Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
File: RZsv0AU73X53dTmNsWO-6HckeKU.mft (raw, json)
Hash identifier: 5X2Ptf6ylU6Ftu3TEXbCtXM4llxLePkKSJQmY2ezqms=
Subject key identifier: CE:8A:2A:5D:ED:45:F6:DD:D1:91:81:FC:0C:73:63:AF:4C:D3:64:99
Authority key identifier: 45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
Certificate issuer: /CN=459b2fd0053bdd7e7775398db163bee8772478a5
Certificate serial: 019EB87D184B4F644E8231244EBD375A743B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
Manifest number: 195A
Signing time: Thu 11 Jun 2026 21:01:06 +0000
Manifest this update: Thu 11 Jun 2026 21:01:06 +0000
Manifest next update: Fri 12 Jun 2026 21:01:06 +0000
Files and hashes: 1: 1HXGb5-BWji6FxKqR9J69GxxjeY.roa (hash: +4VLoXs2I/t3CPnVmm9jbZnZFGbEot/glqmRqD+Blr8=)
2: RZsv0AU73X53dTmNsWO-6HckeKU.crl (hash: Z3Z6i1wQe/e1l2m/q895LuJFmuL8aWTkw6RmjNoZq68=)
3: WQdZNfyoXAF_mZl28cfENCrtIMs.roa (hash: U3LDO+4WO64Jt5h3Mz2CbjqUHfSHcu4yyw0WNvXOY9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7d:18:4b:4f:64:4e:82:31:24:4e:bd:37:5a:74:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459b2fd0053bdd7e7775398db163bee8772478a5
Validity
Not Before: Jun 11 21:01:06 2026 GMT
Not After : Jun 12 21:01:06 2026 GMT
Subject: CN=ce8a2a5ded45f6ddd19181fc0c7363af4cd36499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:36:01:2a:fd:0a:d9:fa:9a:13:6d:03:cc:
16:d4:0f:84:ab:10:ef:34:c4:c4:c1:a8:49:68:8a:
71:8e:5b:03:83:25:e9:70:d4:73:30:72:59:24:20:
65:cd:9a:da:de:71:9b:ef:68:cb:98:9c:ff:64:41:
1a:e5:7c:fe:f3:46:40:f6:7e:e6:c1:01:53:f4:12:
fa:41:2c:82:04:b5:c0:09:58:d4:83:ea:af:d0:37:
7c:a8:bd:fb:2e:c5:60:01:a2:d0:de:a8:2b:82:10:
29:ee:6c:8a:02:92:5d:75:d6:51:88:d3:5b:a8:20:
41:05:3d:a0:ef:35:f4:cf:0a:dc:ee:cb:33:2d:c8:
1c:7a:76:54:9b:b1:80:ad:66:e7:d5:4b:03:ed:4c:
b6:f4:f3:6e:05:d2:02:47:27:ee:f3:56:50:3f:66:
59:ae:a5:4f:b9:a2:a9:58:3c:c1:82:15:64:b3:90:
37:0a:11:9a:7c:47:1c:bd:17:d4:1a:d3:63:cc:c5:
4c:df:3f:dd:e1:12:49:fc:24:d9:c3:a5:55:70:c2:
41:d5:65:43:b9:f1:80:62:b7:8e:3d:d7:c6:9f:05:
5a:dd:da:d9:18:ba:12:a3:48:2b:05:7c:5a:68:26:
db:72:1c:10:ec:c6:1b:28:b1:00:ee:dc:e7:e1:87:
00:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8A:2A:5D:ED:45:F6:DD:D1:91:81:FC:0C:73:63:AF:4C:D3:64:99
X509v3 Authority Key Identifier:
keyid:45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f9:66:63:1f:f7:b3:30:00:13:b5:9a:07:a0:8d:d9:8a:93:
c3:65:0a:7f:fd:16:d4:6c:86:12:f5:08:e9:6d:b0:9b:3f:df:
74:f6:72:aa:d7:30:03:b1:ee:0f:15:98:2e:79:05:e8:07:b7:
67:11:28:c8:1e:99:d6:f7:21:b4:f6:16:d3:8d:2d:1e:ce:63:
c7:e0:62:ed:e4:e8:6d:26:63:25:1f:d1:f5:2d:c8:cd:3e:2c:
87:db:85:1a:96:61:8f:8b:69:b0:82:60:33:5e:25:22:a4:db:
87:2c:09:76:84:42:04:67:d4:ff:12:38:b0:6a:35:79:6c:a7:
04:97:b2:d2:e3:a5:4c:34:78:33:8a:e8:41:4f:95:32:03:71:
8b:10:d0:f4:98:4c:cb:02:ff:9b:a8:bc:b3:98:64:a2:ba:f6:
a4:d5:1c:ea:21:55:50:1a:6e:dd:3b:86:9d:9b:19:74:2d:55:
2a:85:b3:53:fb:c2:30:a4:cc:4e:59:8b:ec:9f:ec:51:11:dd:
60:a2:2c:f7:37:ab:b5:59:de:dc:b6:2b:52:55:f5:7e:a1:d2:
46:88:c7:24:e0:7a:43:5f:a9:b2:63:7b:5d:78:c6:80:6f:a4:
94:28:bf:00:5d:f2:b2:6d:36:b1:36:8f:37:d5:2e:53:ba:b2:
07:1f:ad:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:50:58 2026 by rpki-client