Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
File: RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft (raw, json)
Hash identifier: ZGhdv7A3xck1uOh1g8kgBuyXIxlYTu8+7BK5BOUjVzo=
Subject key identifier: 7F:6B:87:98:86:95:7A:51:94:AD:AF:56:69:6E:27:CB:2A:C8:20:F1
Authority key identifier: 47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
Certificate issuer: /CN=473163527e83542dce693b16d0aedcd126d3319a
Certificate serial: 019DCDF4C0712D0FD97CCCEA48CBFDE59C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
Manifest number: 18DE
Signing time: Mon 27 Apr 2026 08:01:02 +0000
Manifest this update: Mon 27 Apr 2026 08:01:02 +0000
Manifest next update: Tue 28 Apr 2026 08:01:02 +0000
Files and hashes: 1: RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl (hash: IuhqHRKTJHSW5ZorwXpWFkG/zuntwNj5UyWPhDIuQMU=)
2: pFkI7meix8Wvnh8I7pdS5zO5VAs.roa (hash: IiBaDlI4V6mbfD8AaxYpOFH+8BQ1zVQO5KQlE9ThC6Y=)
3: wIc-Rh6w6YDK1W-UeGedBj1DHzA.roa (hash: AHq1ZvIykr30MtwSSGLXsUeCsh/Ryu5hRBrmdW7qIMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f4:c0:71:2d:0f:d9:7c:cc:ea:48:cb:fd:e5:9c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473163527e83542dce693b16d0aedcd126d3319a
Validity
Not Before: Apr 27 08:01:02 2026 GMT
Not After : Apr 28 08:01:02 2026 GMT
Subject: CN=7f6b879886957a5194adaf56696e27cb2ac820f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:24:a3:a2:21:54:1f:a7:58:ae:80:d7:88:0b:
3a:55:70:b5:94:2b:0c:aa:cc:0c:4e:5a:74:ba:24:
ea:63:5e:a7:6d:36:94:07:fd:4e:49:cb:5f:11:ed:
c8:a0:a6:7b:4c:c3:a8:e8:ae:c5:a3:fd:e5:4c:d0:
1f:e8:9a:c7:3d:69:3c:84:35:50:cd:2a:ab:47:9a:
48:07:6f:54:76:cc:08:1d:7a:23:63:34:6f:33:f3:
f4:04:ec:f4:6b:b6:06:11:5e:fc:5f:a2:c1:1e:c6:
e1:13:9e:33:db:76:e8:22:71:26:1c:33:79:6b:15:
64:9c:e2:99:39:fd:84:c4:0a:01:7f:3c:2f:64:43:
54:be:88:fe:02:88:d2:de:83:e7:fb:d2:29:d3:d4:
f5:52:e9:d8:fe:4a:eb:25:b1:ec:fa:1c:4d:14:bc:
f2:eb:17:8d:39:35:83:79:ad:e5:35:d2:8e:54:5b:
91:b1:a2:a8:21:a2:61:b2:7e:af:0a:25:9e:33:a1:
3d:04:0c:44:f4:2b:92:48:62:89:72:e5:ae:9c:e6:
0a:1b:d1:b0:f7:e9:93:ab:7b:00:44:e8:71:20:c2:
1b:da:da:1f:f9:f1:4e:52:25:a1:0d:dc:9a:2c:6d:
83:ad:a2:ec:c8:71:67:8d:73:93:52:e3:78:c6:0b:
54:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6B:87:98:86:95:7A:51:94:AD:AF:56:69:6E:27:CB:2A:C8:20:F1
X509v3 Authority Key Identifier:
keyid:47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f0:a4:e4:c4:34:8a:31:f5:8f:76:32:28:ee:42:87:09:ef:
c3:f0:fc:e5:b7:90:f8:07:9a:3b:3a:50:3a:84:5a:f0:a3:ec:
59:c1:d7:06:7c:84:e0:04:96:ff:96:18:3f:65:06:e6:a4:fe:
75:d4:85:70:eb:9c:e1:1c:f1:27:1a:30:16:ed:89:4f:06:ed:
bd:a3:ad:de:82:47:14:3b:8c:26:1a:5b:10:39:01:70:70:d9:
d1:93:b0:55:c6:b6:52:1b:ef:81:67:61:52:c2:c8:36:cd:e8:
a2:81:9a:75:49:5b:c3:dc:e6:23:2b:86:3b:35:d5:d1:16:c8:
32:eb:45:67:e5:29:29:d2:92:aa:3e:48:8b:b3:44:7a:8c:f6:
eb:70:2a:c3:72:5b:cd:21:e2:79:4b:8b:50:7f:e6:39:4c:89:
4f:fa:e1:c1:bc:57:6b:ea:92:7d:60:53:cb:ae:25:b8:54:b0:
35:30:d9:3b:cc:77:9c:98:99:30:e7:4c:4a:50:9c:39:87:69:
fa:c1:96:2e:b7:ee:1a:97:a4:ec:97:ab:f0:bc:e1:45:e9:91:
ec:c8:10:6c:f9:03:40:69:42:5f:0c:06:03:d9:3b:88:16:58:
cd:97:8d:87:d2:ac:b8:fb:fc:f2:59:38:0a:68:6f:95:39:89:
a8:01:e8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:18:08 2026 by rpki-client