Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
File: RZsv0AU73X53dTmNsWO-6HckeKU.mft (raw, json)
Hash identifier: lgRP/nFIpKZ3QrAJjMNCH69ZOd5ruxTd4tnMtUuOoHs=
Subject key identifier: FA:5B:48:42:19:78:23:32:25:9A:4B:7B:8D:FA:53:AF:72:F2:47:4F
Authority key identifier: 45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
Certificate issuer: /CN=459b2fd0053bdd7e7775398db163bee8772478a5
Certificate serial: 019FA228FC92BC0CDF8EF4D38524291505C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
Manifest number: 19D3
Signing time: Mon 27 Jul 2026 06:00:22 +0000
Manifest this update: Mon 27 Jul 2026 06:00:22 +0000
Manifest next update: Tue 28 Jul 2026 06:00:22 +0000
Files and hashes: 1: 1HXGb5-BWji6FxKqR9J69GxxjeY.roa (hash: +4VLoXs2I/t3CPnVmm9jbZnZFGbEot/glqmRqD+Blr8=)
2: RZsv0AU73X53dTmNsWO-6HckeKU.crl (hash: SkmUi7eXFWpLO7rKMp0ZiLunHdoIlNlHEJTFi8laVxU=)
3: WQdZNfyoXAF_mZl28cfENCrtIMs.roa (hash: U3LDO+4WO64Jt5h3Mz2CbjqUHfSHcu4yyw0WNvXOY9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:28:fc:92:bc:0c:df:8e:f4:d3:85:24:29:15:05:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459b2fd0053bdd7e7775398db163bee8772478a5
Validity
Not Before: Jul 27 06:00:22 2026 GMT
Not After : Jul 28 06:00:22 2026 GMT
Subject: CN=fa5b484219782332259a4b7b8dfa53af72f2474f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d6:79:e9:a9:d1:b0:09:3d:ee:5f:67:31:0b:
61:2b:ed:9b:e9:7e:8a:c4:75:0c:d1:d3:6b:24:02:
db:9e:bb:66:2d:e5:b6:e1:4f:40:c1:d0:6f:6d:58:
dd:c6:52:18:d5:7b:d8:34:25:61:eb:22:af:7d:a9:
a0:73:ec:35:9a:7b:a6:08:c0:4e:2d:ac:b3:d3:21:
6f:bb:f5:83:d7:7b:26:bf:51:db:29:d1:de:86:ab:
c9:d2:e2:0d:0d:bd:81:63:7c:58:41:95:1e:75:e3:
44:26:d6:9c:56:71:2e:d1:e9:29:3a:1d:3f:42:da:
1e:e4:e2:3e:60:79:29:57:01:f5:c4:ef:1b:05:da:
50:7c:5f:db:2f:30:51:3c:30:e4:2e:85:5d:f4:e7:
f1:17:30:a7:67:a2:b0:02:c9:24:bd:a3:0d:30:46:
29:15:47:e2:db:a1:c5:b8:c3:49:7e:65:8f:49:ba:
0a:2c:01:27:22:e7:6e:5c:43:25:d6:9a:8d:20:4a:
17:83:73:e8:bf:39:d3:53:cb:81:c6:9c:f0:63:81:
6a:ae:94:1b:8b:2c:6b:22:71:ea:d3:ea:1c:7e:67:
2b:c0:f2:0f:75:8c:40:d9:f4:85:9b:5a:43:46:0b:
5e:80:46:c9:b7:e8:07:f4:ca:35:b2:8d:0d:64:44:
67:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5B:48:42:19:78:23:32:25:9A:4B:7B:8D:FA:53:AF:72:F2:47:4F
X509v3 Authority Key Identifier:
keyid:45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:00:8b:6b:cf:e7:c5:d4:0f:f8:08:57:50:da:be:43:fe:8b:
59:64:1a:46:43:93:47:7f:2b:90:58:1c:b5:3b:6a:3f:d9:6d:
38:7b:42:e9:b1:a8:37:5b:19:9a:56:1f:82:91:0f:3e:6d:40:
75:e7:6f:04:d5:16:ae:9c:10:af:5a:0b:dd:c3:42:b5:59:fe:
6d:29:43:fd:5d:f5:cb:6d:f1:57:36:78:75:15:3b:af:bb:8a:
28:c9:f3:bf:03:7d:7a:6d:61:f3:cb:8d:97:f4:4e:bd:2b:37:
45:75:51:65:0b:6c:23:ce:ca:f2:a0:ff:f2:ff:c6:77:0a:1f:
b6:2b:f2:4a:04:f8:42:65:ee:42:b3:65:7c:4a:57:bb:0c:cf:
36:3e:af:df:9a:0b:3b:b5:90:2a:f9:b3:cf:69:98:1f:c2:17:
08:72:f5:c5:2e:db:aa:ba:94:ea:ce:e0:17:b8:35:d7:ac:76:
99:9c:26:21:6d:9b:73:13:31:05:64:78:96:68:91:56:4d:ca:
c3:b2:ca:e1:3f:be:8c:ee:af:3a:c5:ac:1d:8f:16:33:dc:07:
9b:df:ba:4b:ae:43:b1:43:b1:65:ca:fe:00:e1:e4:72:20:be:
85:44:f9:e0:cf:c4:62:a9:c5:bc:8b:50:39:fc:33:eb:8e:9a:
9f:d6:9b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:46:54 2026 by rpki-client