Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
File: rkZkQGbOrznTr7D9c1sBnOydo2Q.mft (raw, json)
Hash identifier: EZI5mW6CSChW906AYcaVFqGWTavoDUESK48pi3DiBKs=
Subject key identifier: CE:F7:09:F4:93:12:33:01:D0:92:E9:F8:B8:76:35:E9:57:78:40:E0
Authority key identifier: AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64
Certificate issuer: /CN=ae46644066ceaf39d3afb0fd735b019cec9da364
Certificate serial: 019CE55B29FEB038D5DA7AA14BC7F6986D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
Manifest number: 04E4
Signing time: Fri 13 Mar 2026 04:01:22 +0000
Manifest this update: Fri 13 Mar 2026 04:01:22 +0000
Manifest next update: Sat 14 Mar 2026 04:01:22 +0000
Files and hashes: 1: YwZPhm_oPIIN_h73HSe7_TwtVu4.roa (hash: L8RiSrI3D8+7xc9Avh/47HaCMGihyyrZJ30e+0TUw7M=)
2: rkZkQGbOrznTr7D9c1sBnOydo2Q.crl (hash: /rNXeVwg6wIrIK0MUYp34eRu0EfepnFyiPT0l8eI62I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5b:29:fe:b0:38:d5:da:7a:a1:4b:c7:f6:98:6d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae46644066ceaf39d3afb0fd735b019cec9da364
Validity
Not Before: Mar 13 04:01:22 2026 GMT
Not After : Mar 14 04:01:22 2026 GMT
Subject: CN=cef709f493123301d092e9f8b87635e9577840e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:25:ca:1b:50:7d:bb:55:a7:eb:08:4b:6f:1a:
77:eb:ba:4b:02:6c:3a:9c:55:d3:9f:72:a4:57:45:
fc:ed:6e:5a:80:f0:18:5d:0f:5a:28:33:89:a2:61:
6d:5a:93:ae:70:54:43:58:e7:3c:13:91:4d:8d:ac:
a7:9d:72:94:71:1e:8d:b6:49:85:45:64:03:c7:1e:
c1:62:b9:21:43:fc:b3:62:94:a2:ba:b0:da:1d:5f:
48:69:84:95:34:b4:80:7f:fc:3e:29:0f:6a:c2:44:
6a:2a:aa:2c:45:e3:04:d2:b6:94:d1:c0:d2:46:bc:
97:35:6b:87:8c:2c:9f:b2:44:3f:38:40:6c:e2:fd:
6f:8e:bd:f8:a0:28:4a:4c:e4:4a:75:f2:b4:8e:a6:
a7:70:af:9d:fb:35:5b:19:3a:74:89:f6:34:20:a9:
d2:6d:64:73:47:e2:33:8f:41:27:f2:17:8c:ef:84:
03:c2:6e:b2:76:dd:16:f3:2b:6f:96:f4:ab:7d:d0:
f1:a2:0f:b9:31:7d:1e:0d:1d:d1:7b:71:15:9c:c8:
5e:b3:a3:9f:f0:45:80:62:39:1d:4f:1c:2e:91:a0:
fc:34:28:3c:45:78:fe:45:97:67:54:82:96:b5:9a:
0a:37:fc:c5:75:32:ad:4f:16:c5:eb:91:42:dd:a9:
75:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F7:09:F4:93:12:33:01:D0:92:E9:F8:B8:76:35:E9:57:78:40:E0
X509v3 Authority Key Identifier:
keyid:AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:2d:33:3a:2f:51:21:32:02:65:2b:e3:87:94:34:e2:71:89:
98:c8:69:6c:92:43:08:dc:36:cb:7d:45:1c:16:bc:74:69:bd:
88:8c:9d:a0:3c:2d:06:46:2d:ac:65:01:5f:25:cf:52:fa:4e:
b1:e3:97:44:82:70:30:83:77:7b:56:37:fc:4f:a9:bc:ac:ae:
54:54:67:55:c5:28:84:00:cf:00:79:86:86:86:f2:d5:3b:67:
36:2a:3a:35:63:23:33:43:78:b6:84:de:e9:c4:03:26:7d:9a:
df:36:0a:f7:c7:3e:d3:99:f6:89:fb:f6:ad:6d:2c:3a:f1:55:
cf:7f:57:1c:fd:b5:83:49:74:87:91:da:5c:4f:86:ae:8d:e4:
99:03:68:ca:8c:17:b7:58:77:34:dc:c0:d7:ce:4c:31:ef:5a:
b6:a6:c8:a4:0b:8c:49:9e:65:49:eb:c1:48:4a:37:d7:6e:92:
b8:20:a7:f4:19:2d:98:7f:74:cf:0d:f4:39:7c:c2:36:1d:32:
96:01:a0:ff:d2:a5:c5:91:41:27:6a:bc:39:e2:d3:cc:64:e6:
0d:be:04:e6:b2:3b:fc:7f:4a:83:52:58:c0:a5:d8:d8:9a:fc:
94:fc:cc:0c:52:11:73:12:4b:61:eb:6e:51:09:a8:81:45:6c:
ca:17:7f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:57:27 2026 by rpki-client