Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
File: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft (raw, json)
Hash identifier: IE4b72q/H9dKqjG1VrlmZiBSueyXu/bvZQe8P6w1C2U=
Subject key identifier: 45:16:7C:BD:4D:32:FC:0B:1E:E7:A1:FD:05:B4:7C:8E:5B:65:CB:44
Authority key identifier: 47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
Certificate issuer: /CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Certificate serial: 019E6F1A6B29E3E7EEEE098F2E00088F1390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
Manifest number: 0C52
Signing time: Thu 28 May 2026 15:01:02 +0000
Manifest this update: Thu 28 May 2026 15:01:02 +0000
Manifest next update: Fri 29 May 2026 15:01:02 +0000
Files and hashes: 1: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl (hash: ZPyGWetyWiDN3VCttcs4x9uR8ppwObTsq1UGv6S34p0=)
2: XHT_nValr2j6SKOfGPicLhiXyO4.roa (hash: H5XqJ+imumLxCFtabqMwr2EYqfcFyzubhax0NWhApw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 29 May 2026 13:25:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6f:1a:6b:29:e3:e7:ee:ee:09:8f:2e:00:08:8f:13:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Validity
Not Before: May 28 15:01:02 2026 GMT
Not After : May 29 15:01:02 2026 GMT
Subject: CN=45167cbd4d32fc0b1ee7a1fd05b47c8e5b65cb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4f:c9:a2:1c:22:b8:54:55:b0:f2:4e:4d:4b:
13:e1:91:5b:28:60:9f:09:10:c1:c9:04:0c:e2:0e:
cf:69:bb:6c:0d:23:39:ba:89:a9:24:df:bb:5a:fc:
37:40:6f:a2:5f:87:03:2f:48:d4:2b:42:4a:55:b0:
7b:c3:29:eb:f3:8f:32:49:1c:e5:fa:08:d8:12:5e:
c0:cb:48:14:bc:78:b5:91:31:c9:25:47:ed:fa:e1:
1f:4a:e0:5a:8d:bf:04:45:5e:cd:5c:75:40:a1:f9:
42:cd:46:9e:6f:ea:89:43:ee:d7:e9:b8:b8:79:2e:
9a:a2:7c:9e:21:50:66:68:58:7a:d0:7c:ca:75:28:
b8:f8:d2:a8:35:f3:e4:06:74:b8:c3:4d:40:0c:18:
ce:c3:74:b2:21:74:e2:d2:be:95:74:fb:14:69:ba:
2c:15:7a:70:a5:69:9d:08:3b:79:ed:a9:da:d8:ec:
50:10:b2:6a:d6:54:fd:e9:b0:86:2c:d4:78:dd:97:
2e:33:f7:89:3a:3e:70:9a:11:e7:76:bf:12:9d:fa:
50:f1:17:4c:2b:4c:04:92:5f:99:9d:e9:ba:0d:2a:
5e:0a:f9:21:29:81:5b:d2:f5:07:8f:a7:9f:02:df:
3c:59:90:54:39:f2:24:22:17:2c:2b:24:35:c9:cc:
a0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:16:7C:BD:4D:32:FC:0B:1E:E7:A1:FD:05:B4:7C:8E:5B:65:CB:44
X509v3 Authority Key Identifier:
keyid:47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:6f:96:1b:67:29:d5:2a:ec:c2:01:7c:0c:57:a5:ea:da:10:
21:36:24:40:fa:25:1f:23:73:b7:ec:a1:2f:e6:7b:1d:0f:e1:
c9:56:92:c2:b7:e8:54:b6:d8:18:82:da:e0:f0:ee:6a:2e:d4:
98:7a:70:70:42:7e:56:17:de:bb:e5:32:a6:68:6c:5c:5b:8d:
42:20:ad:a8:54:05:39:9a:e9:51:a0:cd:9d:c2:94:db:53:6a:
2f:ab:2a:7d:b8:f7:86:4c:76:19:17:ae:3d:bf:5d:2d:73:38:
1c:05:b4:fc:ec:a0:d6:70:4b:3a:d5:49:2a:fe:92:03:78:09:
a4:0c:7f:1d:d8:2f:78:b0:aa:a1:fa:b6:83:7a:ed:7f:3c:e6:
5b:39:06:84:b1:f2:5d:6d:cb:58:54:61:34:24:60:ce:d8:c2:
8c:7a:c4:6d:7c:f9:6d:13:26:90:9e:6f:38:59:81:1d:47:44:
39:79:07:23:ff:01:47:33:cf:b2:f1:ee:66:43:0e:5f:18:34:
fd:58:44:c6:48:a4:46:b4:6c:84:fe:e6:a3:5f:14:78:69:23:
3a:1e:38:49:ac:26:49:1e:c1:47:b7:27:77:d9:32:b7:d7:ca:
b4:22:2c:31:0a:5b:3e:72:63:27:cd:f2:e3:51:15:7d:16:45:
c4:b7:6b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 19:20:45 2026 by rpki-client