Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
File: RZsv0AU73X53dTmNsWO-6HckeKU.mft (raw, json)
Hash identifier: FoH9L7Rd8JiJ04W6E3W0N7VpvN0Gfjsm6f9bswoU5XM=
Subject key identifier: 5D:C6:42:2D:45:98:3E:FE:FA:39:50:3B:D5:EC:CE:37:A8:B4:C4:22
Authority key identifier: 45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
Certificate issuer: /CN=459b2fd0053bdd7e7775398db163bee8772478a5
Certificate serial: 019D856D6208EEAFC6EC935AB31598841559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
Manifest number: 18BB
Signing time: Mon 13 Apr 2026 06:00:31 +0000
Manifest this update: Mon 13 Apr 2026 06:00:31 +0000
Manifest next update: Tue 14 Apr 2026 06:00:31 +0000
Files and hashes: 1: 1HXGb5-BWji6FxKqR9J69GxxjeY.roa (hash: +4VLoXs2I/t3CPnVmm9jbZnZFGbEot/glqmRqD+Blr8=)
2: RZsv0AU73X53dTmNsWO-6HckeKU.crl (hash: v2mfGuMxgHxj2D9ZL8lU+Bo/NehHplAIrO14m6zRQJk=)
3: WQdZNfyoXAF_mZl28cfENCrtIMs.roa (hash: U3LDO+4WO64Jt5h3Mz2CbjqUHfSHcu4yyw0WNvXOY9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Apr 2026 23:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:85:6d:62:08:ee:af:c6:ec:93:5a:b3:15:98:84:15:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459b2fd0053bdd7e7775398db163bee8772478a5
Validity
Not Before: Apr 13 06:00:31 2026 GMT
Not After : Apr 14 06:00:31 2026 GMT
Subject: CN=5dc6422d45983efefa39503bd5ecce37a8b4c422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:59:9e:62:ae:d6:9a:70:0c:44:50:e5:c1:61:
33:f8:ef:8a:7f:81:4a:2e:80:c0:04:e7:6e:d1:5f:
70:c9:8b:78:b7:91:91:ac:c8:75:d7:18:26:eb:8d:
c9:b8:3d:b4:bd:ba:47:5d:2d:df:47:5c:47:84:1d:
5c:66:7d:ce:f7:6c:cb:ae:b3:25:d5:89:dc:38:4e:
7b:1b:54:26:8f:e5:21:e1:28:3a:5c:bb:3e:ac:6d:
97:c7:ec:b5:c7:15:bd:a7:8a:d7:6b:0b:ae:a7:05:
98:2c:d2:3a:86:cd:dd:46:51:e6:4e:d5:43:8f:41:
5f:82:24:40:f7:64:c2:4a:6a:24:e1:2f:d0:ee:e7:
1b:e4:11:24:73:e4:9f:24:25:37:92:0b:b8:83:27:
d2:44:2f:d3:a7:1f:2c:33:84:8e:9e:56:66:16:0c:
0a:ee:07:39:45:7b:6f:ae:94:8f:46:ea:1c:16:ab:
59:08:e8:d9:06:26:fa:f8:33:0a:33:9c:a2:6b:9f:
e1:f5:67:a9:cd:df:75:b8:96:c1:1d:01:98:4b:c8:
62:df:8d:89:a2:bc:94:4e:45:a2:5f:e1:8a:0c:6d:
a8:b2:f2:ee:fd:9d:6e:6e:29:e3:5c:c5:5d:38:e9:
fb:a7:1b:54:dd:fa:09:43:4b:6c:66:6a:24:48:1a:
15:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C6:42:2D:45:98:3E:FE:FA:39:50:3B:D5:EC:CE:37:A8:B4:C4:22
X509v3 Authority Key Identifier:
keyid:45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:06:db:bb:66:02:75:bc:54:60:77:f2:15:67:bb:c0:00:4f:
3d:21:fa:d5:6f:80:de:4e:fc:67:48:c3:db:82:e4:51:4d:5c:
19:f5:ff:4c:d5:71:d6:22:2e:18:2f:1a:3c:23:76:57:b6:a0:
60:5a:fc:d6:1f:9f:fe:67:63:df:d7:d1:93:61:d9:1e:85:9f:
66:1b:ad:1e:81:fd:59:70:38:5c:a5:f8:90:93:3e:d3:33:56:
52:be:78:05:3a:57:f3:61:18:04:bb:0c:e8:48:08:0a:60:e0:
19:c5:cd:c8:a6:86:70:45:5f:cd:59:53:81:cc:e6:bc:0b:c5:
64:9f:ce:e3:22:40:86:8d:7a:8b:16:f0:e2:2b:c8:08:f6:63:
e2:54:96:7b:3c:94:e9:73:3a:46:ec:40:ae:3d:94:11:ad:e8:
0b:0b:4d:05:25:ee:be:35:f0:a4:5e:15:43:b5:de:13:98:cd:
d0:76:8b:fb:54:a1:61:a4:73:79:19:93:3f:3c:47:f8:34:69:
47:2b:f1:ac:2c:73:58:49:39:2d:b5:0d:9c:9f:a7:14:80:22:
76:f4:64:78:8f:bd:33:e0:72:24:80:9d:3c:10:f8:33:e3:ab:
bb:0a:de:af:02:88:d4:4c:01:d8:89:f1:2f:73:25:0e:b3:35:
4a:4c:3d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 08:07:02 2026 by rpki-client