Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
File: rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft (raw, json)
Hash identifier: swbfhBqaa/JPgUKafOIOQBuV9rTZnzzrQD93PZ06FTc=
Subject key identifier: 4F:4D:B2:4A:37:B4:D7:60:EE:53:8F:AA:69:C6:60:0B:64:14:90:FB
Authority key identifier: AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF
Certificate issuer: /CN=ad9479afe3a9a18e1c374fca022d1ff2a255b1af
Certificate serial: 019DCF3E83531E18263A1CFBBE8E07DE671F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
Manifest number: 0393
Signing time: Mon 27 Apr 2026 14:01:13 +0000
Manifest this update: Mon 27 Apr 2026 14:01:13 +0000
Manifest next update: Tue 28 Apr 2026 14:01:13 +0000
Files and hashes: 1: 15iMLkZijLxFQhyhHpyZVO_Pbh0.roa (hash: 4vg9pvNIz6AeHAhcqTYuN2xhMEHA7ity8ku3fgSFNxI=)
2: rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl (hash: GxS1vqAOrX1rJuVINNyQflgB7HKljsslGI0ChgNRDwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:83:53:1e:18:26:3a:1c:fb:be:8e:07:de:67:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9479afe3a9a18e1c374fca022d1ff2a255b1af
Validity
Not Before: Apr 27 14:01:13 2026 GMT
Not After : Apr 28 14:01:13 2026 GMT
Subject: CN=4f4db24a37b4d760ee538faa69c6600b641490fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d7:30:d0:31:26:85:5a:51:6e:24:9d:b5:bd:
0d:03:7d:af:c8:45:34:95:e6:fa:81:8c:f0:fb:eb:
6a:fb:b9:87:b1:a9:b7:b9:04:20:27:89:5e:76:82:
69:15:6e:54:a6:bd:3c:f5:8e:e0:a3:7c:55:af:ee:
fc:4f:ca:e4:08:b7:7d:b0:de:1e:32:49:b2:71:ab:
37:db:d0:a3:4d:50:58:d2:8a:a5:99:7a:ff:cc:04:
b7:6b:09:a6:14:b7:1b:22:69:d5:1d:13:6b:66:6d:
f1:11:46:1f:af:b1:53:05:73:6d:f8:da:9f:67:c1:
0c:2a:c1:c5:33:17:a2:d9:70:da:0d:80:3d:2d:52:
c0:94:41:b8:be:82:4f:ad:f0:97:e3:d5:96:3b:3d:
df:70:f6:aa:67:f6:59:29:b3:15:a9:ba:a1:7f:36:
51:c3:2f:28:e6:fe:58:50:cd:42:e9:cb:0f:ee:06:
06:18:f4:82:24:36:7c:38:26:ac:2e:76:1c:35:89:
fc:ae:81:42:35:c4:f7:21:43:89:b4:72:c2:63:a3:
91:f1:05:7b:b3:5c:78:88:b4:3c:25:14:b3:97:35:
f2:93:fd:6e:b7:12:26:27:9b:e5:0b:1e:a6:b6:ec:
4f:91:bd:76:8b:25:13:78:36:c6:05:61:17:b2:53:
9b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4D:B2:4A:37:B4:D7:60:EE:53:8F:AA:69:C6:60:0B:64:14:90:FB
X509v3 Authority Key Identifier:
keyid:AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:58:42:b1:9f:16:ed:46:d4:4c:b9:ee:67:f7:ea:78:89:f9:
09:46:c4:25:a9:b2:7e:cd:06:cf:4d:f6:70:25:75:48:b6:76:
f5:5b:3b:87:e4:fc:54:74:71:de:6e:46:02:e1:c7:33:dc:b1:
b2:b1:18:5b:c4:c5:b5:08:fc:a5:de:4e:ad:82:80:90:46:f1:
b6:af:98:3c:db:e0:6e:be:43:6b:38:32:04:ae:c6:b6:0a:7a:
c4:3f:23:65:58:1e:02:65:a5:16:ab:a6:5b:d8:88:b7:4c:60:
bf:03:44:fb:9e:41:a9:25:27:3c:63:87:5d:44:ab:a7:1e:0d:
75:67:3b:07:b9:3e:42:d3:74:ef:8d:15:af:52:d9:40:6d:dd:
4b:68:45:7c:d2:e7:0c:6d:e8:a7:7c:26:2d:e4:ec:32:05:7e:
07:cf:3c:4e:13:54:18:4f:98:8d:ca:6e:c9:ae:fb:7e:72:04:
84:bc:5d:c6:66:57:58:17:bf:a6:bd:ba:6c:9c:c1:3b:73:36:
8a:f0:27:ce:de:b0:52:1e:d7:46:35:a0:6f:05:cd:1b:cf:9f:
3e:05:05:33:b7:67:e1:d8:a7:51:1c:c8:54:96:9a:bc:47:a9:
40:5b:55:30:83:81:8c:65:81:a2:ae:e2:93:3a:fe:67:ea:11:
17:16:ae:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:35:26 2026 by rpki-client