Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
File: RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft (raw, json)
Hash identifier: pTCq8YS5Kx01FWGK9MlhcWkC+jJTIU6TakFrlBrRnaE=
Subject key identifier: 7B:93:B4:AA:64:08:CA:8A:76:A3:32:9D:FA:7B:AF:F4:2F:53:48:7A
Authority key identifier: 45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
Certificate issuer: /CN=459ad2ece3e5911093d964753b656459c9bc05a7
Certificate serial: 019F8643E019BBF5F9ED6A6C7F16661405C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
Manifest number: 1247
Signing time: Tue 21 Jul 2026 20:00:22 +0000
Manifest this update: Tue 21 Jul 2026 20:00:22 +0000
Manifest next update: Wed 22 Jul 2026 20:00:22 +0000
Files and hashes: 1: RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl (hash: MQ8cF/ABXMvFEU4Ueahz3dCxDT43VT4AEiPrFXKPtTo=)
2: oxM4weLdM3j7jrYJT8BJG0W0cJ4.roa (hash: JzjynEnEp0mde9J1/ZPR8Pa7VycJrBNUsALJMI999+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:43:e0:19:bb:f5:f9:ed:6a:6c:7f:16:66:14:05:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459ad2ece3e5911093d964753b656459c9bc05a7
Validity
Not Before: Jul 21 20:00:22 2026 GMT
Not After : Jul 22 20:00:22 2026 GMT
Subject: CN=7b93b4aa6408ca8a76a3329dfa7baff42f53487a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f8:72:f1:0d:95:8f:4a:d1:09:f2:a5:8a:51:
58:7b:fb:55:3c:6e:5f:60:8f:8e:ea:54:d8:96:06:
05:11:ef:8e:fc:a5:bd:0a:6f:a8:e6:29:d5:91:1f:
56:75:13:3e:3c:dd:84:38:a1:56:5d:6b:b1:4f:55:
ff:bf:95:6b:02:61:1b:96:d6:e8:92:66:65:57:98:
e0:e8:bf:44:67:42:1b:55:6d:bc:7f:b2:16:8a:98:
e6:fd:0f:ae:48:2d:01:63:3c:d4:9b:c2:b4:6d:36:
f0:eb:f9:33:8b:0a:41:0f:91:f2:ca:3a:41:76:d4:
ad:7a:5e:5d:fc:b1:82:8a:4d:41:a1:34:eb:0c:81:
22:ce:c3:32:ed:31:87:58:81:8d:b9:48:38:d8:61:
ee:c9:c6:0d:04:9b:e1:0d:84:45:d4:59:ca:f7:1c:
77:2f:97:dc:70:e5:31:6f:de:e0:3c:13:3e:f2:a1:
a4:ab:b0:2c:47:7e:ea:43:26:80:49:84:95:81:fd:
12:2c:59:3c:a0:72:a6:7f:ee:ea:a0:cc:d7:e5:37:
f9:a9:af:18:e4:6c:66:72:82:7e:e1:52:f2:30:74:
cd:79:f7:12:13:0b:6a:ad:3e:88:f0:d1:e2:2b:81:
03:4a:9b:a9:8e:10:ae:90:57:09:a9:27:bb:6f:a7:
b0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:93:B4:AA:64:08:CA:8A:76:A3:32:9D:FA:7B:AF:F4:2F:53:48:7A
X509v3 Authority Key Identifier:
keyid:45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c2:35:cf:73:a3:7d:5e:95:3e:16:f8:72:ed:4b:f6:4c:ea:
7a:dd:15:66:a9:9d:7d:9c:14:d6:8f:68:c5:8b:9d:b7:67:86:
fe:b2:23:da:8f:1f:cb:8e:12:17:ad:6a:b6:f4:3c:fc:4d:0b:
8f:94:10:ab:56:92:49:90:80:5d:eb:c9:6e:e5:4f:46:0f:d8:
36:f1:65:40:cc:05:40:cc:c0:06:1f:b4:27:1b:37:59:6b:a1:
7d:f6:a9:c2:8b:6a:00:2b:a3:8f:90:13:c8:59:d5:9e:c2:b5:
e5:4d:47:e6:74:4f:e7:ce:4d:3b:7f:e2:d5:1e:32:26:90:d0:
7a:bd:e7:53:cf:ac:2f:40:15:03:8f:e9:51:4c:55:56:db:b5:
a0:4b:4f:21:48:37:54:e4:dc:f5:e0:e3:90:4b:54:0b:d3:0f:
90:cd:f6:05:58:5e:ef:b2:3f:86:d6:98:a7:35:9e:fe:90:c9:
6e:84:e3:0e:f4:a6:56:ac:da:c0:e7:4b:16:5b:88:e7:a6:0e:
f6:13:98:95:49:6e:5e:5e:fa:2f:7f:f9:00:48:a0:0e:3a:59:
e0:3e:ae:0a:37:38:d1:0d:61:f4:a6:29:d8:76:5a:59:3d:87:
6e:60:6f:18:5f:43:55:4a:cf:db:03:3f:c7:e5:04:9d:55:1c:
6b:ac:b6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:11:07 2026 by rpki-client