Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
File: RZsv0AU73X53dTmNsWO-6HckeKU.mft (raw, json)
Hash identifier: oXGGzNFDnhuLMe9NZEa+cYn0QVFEkmpatLCyUF2sER8=
Subject key identifier: AC:E2:8F:E6:64:6B:3A:61:A2:5D:A0:AD:F2:23:1C:2F:A1:E5:73:73
Authority key identifier: 45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
Certificate issuer: /CN=459b2fd0053bdd7e7775398db163bee8772478a5
Certificate serial: 019FA9E2713711EB8E826CE523CCA0569B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 18:00:17 +0000
Manifest this update: Tue 28 Jul 2026 18:00:17 +0000
Manifest next update: Wed 29 Jul 2026 18:00:17 +0000
Files and hashes: 1: 1HXGb5-BWji6FxKqR9J69GxxjeY.roa (hash: +4VLoXs2I/t3CPnVmm9jbZnZFGbEot/glqmRqD+Blr8=)
2: RZsv0AU73X53dTmNsWO-6HckeKU.crl (hash: 3XTzgw+glIEt5lmLuF+T2fjCVeFqJai93YTyKuh/jJ4=)
3: WQdZNfyoXAF_mZl28cfENCrtIMs.roa (hash: U3LDO+4WO64Jt5h3Mz2CbjqUHfSHcu4yyw0WNvXOY9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:71:37:11:eb:8e:82:6c:e5:23:cc:a0:56:9b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459b2fd0053bdd7e7775398db163bee8772478a5
Validity
Not Before: Jul 28 18:00:17 2026 GMT
Not After : Jul 29 18:00:17 2026 GMT
Subject: CN=ace28fe6646b3a61a25da0adf2231c2fa1e57373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:28:41:c7:af:0f:1d:d5:d4:f0:ba:04:c0:1c:
cc:39:30:0f:c8:37:de:b5:ca:af:4f:42:c7:bd:36:
70:ad:0f:f8:d3:f1:2b:4c:03:f7:14:3c:14:d1:ed:
f1:12:5b:69:5f:34:a9:7d:50:28:c5:5f:a9:1a:3b:
b1:50:93:4d:fa:38:4d:39:c5:ea:68:cc:3c:44:ae:
8f:b5:ac:e5:1e:6a:3e:75:fd:fa:64:62:a2:b9:92:
b1:ba:f1:59:3a:d7:47:6c:aa:04:f7:83:af:ed:58:
56:f5:2b:bb:bd:7b:dc:73:9b:0d:8f:83:b6:ef:a7:
b5:b6:7e:bf:dc:2a:02:3a:72:e1:40:52:1e:40:99:
1e:74:7e:92:26:76:35:97:61:47:03:bd:8c:f8:8e:
c3:0b:f8:40:95:b6:fd:4b:37:9b:e6:41:c8:29:46:
77:57:b4:a0:52:b8:24:b3:5f:6d:75:95:d3:55:5b:
40:15:a2:a5:89:6a:4f:36:9e:8d:16:ee:93:6b:19:
23:b3:4d:1d:4f:61:93:e2:d6:f4:3b:07:00:58:d7:
4b:44:9c:20:32:95:17:ba:f9:84:85:e0:5c:c9:81:
df:2d:f4:3d:85:65:3a:ee:ab:fc:83:ca:c7:8b:7e:
1d:f2:40:05:69:59:df:a0:b3:7b:4f:a1:03:dc:52:
19:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E2:8F:E6:64:6B:3A:61:A2:5D:A0:AD:F2:23:1C:2F:A1:E5:73:73
X509v3 Authority Key Identifier:
keyid:45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ea:6f:a0:66:1b:f7:0c:bc:01:87:45:6e:4c:13:53:27:f8:
46:6c:02:08:1b:7e:c9:f6:b2:df:39:f2:84:2e:c0:a5:d9:4e:
c4:c2:fb:8c:6d:33:0b:13:c8:5b:e0:e9:96:a0:84:22:fe:b5:
97:a0:d4:b6:2e:f6:c8:76:e7:82:9b:5e:52:d4:f2:6c:5f:d6:
51:50:e5:42:06:e4:a9:45:c4:31:70:d2:9f:ce:f5:d4:80:b7:
46:84:4c:da:15:5b:bc:4b:45:a1:16:f1:db:6e:01:31:4e:0c:
e3:74:83:d4:a8:af:b2:17:6a:57:a4:6d:ff:47:89:d1:66:60:
f5:e3:0b:eb:b5:a1:86:d4:c4:d2:9b:1d:dd:ba:b2:b0:0d:6c:
57:25:60:19:f3:1b:99:1e:3e:b0:fe:ff:08:9b:69:ac:8c:25:
b3:79:2a:7d:9d:1c:98:8b:b9:17:9c:bc:9e:75:05:fc:a3:d7:
ea:bb:9a:f9:38:00:c3:fa:c2:32:11:a7:89:8e:a9:db:2d:08:
14:a9:79:ce:7b:e1:43:72:58:0c:90:0c:65:fa:30:92:88:02:
ab:70:1a:a1:21:73:da:c4:fc:df:6a:d5:0f:c1:96:c9:38:48:
ef:1e:46:1f:dc:41:80:81:9b:88:39:29:ef:04:66:d7:fb:8c:
3b:3a:52:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:35:50 2026 by rpki-client