Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
File: rkZkQGbOrznTr7D9c1sBnOydo2Q.mft (raw, json)
Hash identifier: UeuFbBelFmKY3SbqAJKUuMuvMeQfsitNgOBzrwHoqLc=
Subject key identifier: 05:3A:97:DC:3C:EA:67:CB:A3:BD:08:31:42:1C:CB:81:73:CE:E8:39
Authority key identifier: AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64
Certificate issuer: /CN=ae46644066ceaf39d3afb0fd735b019cec9da364
Certificate serial: 019DCF073BFEF515ADF42B3BEB9339B4816A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
Manifest number: 055D
Signing time: Mon 27 Apr 2026 13:00:50 +0000
Manifest this update: Mon 27 Apr 2026 13:00:50 +0000
Manifest next update: Tue 28 Apr 2026 13:00:50 +0000
Files and hashes: 1: YwZPhm_oPIIN_h73HSe7_TwtVu4.roa (hash: L8RiSrI3D8+7xc9Avh/47HaCMGihyyrZJ30e+0TUw7M=)
2: rkZkQGbOrznTr7D9c1sBnOydo2Q.crl (hash: TQGLgvr/M4tgklSEclV6fclvvn9ZZ4TlJwGj8h9/GG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:3b:fe:f5:15:ad:f4:2b:3b:eb:93:39:b4:81:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae46644066ceaf39d3afb0fd735b019cec9da364
Validity
Not Before: Apr 27 13:00:50 2026 GMT
Not After : Apr 28 13:00:50 2026 GMT
Subject: CN=053a97dc3cea67cba3bd0831421ccb8173cee839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:62:7e:44:4e:3b:38:eb:fd:c6:1e:10:a6:
9e:6c:04:29:8c:0a:45:20:5b:a9:6b:7c:5e:73:e4:
88:1e:ac:9e:69:c7:8d:1e:ca:b2:ff:0c:b6:47:d7:
4a:58:76:58:2d:bd:3c:5f:4b:67:1a:39:ef:d3:f4:
76:1b:15:4b:15:60:94:9b:89:ef:58:4e:e3:00:96:
ed:fb:b3:90:2f:f6:32:04:d9:92:c5:ab:94:23:01:
97:1d:f3:67:90:12:4a:79:9f:bc:91:2c:65:26:b9:
8a:61:7f:54:b3:1c:31:ae:89:f4:c1:12:97:0f:2e:
83:13:a8:90:2a:c7:89:76:35:cf:5f:9e:c1:9a:54:
56:af:b6:f9:65:9b:b1:a2:20:0e:ee:cb:90:e5:7c:
59:d0:f6:a1:16:7b:0d:71:4a:1d:95:06:39:50:06:
ab:8c:55:62:e6:31:a0:e2:f4:37:f5:4a:29:3b:59:
e3:4c:e4:f8:a7:16:3e:11:30:9e:79:bc:a9:74:1d:
b1:26:20:43:af:87:02:ee:4d:e5:fc:f5:53:12:19:
24:ce:6d:cb:38:71:7f:8a:16:72:74:37:f9:2a:99:
52:86:c7:f7:a0:7a:f9:22:ba:02:bb:fc:fd:74:0b:
09:df:75:2a:d6:81:e9:e8:e2:e1:04:67:c2:73:0b:
d3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3A:97:DC:3C:EA:67:CB:A3:BD:08:31:42:1C:CB:81:73:CE:E8:39
X509v3 Authority Key Identifier:
keyid:AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e4:49:9c:59:9c:f9:31:f1:a1:dc:14:eb:55:52:9e:63:7a:
04:eb:f4:1f:6d:c9:d1:f7:f7:0f:2b:6d:7f:f6:2b:1e:1f:04:
41:10:06:af:59:4e:f9:ce:0f:96:0c:5a:3e:33:6f:3e:35:e2:
48:fe:7c:cf:33:15:45:b8:1e:6d:e2:70:8f:cc:cc:b9:c1:a9:
b2:68:ec:7d:5c:f8:9e:5b:79:b9:15:1c:dd:c9:23:45:e7:7b:
ae:e8:b9:4b:72:ee:df:38:ce:b7:0d:7b:49:e4:a9:f1:3c:55:
3a:cd:92:3e:00:b2:9f:11:f9:a8:5c:d5:46:ad:e2:22:09:6d:
51:20:03:cf:a7:50:cc:df:80:68:e9:ba:70:90:3a:21:27:7c:
29:b8:30:45:44:30:b1:b4:49:6c:c7:96:34:e4:0b:94:0e:5b:
f1:8f:c5:41:6a:7f:66:77:bc:7b:f5:10:3c:9d:a6:85:e2:48:
80:cb:4a:a6:ca:de:03:15:9c:82:48:cd:59:ed:b5:f2:c0:42:
04:1f:dd:e2:88:d4:0b:b5:d7:28:43:34:dc:79:49:4b:97:bc:
ba:c9:91:09:fe:d4:2f:de:10:21:8e:fc:32:25:92:19:9f:e9:
fa:05:4a:90:80:b1:71:34:60:f0:7a:b0:46:37:bf:f9:84:05:
05:ea:97:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:42 2026 by rpki-client