Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
File: rZr63kGDroAEjWuEgY7sRvaA-iY.mft (raw, json)
Hash identifier: 6u+S9DOt37mSG9+PFxTfWS9PtKbJfTDYG42pNKhYntA=
Subject key identifier: 95:84:07:FB:60:A1:85:36:91:6A:35:4C:55:C8:E6:81:60:75:CD:71
Authority key identifier: AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
Certificate issuer: /CN=ad9afade4183ae80048d6b84818eec46f680fa26
Certificate serial: 019E254A930774D86DD05BC857BD49583402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
Manifest number: 173D
Signing time: Thu 14 May 2026 07:01:44 +0000
Manifest this update: Thu 14 May 2026 07:01:44 +0000
Manifest next update: Fri 15 May 2026 07:01:44 +0000
Files and hashes: 1: YhV2RPOqPZXVdAMRyoGhsYcqg5o.roa (hash: +2OSyQukbn8Ac2KWdiYjJtwI1C2RFg/LbfJyv2kiAaQ=)
2: rZr63kGDroAEjWuEgY7sRvaA-iY.crl (hash: Nci25YPgx2v6jpghUE9tTQA77Wm7ItaBPvPulVfXiQA=)
3: zymQ8lQH58g9kZdGDaCuBYAYQI4.roa (hash: UsBi140YQptoK8CMotM0bOiYKyUZpHcPLjWyz1MACI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:25:4a:93:07:74:d8:6d:d0:5b:c8:57:bd:49:58:34:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9afade4183ae80048d6b84818eec46f680fa26
Validity
Not Before: May 14 07:01:44 2026 GMT
Not After : May 15 07:01:44 2026 GMT
Subject: CN=958407fb60a18536916a354c55c8e6816075cd71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e6:69:60:5c:b1:5d:a8:8f:55:fe:77:37:bb:
d2:97:98:a7:ae:84:e6:6c:14:01:74:1f:08:c9:db:
6e:3c:bf:01:a0:d0:d0:e7:98:c8:b0:f8:e8:b2:fd:
3b:b0:7a:36:fd:03:89:c7:5f:73:7e:d1:ca:d6:3b:
ab:e2:29:f6:68:4f:b6:97:1b:b7:32:37:75:59:ea:
f9:ba:46:f8:5c:1a:59:09:fb:e2:67:13:23:d7:1a:
7d:22:58:25:8e:13:44:3d:03:b5:df:e4:ea:44:d1:
4b:7e:5f:df:2c:67:86:2b:1d:84:bc:9f:7f:0b:f1:
2c:72:1a:0d:0b:70:42:d6:3d:c1:39:bd:55:0e:38:
72:0d:50:6f:fa:40:96:df:19:09:1c:11:ce:3a:4f:
e0:37:03:ab:a6:68:70:0e:02:88:85:cd:a7:a9:49:
fe:67:f7:52:91:d1:20:0a:42:00:7a:aa:15:da:28:
51:6c:57:ce:21:83:4a:cd:fa:64:12:55:bc:be:7c:
e8:6f:a2:b4:59:35:f2:90:45:c8:14:5b:f9:81:90:
d3:ac:d1:c0:87:9a:90:e8:31:e2:99:13:dc:33:70:
6a:67:7a:d1:c1:07:cc:31:c4:11:4c:79:d2:73:78:
b6:07:ee:23:9d:ba:6d:6c:60:d5:c7:26:6e:86:af:
94:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:84:07:FB:60:A1:85:36:91:6A:35:4C:55:C8:E6:81:60:75:CD:71
X509v3 Authority Key Identifier:
keyid:AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:56:21:98:7e:32:83:6f:98:10:4b:ce:01:66:c6:55:01:61:
62:fe:d0:3b:74:71:82:11:b9:8b:2f:11:1b:e5:1a:b6:25:6d:
e7:6f:7e:a9:d4:50:34:55:2d:64:96:db:17:8a:d7:71:38:dc:
01:e6:7e:05:a3:54:25:fd:63:c8:5f:fa:c1:b3:1d:2a:29:15:
d1:7c:85:7c:10:e6:f8:8e:23:42:5b:99:22:cb:e2:35:6c:07:
77:c3:0a:4f:e6:fd:e2:94:d5:00:36:33:1e:57:41:53:ab:fc:
4a:87:26:81:b2:2d:e4:e3:9f:27:93:4f:dc:c0:b2:e9:b0:6a:
ec:32:9d:8d:9e:28:89:29:df:09:1e:65:ad:89:97:81:d3:a8:
9f:60:c3:fc:b4:bb:97:0d:23:97:cc:29:86:c1:73:2f:af:59:
9c:d2:0d:a3:eb:11:73:a0:60:c9:1f:3e:90:e6:0f:70:bc:4f:
0d:63:c5:da:b0:b1:63:a1:cb:49:13:0b:12:07:89:7a:6d:16:
66:08:31:3a:7e:94:1b:4e:21:d2:ff:36:80:3d:a3:e6:e4:97:
d7:49:4b:74:d8:09:ea:11:d7:93:18:cb:1e:6a:df:9b:41:25:
ca:27:5d:4f:c3:1e:df:30:3e:2a:e7:cf:08:2c:15:fb:3f:09:
24:41:b6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 15:58:37 2026 by rpki-client