Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
File: RZO5rApIawA3dl1gXIscgQQEbwo.mft (raw, json)
Hash identifier: finkMkcCPkNrdwdjBHw996/tOUIEeaEjTn+Y9iXwV5s=
Subject key identifier: E5:46:EC:F7:1C:2D:DF:83:33:FC:55:B4:F1:02:5D:14:62:11:0A:01
Authority key identifier: 45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
Certificate issuer: /CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Certificate serial: 019E88DA3CCAB4EE50EEA576E241D2C51BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
Manifest number: 0329
Signing time: Tue 02 Jun 2026 15:01:04 +0000
Manifest this update: Tue 02 Jun 2026 15:01:04 +0000
Manifest next update: Wed 03 Jun 2026 15:01:04 +0000
Files and hashes: 1: PwhUXZL6CNCiqFG6X40fxTprwe8.roa (hash: yC+P1a5oySp6096bFMvxZorw2eJsVR/SJkzLwcbEByE=)
2: RZO5rApIawA3dl1gXIscgQQEbwo.crl (hash: BY7lP8lPu2yQV1tCpWuh553RIC0WKHmDlPXmWKaCJrc=)
3: hRF9ml8v_UduMvXzWno8qvtUHJY.roa (hash: aeqiSYNEe9b/RioY7u2z8TFho5XR5ZNUJdfUaIjcd7A=)
4: yHoGz_C4wldG528epGNHto1gxQo.roa (hash: glJPMx//8zt+yG8He702w8iXfzLv6i3YIopNIKBNNJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:88:da:3c:ca:b4:ee:50:ee:a5:76:e2:41:d2:c5:1b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Validity
Not Before: Jun 2 15:01:04 2026 GMT
Not After : Jun 3 15:01:04 2026 GMT
Subject: CN=e546ecf71c2ddf8333fc55b4f1025d1462110a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:dc:0e:00:75:f4:75:8c:4a:0c:ac:79:b1:b5:
0d:66:89:9f:4d:f5:36:47:63:94:f1:cb:5e:34:14:
2e:b6:13:b4:26:09:5c:ea:cf:81:0f:8b:56:1f:86:
09:a5:0a:16:77:e0:e5:8e:07:34:5f:92:ec:6a:53:
b3:c7:d5:ff:10:80:b8:ef:be:91:56:20:7f:f8:29:
1a:f0:c4:4b:ae:f6:92:21:4d:fd:3e:2f:4b:2e:3d:
f6:6c:64:19:28:61:ed:3d:61:65:0e:53:e1:a1:b4:
ff:ba:ed:07:82:5b:50:d9:10:64:3d:f1:d6:11:8d:
04:90:f7:49:e5:a4:70:2e:b8:9a:f5:af:3d:d5:21:
43:c6:d0:10:9a:79:a0:29:e4:90:bc:4f:34:b8:b3:
d6:94:11:67:77:fa:65:99:7c:a4:82:d7:41:35:73:
72:11:9b:fc:57:cf:d2:90:15:43:62:42:54:bb:13:
e2:af:3d:02:7e:55:29:e6:34:26:cf:98:10:e2:c9:
e4:9c:6b:3b:b9:16:8c:3f:43:b6:10:dd:e5:9b:09:
cc:f7:36:cb:f4:fb:d9:6a:1f:57:5e:b5:6f:50:86:
0a:fd:6d:03:e7:ab:0a:cb:a5:e8:2e:38:58:f1:04:
12:54:f0:6b:d1:b5:ff:e2:0e:14:b7:ef:31:bc:19:
ba:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:46:EC:F7:1C:2D:DF:83:33:FC:55:B4:F1:02:5D:14:62:11:0A:01
X509v3 Authority Key Identifier:
keyid:45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9f:ff:1e:11:5f:ec:13:10:75:53:ad:53:00:a0:5d:2b:cf:
bf:61:ab:b4:43:a6:8d:c9:34:68:4c:a6:3d:e4:2e:11:8a:07:
11:92:35:e7:87:a1:e0:59:0b:82:b5:e9:7b:78:3f:a9:5d:fd:
ea:9a:c0:54:2c:5a:d0:a4:68:2b:47:45:ee:17:f6:c0:8d:1a:
27:94:d2:91:22:04:5e:e9:54:fd:14:ea:6c:6f:df:c6:e0:1c:
09:cd:b9:80:d7:11:39:fd:52:c1:d2:e7:80:a7:c0:87:d1:4b:
ed:24:53:7d:64:46:cc:14:ca:89:3d:fe:22:13:49:5b:19:6b:
69:d6:3b:25:84:6e:55:af:40:f8:01:36:5a:7e:7c:45:3f:fb:
bc:9c:f6:82:82:52:82:21:50:b0:af:0f:a3:04:1d:0d:e1:57:
6e:26:57:be:63:df:d0:c6:01:0c:5f:da:b5:b1:f4:54:9e:4b:
48:41:2d:96:81:31:29:14:42:34:2c:27:73:67:1a:f1:ce:a2:
77:d1:cc:2f:3e:ad:d5:32:ae:36:a0:b5:ca:82:b9:cb:a9:0b:
6f:f4:58:b9:a2:b2:08:49:f4:e6:30:a2:09:c8:06:e8:a2:be:
e7:ac:d0:b0:a9:d1:02:54:af:90:e4:c4:ba:1f:46:d3:7f:f2:
da:fc:57:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:48:21 2026 by rpki-client