Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
File: RZO5rApIawA3dl1gXIscgQQEbwo.mft (raw, json)
Hash identifier: 4USZBYqwquUIG4H8OF80t4iJr+0jOrl5rd7hn5MA2gk=
Subject key identifier: 18:0A:0A:3C:07:BA:2F:04:ED:08:D2:43:A5:E6:D9:B9:DB:1B:FA:25
Authority key identifier: 45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
Certificate issuer: /CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Certificate serial: 019CB7A6A0C0070BA16510B17A5D10EF8C59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
Manifest number: 0234
Signing time: Wed 04 Mar 2026 07:01:16 +0000
Manifest this update: Wed 04 Mar 2026 07:01:16 +0000
Manifest next update: Thu 05 Mar 2026 07:01:16 +0000
Files and hashes: 1: L7X-dPadfDyqsml5uaLmtXl56Kk.roa (hash: /6B0qNK7K7/Q2n1ppduNVDvL664tWHJJr6Qb1VYY0TE=)
2: RZO5rApIawA3dl1gXIscgQQEbwo.crl (hash: pA6yvs6RmpY46gB7GMmEUjVhquld5N8ozsUwM/Ce8og=)
3: dvF6DGgeQycYzO0PrasV3XyKjgQ.roa (hash: y+mb9vuI2SRMIEXtA5lNvvJhpmo6Layb3vm++u5RXUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b7:a6:a0:c0:07:0b:a1:65:10:b1:7a:5d:10:ef:8c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Validity
Not Before: Mar 4 07:01:16 2026 GMT
Not After : Mar 5 07:01:16 2026 GMT
Subject: CN=180a0a3c07ba2f04ed08d243a5e6d9b9db1bfa25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fb:6d:1a:74:95:6f:d8:65:fd:d3:36:0f:43:
c5:56:a2:d3:5d:62:79:bc:e8:d3:3b:22:13:b8:79:
22:65:57:36:90:f7:0c:9f:7d:34:c3:40:83:a3:62:
4c:fb:69:cd:4a:0f:81:97:33:d2:14:f6:9c:65:26:
c7:cb:3e:dc:bb:7c:05:35:68:f0:3e:ed:ba:c5:b7:
06:81:f0:e2:f8:26:23:4f:22:cf:3d:73:d5:05:ab:
8e:14:b4:c1:ef:a3:14:25:30:10:80:72:29:1f:53:
8e:07:42:0c:cd:22:21:64:e7:28:d4:74:91:53:65:
64:a1:f4:3c:9a:46:9a:ea:1b:50:13:77:65:45:91:
ad:b3:f0:1a:09:7e:2e:47:43:d3:bf:97:00:1b:25:
a6:6b:93:95:ce:33:81:a7:c1:6f:28:84:b4:6d:d2:
e0:3f:2e:98:31:a3:a7:8e:44:e9:81:49:fc:35:85:
5d:92:88:c3:c4:96:fd:a4:40:40:37:fd:d7:92:68:
c9:5a:6c:d4:30:62:49:6a:ba:c5:34:e7:f6:40:1e:
07:a1:04:76:fe:6f:cf:7b:8e:a2:5b:5c:6a:b8:35:
c7:df:99:4f:3a:45:0b:5f:5e:ca:a9:66:db:1b:a9:
fc:cd:b1:59:aa:bc:c6:d6:c1:fa:e4:34:07:74:5f:
a7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0A:0A:3C:07:BA:2F:04:ED:08:D2:43:A5:E6:D9:B9:DB:1B:FA:25
X509v3 Authority Key Identifier:
keyid:45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:01:c4:7f:c6:30:ff:cc:e7:94:60:e3:95:92:2b:a7:75:26:
dc:c8:a6:ca:9d:05:11:54:3d:3f:09:d4:1d:ed:77:b5:64:cb:
a6:ab:9c:2d:7b:51:03:a3:c7:42:8e:3b:25:77:69:55:52:96:
b9:0c:da:f5:f9:5f:66:c3:1e:0d:f6:bd:37:3a:bc:11:65:be:
52:41:80:cf:74:0e:27:69:4d:c5:4c:b9:eb:88:04:be:9d:e1:
84:30:21:16:53:50:0c:59:98:c2:30:98:ad:2d:52:f6:54:e9:
e5:dc:50:9b:4e:73:55:53:68:6f:5d:17:1b:31:3a:94:ff:ac:
c9:c0:53:1b:62:9e:c7:39:0a:c7:62:99:ac:55:74:00:17:ac:
29:44:89:ff:26:09:c9:c6:cf:e3:e0:d8:91:16:d4:03:12:7b:
c1:a4:59:33:75:73:9e:bd:46:b1:14:1c:94:79:01:09:e9:16:
c7:06:f4:55:27:a8:58:ac:d4:a1:c6:1b:2e:f0:52:fe:bb:f3:
fb:87:e6:a0:51:38:71:4a:ff:19:70:25:8a:ec:40:ec:93:8f:
9d:2b:f3:94:8a:6d:93:fe:56:ac:5a:35:24:cc:eb:c5:fa:52:
d6:91:ff:0b:96:a0:d9:88:9b:ab:53:19:36:b4:3b:85:0e:c7:
a6:d4:ec:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:11:22 2026 by rpki-client