Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
File: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft (raw, json)
Hash identifier: 4vWuqi+JXQcOQrMUbHbtN8IScJuRLmPMEMNg7JAPoo4=
Subject key identifier: 98:27:B0:61:FB:04:69:94:0E:BA:08:B1:44:55:E7:49:49:FC:ED:E5
Authority key identifier: 47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
Certificate issuer: /CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Certificate serial: 019F58C79E749D48CC21068D75BBE7E99576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
Manifest number: 0CCB
Signing time: Mon 13 Jul 2026 00:01:45 +0000
Manifest this update: Mon 13 Jul 2026 00:01:45 +0000
Manifest next update: Tue 14 Jul 2026 00:01:45 +0000
Files and hashes: 1: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl (hash: LYY9+ixz8mnZRti/mLTeHy5PK5tcUaVfeBwz4dcF1Ys=)
2: XHT_nValr2j6SKOfGPicLhiXyO4.roa (hash: H5XqJ+imumLxCFtabqMwr2EYqfcFyzubhax0NWhApw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 00:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:58:c7:9e:74:9d:48:cc:21:06:8d:75:bb:e7:e9:95:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Validity
Not Before: Jul 13 00:01:45 2026 GMT
Not After : Jul 14 00:01:45 2026 GMT
Subject: CN=9827b061fb0469940eba08b14455e74949fcede5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:91:aa:ff:33:45:29:5a:a8:a3:1e:26:f3:9c:
ea:29:be:f8:58:d8:1b:95:75:80:22:ef:b5:4a:b9:
e6:f4:d1:aa:f3:7f:52:3f:c7:ac:c5:1c:6a:88:f5:
11:6f:54:fe:d8:56:a9:ac:ce:2f:40:34:0e:74:ca:
f4:c3:b6:16:ea:92:b5:dc:4a:e0:98:f5:2f:52:28:
14:89:06:f9:79:70:d8:b1:8d:41:e9:f3:bc:a4:76:
84:78:a9:fe:25:d3:57:bb:2a:96:17:81:e0:17:3d:
2a:1f:a1:07:44:e0:a1:de:4a:c7:49:63:9c:34:17:
d0:d4:6d:a0:fe:a6:7a:c8:3d:a2:07:82:4d:47:7c:
dd:9d:18:de:fd:d9:b3:86:d6:2c:91:45:d7:63:5d:
d6:95:7a:4f:2f:7a:d0:b5:64:4d:bd:b3:4f:f5:d9:
ff:f2:35:da:8b:15:24:0c:e6:bf:06:e8:5d:dd:4a:
60:2a:da:b5:a4:7f:38:9a:1b:ab:23:d1:88:2f:03:
53:fd:3f:ca:10:b3:96:72:d0:7c:71:d1:41:d0:a9:
4a:7d:ad:27:fe:46:0d:87:00:df:c5:de:f7:c1:22:
c3:2d:20:90:a4:8e:6e:c3:b5:00:63:50:f4:d3:8c:
3d:19:61:a0:58:98:21:4c:22:b3:e7:7e:30:47:49:
1c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:27:B0:61:FB:04:69:94:0E:BA:08:B1:44:55:E7:49:49:FC:ED:E5
X509v3 Authority Key Identifier:
keyid:47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8b:c0:a6:79:54:fa:61:4e:f9:98:75:fa:99:03:55:0b:55:
0f:e8:d8:3b:0b:25:fd:48:af:f1:55:d2:70:29:a7:cb:0a:10:
37:ff:4e:cd:91:d6:65:86:3f:78:af:fc:f3:be:10:c9:74:cb:
93:cc:18:65:32:ef:fa:dd:84:e3:ae:0d:16:c1:83:1d:7b:ea:
49:73:99:d2:e0:7d:8f:5b:e5:41:cd:c3:db:2f:0a:3e:3a:ae:
b5:a0:c9:8d:ab:4d:21:bb:08:10:30:3b:62:2e:61:b8:82:52:
32:c6:71:82:42:d7:8d:69:ae:25:69:39:6e:3f:12:03:ca:18:
41:7b:fa:79:2d:03:47:84:70:c8:6a:bf:93:33:d7:02:02:9a:
79:6c:84:b1:fd:04:06:25:f2:01:72:a4:10:3d:97:93:9f:7a:
80:35:80:b7:3d:f7:4e:b4:8b:83:87:a5:17:32:ff:6e:70:b6:
86:bf:cf:54:14:42:bf:a5:0d:b8:74:26:de:62:43:3d:fb:64:
14:91:94:66:06:ea:1e:49:26:b9:92:1f:88:a9:1f:2b:53:51:
6c:80:6b:3a:0a:05:60:08:60:13:d4:64:88:1c:d7:b7:bf:89:
14:87:72:b0:47:06:46:12:4d:d7:2c:09:5d:1d:d9:e1:82:f0:
34:45:c2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 09:34:13 2026 by rpki-client