Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
File: Zl5NfqijRwyXA-51UUgcNvd0_rs.mft (raw, json)
Hash identifier: LNMBnM/E0+2cEzHQ7MqA/Fd4455IrkMiBz4TCi9EUDc=
Subject key identifier: 0D:1D:A4:1A:71:14:6E:03:98:23:F0:44:2E:99:60:35:B2:45:E7:2B
Authority key identifier: 66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
Certificate issuer: /CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Certificate serial: 019E9093876FCF50E3856AE3CDD55603A9E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
Manifest number: 165E
Signing time: Thu 04 Jun 2026 03:00:47 +0000
Manifest this update: Thu 04 Jun 2026 03:00:47 +0000
Manifest next update: Fri 05 Jun 2026 03:00:47 +0000
Files and hashes: 1: 3dDFlJIiwev5JNzj0uspF-q-hAM.roa (hash: 2MPQXp2XuzXpOvR5MvmUSNMeQLpCxYJhhEk2RjVnZhI=)
2: Zl5NfqijRwyXA-51UUgcNvd0_rs.crl (hash: nVZCzzq7NmHyevFITqqX67xklDAL4TkwOkhBK91t1h0=)
3: tXb-ZOETTYTckpb9Qysc1kmvy6I.roa (hash: ecwsDlNutKSR5EQe4HHz/G8gZ+2PHPrWaHUQyPF5OHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:93:87:6f:cf:50:e3:85:6a:e3:cd:d5:56:03:a9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Validity
Not Before: Jun 4 03:00:47 2026 GMT
Not After : Jun 5 03:00:47 2026 GMT
Subject: CN=0d1da41a71146e039823f0442e996035b245e72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9b:65:ca:b2:10:c1:57:a8:d8:67:38:8a:12:
96:1a:6e:04:7a:b0:4c:29:5f:a6:7b:56:3f:d7:60:
bb:7f:53:1c:a2:df:a5:44:46:96:1b:cf:23:2a:4f:
b0:1e:0d:87:3b:df:cd:7e:85:90:7f:76:3d:3c:39:
41:f5:73:3a:6d:c4:4b:ce:b4:f1:6e:30:59:e3:b3:
d3:ec:3f:4f:2e:65:54:7d:8d:d0:a9:9b:ba:39:54:
66:dc:9b:4d:4c:1b:31:92:1d:0a:71:37:3c:c2:37:
27:6c:86:52:75:52:e0:6e:b6:41:53:49:41:d4:2a:
96:4f:f1:ef:37:6f:8a:cb:e5:20:2e:89:d9:2a:3a:
d6:d8:e5:57:67:a9:43:4f:1b:55:68:e3:68:33:8a:
dc:72:20:92:5c:68:35:68:f0:eb:fb:21:ae:14:79:
0e:79:c5:54:ef:ab:72:4f:a5:95:9f:0d:64:bf:eb:
aa:bf:6e:07:3e:dd:71:d7:ee:8a:58:25:b6:d1:6f:
a9:bf:01:54:17:92:0f:52:9d:78:bc:5b:03:2e:56:
87:c7:eb:ea:15:0e:dc:75:98:fd:5c:67:63:9d:aa:
42:c0:5e:b5:9b:06:9b:3f:a3:45:6a:2b:25:cb:45:
7f:f4:f5:b6:a8:bc:ba:ed:29:08:09:98:63:da:ff:
a2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1D:A4:1A:71:14:6E:03:98:23:F0:44:2E:99:60:35:B2:45:E7:2B
X509v3 Authority Key Identifier:
keyid:66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:8a:b0:70:20:b6:3e:0b:05:8e:6d:9b:b7:bc:d5:da:2e:fa:
1f:db:24:fe:14:56:56:94:e6:68:4c:9d:e1:f0:14:31:0b:b6:
18:f8:7d:78:51:db:90:9d:ea:de:de:f1:a8:48:7c:65:99:fa:
8b:4c:f7:f8:f7:ce:ee:01:d2:c4:37:50:18:92:db:0c:ad:58:
56:cd:fe:a9:c0:67:04:99:2a:f5:0e:66:66:e9:8a:14:3f:a1:
a5:1d:46:90:19:89:a0:ef:07:d4:b5:3c:99:e8:fa:40:eb:bb:
88:35:29:b2:f0:0a:51:bd:35:52:7b:c6:0b:b4:d0:e5:23:fd:
b0:f0:c8:55:6e:77:6f:2e:cc:1c:07:7f:73:de:68:9e:2a:a3:
45:81:c8:38:da:2a:24:c2:89:e5:51:7c:9f:72:4f:48:a5:33:
99:d5:4f:5e:6f:0b:3c:3d:7a:82:24:cd:91:00:d3:22:41:00:
cc:f9:17:b5:d8:e4:b6:41:3f:f2:3b:51:16:04:5d:3e:7a:59:
70:09:6d:5d:62:91:89:9d:fe:aa:80:92:c0:6f:e5:ad:2a:f6:
a4:e8:58:41:2b:2c:1b:c2:5d:d6:f0:d0:47:c6:47:50:f2:ba:
cc:04:a4:9e:1c:f4:dd:73:ae:a6:86:a6:e2:1e:0b:ad:aa:6a:
56:ae:9f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:10:00 2026 by rpki-client