Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
File: RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft (raw, json)
Hash identifier: lATTh9fkC9WB316lNlaau1UwFVykr64EY9A2IFYxryE=
Subject key identifier: D8:90:14:A7:FD:BE:51:1B:24:47:0E:F8:D3:38:C7:34:AD:44:7E:A4
Authority key identifier: 45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
Certificate issuer: /CN=459ad2ece3e5911093d964753b656459c9bc05a7
Certificate serial: 019DB2EB5DE345C22CF5B31333AA0B408AED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
Manifest number: 1155
Signing time: Wed 22 Apr 2026 02:01:02 +0000
Manifest this update: Wed 22 Apr 2026 02:01:02 +0000
Manifest next update: Thu 23 Apr 2026 02:01:02 +0000
Files and hashes: 1: RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl (hash: yM36OC6sEhAbLkXo7jG1goiwk1NZEbeJ60I+ZOnyY/8=)
2: oxM4weLdM3j7jrYJT8BJG0W0cJ4.roa (hash: JzjynEnEp0mde9J1/ZPR8Pa7VycJrBNUsALJMI999+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:eb:5d:e3:45:c2:2c:f5:b3:13:33:aa:0b:40:8a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459ad2ece3e5911093d964753b656459c9bc05a7
Validity
Not Before: Apr 22 02:01:02 2026 GMT
Not After : Apr 23 02:01:02 2026 GMT
Subject: CN=d89014a7fdbe511b24470ef8d338c734ad447ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3e:d1:74:28:20:04:82:81:5c:e0:f8:da:95:
d4:52:9b:8f:9b:2a:5d:09:7e:24:54:e0:87:a8:37:
15:20:68:35:fb:49:68:84:c7:b8:ee:1f:14:68:9f:
34:ff:13:6b:28:54:b9:98:51:2e:01:4f:69:b8:59:
5c:9c:b8:fd:28:47:37:9f:26:76:7f:6b:5a:ed:c6:
38:58:5d:6d:e2:a0:2a:95:70:3d:79:d1:b5:e6:81:
52:7d:63:1c:81:2c:9d:4c:be:0f:47:b3:63:64:62:
6e:76:f9:1b:de:a2:bf:6a:82:7e:e7:38:36:d5:01:
e9:ca:76:1a:34:e7:50:9e:b4:85:f5:af:ea:73:41:
b5:67:c7:08:04:15:9a:39:e7:cf:55:20:90:39:8e:
ea:91:cb:35:ab:cf:12:1c:5c:48:1b:88:75:1c:a7:
4a:16:43:12:ec:0b:4a:89:78:0b:d5:10:0f:20:87:
03:9d:f5:a5:ae:f7:4a:f2:db:1c:de:91:f8:09:0b:
9d:60:24:c4:ad:83:ff:af:10:91:e2:69:eb:8d:5f:
29:0d:05:d1:70:f9:ae:23:6f:95:b2:b6:7f:77:87:
18:5b:f6:bf:7a:c5:be:c6:c7:dd:40:a2:91:88:29:
8c:2a:5f:63:47:62:cf:39:dc:c6:ec:5d:a0:e0:e0:
d5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:90:14:A7:FD:BE:51:1B:24:47:0E:F8:D3:38:C7:34:AD:44:7E:A4
X509v3 Authority Key Identifier:
keyid:45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f9:c5:cc:52:1a:30:c9:a2:1c:d6:8b:9e:fd:ae:be:c8:27:
65:07:80:16:a7:7f:18:6a:85:17:13:76:d6:9d:0a:3d:44:7c:
10:85:3f:e8:c3:ef:e7:19:4e:7b:2b:d0:3a:03:cd:81:d7:18:
d3:34:57:85:b6:3d:04:6c:b3:c1:c4:49:51:9e:36:68:94:59:
d7:1f:70:0e:29:07:70:ea:32:7b:e4:51:42:ec:be:2a:a9:f1:
80:0b:8d:d2:c3:f5:94:b8:2b:61:db:44:ec:7c:cc:8d:49:67:
ea:a2:35:27:fb:1d:8b:e5:90:8c:02:a8:d0:4a:65:2d:93:73:
15:79:cf:23:6f:e4:15:13:1c:bf:6b:b3:65:1b:6d:83:44:29:
f9:b9:6e:4a:b2:cb:5b:7c:72:fe:10:58:9a:ea:b3:57:7c:c7:
af:d0:28:07:3b:87:4d:ed:d2:4a:a2:ce:94:32:bb:c3:39:93:
a0:f0:77:da:13:49:9d:ac:a6:15:c3:fb:8c:9e:42:c2:ea:60:
12:52:79:5e:18:04:e9:b4:d5:d5:3c:15:fb:12:ae:cf:70:03:
9b:c7:6c:8d:63:7b:18:aa:07:08:ec:8c:4b:8e:27:e5:6f:47:
20:1d:a3:a8:c9:c2:04:fd:b0:3a:8c:3b:67:92:63:b4:0e:33:
73:05:f4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 05:18:37 2026 by rpki-client