Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
File: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft (raw, json)
Hash identifier: sxtOnMmwOaWnJ/aSDW04li/ZobPTc4E4aSmxllMUWdU=
Subject key identifier: 3D:01:E8:FF:CC:3A:D4:06:35:B7:24:30:A8:4D:40:66:86:0F:87:37
Authority key identifier: 47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
Certificate issuer: /CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Certificate serial: 019DA4543E2B356B26DAF489FD9B2538C08B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
Manifest number: 0BE9
Signing time: Sun 19 Apr 2026 06:01:17 +0000
Manifest this update: Sun 19 Apr 2026 06:01:17 +0000
Manifest next update: Mon 20 Apr 2026 06:01:17 +0000
Files and hashes: 1: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl (hash: RJO1bp6d/KcEYIRhQdO6reIYMKguX0nRcocNUNHtGyo=)
2: XHT_nValr2j6SKOfGPicLhiXyO4.roa (hash: H5XqJ+imumLxCFtabqMwr2EYqfcFyzubhax0NWhApw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:3e:2b:35:6b:26:da:f4:89:fd:9b:25:38:c0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Validity
Not Before: Apr 19 06:01:17 2026 GMT
Not After : Apr 20 06:01:17 2026 GMT
Subject: CN=3d01e8ffcc3ad40635b72430a84d4066860f8737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e4:67:6e:d2:d4:3f:61:2d:7d:83:a4:8b:6c:
a2:32:c7:d9:0b:ce:85:8f:04:cf:39:21:46:00:75:
e1:a6:8c:64:d8:74:bd:b0:03:44:6e:37:b6:d5:86:
73:74:4c:ae:22:e4:bb:13:b9:29:5c:98:64:de:00:
9d:8e:ff:0b:bb:59:34:41:e9:61:08:7e:90:36:64:
da:20:68:2b:73:84:22:89:28:70:3e:a1:59:cf:4c:
39:eb:15:97:ef:57:5c:85:30:2f:53:cf:42:4f:50:
ee:77:87:ce:9f:e6:56:68:a8:a9:bf:cf:89:94:17:
40:13:6f:37:e4:92:11:a8:48:b6:47:db:21:7a:ac:
92:3c:22:28:24:4f:75:0d:c2:2a:f5:47:02:ae:b7:
bb:67:82:b2:31:31:bc:40:54:00:6a:50:3b:06:59:
5a:6b:63:46:83:4c:ed:c3:31:df:5c:39:d1:5e:9b:
f4:df:b5:df:b8:3f:b1:62:5f:28:ae:81:a0:8b:c6:
0d:c3:a0:6c:20:fd:79:b4:b3:b0:ed:78:15:01:d8:
00:19:6a:46:4c:4c:4e:b4:76:88:f4:81:e9:16:92:
4a:ec:93:7a:fc:0a:45:b6:74:95:79:08:75:16:8a:
6d:05:40:eb:b9:3d:a8:c2:8e:13:ba:40:b8:40:8a:
fe:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:01:E8:FF:CC:3A:D4:06:35:B7:24:30:A8:4D:40:66:86:0F:87:37
X509v3 Authority Key Identifier:
keyid:47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:64:b5:78:36:6e:7a:0b:42:49:18:ad:e2:c6:07:fd:ce:4b:
68:d6:78:41:e9:55:47:e9:85:4c:10:d7:82:bc:79:68:36:7f:
aa:4a:f2:d4:20:c9:e4:49:32:b2:8b:03:f5:0c:bb:c5:f9:b5:
70:fc:8f:4f:4a:cd:d8:6e:0b:fd:cc:de:72:6d:d7:5c:8a:66:
c8:ff:2e:c9:b0:59:34:fc:a8:a6:6d:64:d4:ea:ab:2a:61:15:
90:ec:09:3b:58:ed:a5:9d:b1:66:2d:51:5e:d5:32:db:b2:fb:
18:7f:12:a7:37:2a:4e:8c:59:54:91:67:6a:f6:3f:60:b7:5f:
b9:c3:c4:7e:a6:ba:6f:8f:5b:84:09:e9:9f:83:8f:25:e7:42:
d5:8e:b2:1e:73:0d:a6:bd:c1:3c:ee:67:65:c9:42:9a:38:ed:
4f:fb:28:41:b8:86:bf:e7:8c:3d:2e:9b:09:d3:5a:63:bb:c9:
7d:0a:dc:b2:60:4b:05:82:5f:b5:1e:ac:ac:d0:94:3e:24:86:
f4:db:f2:f4:23:bd:3b:b6:10:d0:07:b8:1c:c9:8a:5a:ba:8d:
6d:05:29:20:dd:a1:c3:79:66:84:09:a3:61:5d:4a:39:24:ab:
c5:bf:60:a1:6d:90:30:8b:77:fd:d1:c8:65:3f:1c:ec:cc:88:
98:e8:2e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:06:03 2026 by rpki-client