Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
File: RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft (raw, json)
Hash identifier: SAvJ4my1jKDsJeYxtK4/PzPTETrpYXA8QdiLHVK0UUs=
Subject key identifier: 26:0E:BD:59:27:1A:4F:BF:8C:CA:00:A8:53:E9:A0:AD:9C:2B:7F:9B
Authority key identifier: 47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
Certificate issuer: /CN=473469a966f4df3cf28171d87c74780fc472f979
Certificate serial: 019EE8206910F4E9F911F7F314C97D85D5BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
Manifest number: 0C77
Signing time: Sun 21 Jun 2026 03:01:38 +0000
Manifest this update: Sun 21 Jun 2026 03:01:38 +0000
Manifest next update: Mon 22 Jun 2026 03:01:38 +0000
Files and hashes: 1: DNxT4KfUnSN5D5Pb2TXRMl9CQRk.roa (hash: U4JVcc+2nFb5M82ma1QdMgZr3eKXlGDJ6qSOPbU6n2I=)
2: RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl (hash: OwHX4r1SDPTDc8AWyy4hTFMbDlyvKNZP3ml6wg05cl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e8:20:69:10:f4:e9:f9:11:f7:f3:14:c9:7d:85:d5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473469a966f4df3cf28171d87c74780fc472f979
Validity
Not Before: Jun 21 03:01:38 2026 GMT
Not After : Jun 22 03:01:38 2026 GMT
Subject: CN=260ebd59271a4fbf8cca00a853e9a0ad9c2b7f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:c2:4a:fa:64:eb:de:a6:ba:1b:f0:ee:78:dc:
aa:f2:ec:70:5b:d1:61:1f:60:3c:9e:6a:cd:5c:da:
00:76:dc:61:9e:4f:b6:a2:c4:7f:95:60:5c:07:13:
85:b1:8c:e1:51:23:8e:b0:bb:e1:27:4e:a5:6c:69:
5c:3a:d3:4d:61:b9:e9:4d:a6:5e:80:42:31:cb:8a:
bc:26:6b:9c:77:51:23:b3:f2:3a:4b:59:33:cc:de:
48:f0:c7:01:87:6d:a6:46:d8:44:0e:f1:67:c2:63:
69:a9:11:1e:43:21:e6:53:d8:a3:6a:68:ea:c3:5e:
8d:7d:4d:05:e4:5f:85:69:61:1a:4d:55:38:09:bd:
f1:5d:6b:7a:0d:d9:1e:df:34:6b:51:a6:62:68:a3:
17:26:cd:84:28:39:e0:76:81:75:b8:bb:c4:f1:11:
34:09:50:90:e0:9b:20:34:ba:db:3f:51:65:1b:c1:
f8:f2:00:77:bf:79:52:99:f7:32:7e:d0:95:16:51:
bc:37:9f:5b:55:a5:45:1f:d4:a9:18:f8:64:1d:a7:
43:c0:9e:e6:30:96:21:a3:02:eb:7f:3c:69:a0:e3:
44:86:62:97:3e:4c:e2:1a:25:50:04:17:59:4f:96:
23:4b:76:b3:7b:10:cf:e8:48:17:b1:d7:c9:4e:56:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0E:BD:59:27:1A:4F:BF:8C:CA:00:A8:53:E9:A0:AD:9C:2B:7F:9B
X509v3 Authority Key Identifier:
keyid:47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3c:3e:f6:6e:9e:3f:ed:f6:ca:ac:41:fb:11:ac:38:18:50:
b9:16:87:23:17:2d:69:76:e4:c8:77:44:ef:f9:a1:37:83:6e:
5b:56:f3:f7:0a:2c:71:d6:13:a2:cb:da:1e:9a:73:ca:d5:f2:
4a:2b:b3:1d:27:3f:cb:5e:c8:1d:12:79:fe:35:8a:8a:09:b2:
34:60:74:90:18:49:82:7d:2e:91:39:74:3a:ae:35:41:7b:c4:
ac:93:60:b9:dc:ca:32:fc:e8:f2:a5:92:2c:d5:8b:ac:30:20:
30:24:f1:c5:9f:73:18:cd:f7:89:e2:13:c7:82:62:d3:ca:75:
38:95:42:d9:b1:ed:d1:da:1e:95:cb:8c:0a:72:c5:d1:5c:c6:
e1:65:c5:75:4a:d5:40:a1:15:c0:52:a0:5e:08:da:7e:1c:1c:
92:0e:a9:9d:6e:c4:90:8c:19:af:5a:8b:45:98:59:78:2e:f1:
d9:b8:6e:83:37:c7:f7:47:e4:68:9f:bf:4a:e3:0b:ae:e4:14:
8c:b3:3a:e4:8b:72:82:d7:1e:37:e3:42:62:67:8b:b9:8a:29:
68:13:c7:e7:f0:ab:33:34:8f:ab:a9:d5:50:15:eb:32:bb:d2:
98:26:aa:90:99:fd:10:96:fa:e1:dd:58:6a:af:c4:49:10:ce:
41:4a:e0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 12:20:13 2026 by rpki-client