Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
File: dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft (raw, json)
Hash identifier: 06xyiEXKWqoMI7qgGVKvuzKx+/EX3uRKTYhCeGq1Qwk=
Subject key identifier: 8A:A9:9A:D6:4F:58:CB:D7:B9:33:A6:5E:CD:1B:D6:A2:AA:D0:04:94
Authority key identifier: 75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED
Certificate issuer: /CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
Certificate serial: 019E2AA7609AC864CC936B8B0B8126DFE706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
Manifest number: 0160
Signing time: Fri 15 May 2026 08:01:12 +0000
Manifest this update: Fri 15 May 2026 08:01:12 +0000
Manifest next update: Sat 16 May 2026 08:01:12 +0000
Files and hashes: 1: 5vgf_9aZThkj_7VAzPV1SdycQ9s.roa (hash: WWuwQNMz2jPS1Lz9ZyTa8kKgvLVWvH3DolJRQpBYZVw=)
2: ZUFdt76XEIRqjB1ZsCU8KDPIIeE.roa (hash: +22Qmq4Y9pNmDRsynGIXRX9EtOmlc0lMrcEc8jeBxvw=)
3: dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl (hash: mrzBHdHWonvdDl+cPOdqUOuVVoY9rltNZ96Cxg5DZEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:a7:60:9a:c8:64:cc:93:6b:8b:0b:81:26:df:e7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
Validity
Not Before: May 15 08:01:12 2026 GMT
Not After : May 16 08:01:12 2026 GMT
Subject: CN=8aa99ad64f58cbd7b933a65ecd1bd6a2aad00494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:03:9a:fd:13:8c:91:af:55:04:d3:6a:18:2e:
15:9a:44:0e:8d:4f:97:53:23:af:ce:9f:31:48:2c:
50:46:c6:06:16:54:4d:47:7e:a0:ae:00:d8:2e:17:
a5:6c:25:f8:81:8c:3d:6b:c7:c7:6c:37:cd:8c:01:
60:92:04:1d:8b:a5:c3:56:a3:85:17:d7:76:56:58:
f7:a2:61:2e:23:d4:56:74:46:f9:80:f3:63:61:cb:
90:2c:5f:25:03:92:db:d1:b7:53:98:e1:b1:60:57:
7e:59:9c:dc:39:8f:f7:85:a7:49:d4:61:74:9f:c7:
e1:c2:21:81:68:96:b8:29:27:fe:2b:6a:fe:e5:94:
22:43:9c:2e:ef:f9:54:55:5c:12:4e:a4:15:ea:a6:
38:76:83:9e:b0:81:d7:d3:a3:53:63:cc:00:b8:a8:
81:fc:6b:50:ed:5e:45:9f:cd:87:33:a0:11:6d:3a:
33:40:06:02:23:2e:86:06:81:e6:1b:e3:05:37:0e:
24:5a:bf:a1:7f:da:92:44:c0:a3:58:d9:b5:e1:74:
7c:bb:e2:bd:70:78:af:66:32:5f:c0:a6:dc:55:2d:
ef:8f:23:c2:38:a7:79:bb:45:47:3c:0a:7d:42:85:
e1:8f:52:9e:f1:08:41:cd:4b:a1:22:57:d3:13:45:
c8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A9:9A:D6:4F:58:CB:D7:B9:33:A6:5E:CD:1B:D6:A2:AA:D0:04:94
X509v3 Authority Key Identifier:
keyid:75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d3:eb:61:2b:b5:cf:46:09:33:17:dc:39:22:f2:39:2f:01:
17:61:e9:82:21:93:9f:5a:dd:cb:ae:3e:2c:a2:9b:f1:8b:74:
da:f3:91:a8:15:0d:71:67:db:53:28:64:50:f5:89:55:14:df:
3e:43:16:73:b4:f5:0b:59:13:38:35:81:24:4c:13:43:ad:6d:
25:01:6b:54:44:b7:3b:5f:41:6d:8b:e9:ab:b1:6f:ec:2c:43:
46:33:b3:84:93:30:3c:b7:2c:6f:3c:d3:e3:57:eb:0c:19:be:
33:23:ff:67:5b:af:33:f6:1d:7c:47:a9:ff:42:d6:68:ab:95:
a2:04:0a:07:ff:e3:d6:9b:c3:ab:65:9b:30:9b:10:b0:35:c3:
5d:26:d4:9b:a6:0e:5e:39:1a:be:9b:ee:b5:1b:f4:af:05:7f:
0d:1a:87:9f:c8:76:25:4c:15:60:26:f5:42:39:f1:30:4f:db:
32:fb:3b:16:ef:59:5d:37:cd:7b:04:55:4c:e8:cf:21:0f:bf:
9b:a8:00:a1:07:d7:6b:23:72:7a:5a:9d:4a:58:5d:4d:1f:5d:
a3:e1:cd:97:c0:5e:9c:0f:63:4c:6e:28:b5:09:0f:40:77:0a:
4c:dc:79:18:1a:a1:59:5b:e0:50:dd:69:1b:fd:19:05:d4:7a:
1a:b5:33:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:02:37 2026 by rpki-client