dElqO12bAkEmY0jrVaG75oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:b6:39:60:e4:1f:f5:6e:72:c4:03:0b:67:ed:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acebf396c9adf94f84dc901656e255ce6d50660c
Validity
Not Before: May 13 11:01:29 2026 GMT
Not After : May 14 11:01:29 2026 GMT
Subject: CN=34dd1a004d473513d76843a559d38ec3106315ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:82:ca:b7:80:5f:1d:ba:07:39:c2:07:d4:9b:
58:1c:95:6c:a4:14:5d:43:0d:8d:0a:94:ef:de:d0:
37:e9:8c:7b:fc:20:64:08:f9:cc:5e:ba:64:58:42:
3a:3d:e2:af:22:dd:66:83:68:1a:fc:2d:fe:a8:ec:
58:e7:68:a3:58:26:9a:83:9f:5d:67:63:6f:0a:e7:
af:d3:33:d7:73:69:4e:7a:9d:a1:9a:e1:c3:80:af:
91:f5:14:bb:78:9d:37:e9:86:09:75:8d:4a:7b:f9:
61:77:4c:cf:f6:1b:0b:58:69:66:fd:a3:62:ec:a3:
c9:87:19:c3:ab:b6:32:b3:5e:ec:31:f9:01:c4:e0:
07:70:c9:2d:5c:3c:17:3e:46:95:7f:cb:cb:d0:f9:
94:a0:51:15:5b:31:f7:52:8d:59:4d:f9:6e:16:cd:
d9:49:20:46:30:57:a8:e5:72:c4:ee:e7:c5:9e:db:
8e:46:a5:68:96:4b:30:34:11:75:d9:bd:ac:c5:e0:
06:a3:77:6f:a7:38:cb:b0:f1:2c:fe:89:64:3a:59:
bd:08:db:af:f5:02:28:7a:38:e7:08:de:88:e0:92:
3b:6c:71:99:c7:c9:29:c1:f6:f6:32:3c:50:94:af:
af:50:a2:47:8b:79:63:4f:9a:2f:65:ca:c7:ae:a1:
b4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DD:1A:00:4D:47:35:13:D7:68:43:A5:59:D3:8E:C3:10:63:15:EC
X509v3 Authority Key Identifier:
keyid:AC:EB:F3:96:C9:AD:F9:4F:84:DC:90:16:56:E2:55:CE:6D:50:66:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:17:ee:2c:45:ef:a4:5b:8f:21:78:c9:47:04:e9:54:fd:6d:
ff:aa:15:6b:20:93:4c:e4:d1:49:40:92:e9:17:17:48:f0:bd:
23:28:86:f7:90:1d:aa:ba:8f:93:3e:b3:b0:34:c3:5b:20:06:
64:29:33:98:55:3f:48:92:6e:63:47:0e:02:20:1f:dd:ce:1c:
ff:2f:c6:7b:34:24:59:53:c6:8e:07:7f:dd:ca:28:72:19:54:
ca:ab:f6:a2:36:30:80:79:fa:45:db:1c:4b:17:69:a6:2d:6c:
1a:09:78:bd:5e:f7:cb:4b:2d:99:0f:06:bd:9e:96:83:37:bd:
48:5d:e4:1c:f9:73:44:59:f2:86:6f:d0:71:ba:b5:c5:fe:41:
cf:4d:91:e8:e8:cb:0b:72:d1:b8:ea:0e:21:a1:13:d1:6a:25:
ac:44:0b:57:ec:d8:f2:1f:1e:f2:46:96:a3:b4:58:1d:ae:e3:
a6:5e:99:6f:36:0f:0b:aa:21:f6:e3:85:23:53:45:63:4e:3e:
f5:93:61:c7:42:26:86:00:43:0e:87:15:bf:60:72:22:66:10:
92:06:bd:b3:f9:78:9e:b8:2a:e9:8e:23:40:20:bb:50:b9:a4:
08:2f:45:86:65:71:13:90:e0:d2:c1:b1:3f:4b:83:ed:85:d7:
41:68:49:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:17:24 2026 by rpki-client