Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
File: rkZkQGbOrznTr7D9c1sBnOydo2Q.mft (raw, json)
Hash identifier: en8w7Y+4H+VaR/YmLceFd9uMzDgsGcskNFhSlrQ5sf0=
Subject key identifier: A3:A5:AE:02:64:37:BF:D9:D2:22:AC:FF:2D:FC:51:18:40:C8:59:B1
Authority key identifier: AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64
Certificate issuer: /CN=ae46644066ceaf39d3afb0fd735b019cec9da364
Certificate serial: 019EE70D70275DD859D94366454A4CA3405B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
Manifest number: 05EE
Signing time: Sat 20 Jun 2026 22:01:17 +0000
Manifest this update: Sat 20 Jun 2026 22:01:17 +0000
Manifest next update: Sun 21 Jun 2026 22:01:17 +0000
Files and hashes: 1: YwZPhm_oPIIN_h73HSe7_TwtVu4.roa (hash: L8RiSrI3D8+7xc9Avh/47HaCMGihyyrZJ30e+0TUw7M=)
2: rkZkQGbOrznTr7D9c1sBnOydo2Q.crl (hash: BshlU1eGhDRRpWrH6OI3XEl2GKRbFx9GQspKIxKBxfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 21:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e7:0d:70:27:5d:d8:59:d9:43:66:45:4a:4c:a3:40:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae46644066ceaf39d3afb0fd735b019cec9da364
Validity
Not Before: Jun 20 22:01:17 2026 GMT
Not After : Jun 21 22:01:17 2026 GMT
Subject: CN=a3a5ae026437bfd9d222acff2dfc511840c859b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b3:cf:6c:13:d8:1e:74:3e:3f:f6:a5:ca:1a:
9f:3e:93:49:97:60:4a:d2:18:50:ad:a6:f6:9e:c4:
bf:82:c5:2e:60:b7:2b:7b:bb:15:10:0a:54:83:3e:
a9:7c:27:d8:d3:75:70:db:bb:5b:b6:f3:79:26:be:
63:76:58:ce:18:14:9e:ad:e6:dc:91:2c:56:48:92:
b3:6f:5d:38:d3:11:95:5e:ed:55:9c:f5:93:2f:ad:
db:6d:cc:64:11:f1:2a:a3:af:a8:26:b4:97:ff:55:
e0:bb:47:54:5e:a2:58:74:ef:44:5f:79:62:b0:42:
65:3a:45:5c:c2:c5:96:00:f4:95:06:25:75:fd:e8:
d1:6e:78:9a:4a:81:3b:8e:19:70:f9:7a:2c:37:01:
67:f5:19:2c:3e:d7:78:aa:9c:38:df:ec:07:96:e7:
00:5a:0d:78:80:59:6d:da:8a:35:ef:4d:ea:96:7e:
1d:b8:22:81:a7:00:11:f8:b7:09:d3:f9:fa:1a:9d:
0c:a1:ae:de:76:e2:4b:c0:e7:67:8a:7c:56:85:b2:
9e:f4:7b:47:b7:c2:67:be:a3:65:7a:79:54:c9:03:
14:ff:4d:54:1a:b9:e0:6e:3a:c0:86:6c:c7:b9:cb:
d5:be:c0:f4:e8:03:9a:6a:14:27:a3:13:81:ed:58:
a9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A5:AE:02:64:37:BF:D9:D2:22:AC:FF:2D:FC:51:18:40:C8:59:B1
X509v3 Authority Key Identifier:
keyid:AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:0d:4b:ab:32:5f:0d:1e:8e:a2:6b:99:83:b3:ce:81:c3:8a:
c8:c0:e9:1e:02:8a:9a:af:94:59:4e:f8:9f:5f:46:8d:cb:2e:
36:34:0b:29:b0:58:7a:76:7c:5e:b9:9f:5f:39:4f:be:2e:30:
e6:04:d0:b6:1d:14:02:b6:3d:c0:9d:be:f3:c0:10:4b:83:2d:
18:93:a2:c9:b9:a8:71:96:b6:53:08:c2:fa:bc:fd:eb:98:45:
a6:f0:9f:15:cd:62:58:95:00:85:bd:1d:90:02:7c:95:a7:e1:
df:fd:ac:07:5b:2a:ff:f3:3d:9f:7f:fc:a1:15:60:e3:31:d8:
49:c9:0f:4d:6f:cf:c8:b4:46:36:c6:74:81:74:df:b0:1b:de:
d9:25:df:eb:86:dd:32:77:de:d0:fb:ea:7f:0e:f1:19:bc:20:
52:d9:9f:ed:8f:66:06:ec:e2:f9:44:a2:84:91:5f:c5:e9:7e:
61:6b:b6:37:35:1b:b7:72:a0:8a:3b:9e:f9:2e:1d:59:62:39:
71:84:6a:e4:01:32:26:e3:24:2d:09:c1:84:f8:a0:cc:da:01:
40:0f:71:ab:3f:4d:fc:16:b5:08:93:e4:5a:de:1a:5f:f8:18:
75:48:4c:2b:91:d3:bc:0f:06:c2:d0:02:2b:74:6b:37:53:ce:
6e:14:82:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:12:13 2026 by rpki-client