Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
File: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft (raw, json)
Hash identifier: HfIAPYMLI5oj9MhJZgWb36i+MFZQBuLDLq57jws0n8M=
Subject key identifier: 3C:E8:17:C3:13:0A:03:F0:38:50:DC:A9:A6:6E:28:33:12:55:C8:24
Authority key identifier: 47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
Certificate issuer: /CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Certificate serial: 019EC224EAEB1A42BC1B512CB64FF47C2C7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
Manifest number: 0C7D
Signing time: Sat 13 Jun 2026 18:00:59 +0000
Manifest this update: Sat 13 Jun 2026 18:00:59 +0000
Manifest next update: Sun 14 Jun 2026 18:00:59 +0000
Files and hashes: 1: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl (hash: jIPhWbktMXGzBBshIzD6VA6h9hAk0bc2anKwt0Nmr2k=)
2: XHT_nValr2j6SKOfGPicLhiXyO4.roa (hash: H5XqJ+imumLxCFtabqMwr2EYqfcFyzubhax0NWhApw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:ea:eb:1a:42:bc:1b:51:2c:b6:4f:f4:7c:2c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Validity
Not Before: Jun 13 18:00:59 2026 GMT
Not After : Jun 14 18:00:59 2026 GMT
Subject: CN=3ce817c3130a03f03850dca9a66e28331255c824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:78:32:7c:78:cc:67:20:04:c4:57:95:3e:35:
3e:4e:b0:7e:c8:8a:e2:08:1d:36:14:cb:4c:0f:a1:
7c:d2:aa:0d:68:af:a9:a1:c3:be:02:4e:1d:a3:b4:
52:76:51:40:2f:dd:e3:53:b4:a5:71:45:6f:3f:cd:
a3:99:da:2c:55:27:5e:65:34:76:07:a1:04:0f:0f:
70:62:24:bd:eb:bf:ca:b2:8c:cd:bb:f9:64:42:37:
55:e4:f6:5e:72:f9:ee:f6:1d:e8:68:eb:ec:95:d1:
6e:d4:3a:c5:1d:ae:ca:12:49:63:23:80:d3:92:43:
d7:98:76:77:2a:ae:4d:49:9d:f5:cb:eb:76:94:83:
18:c5:90:fe:2f:4c:60:f7:44:f2:b9:82:4b:e9:26:
dd:98:eb:2c:aa:81:8c:60:86:3c:b0:7c:b4:9d:70:
83:65:57:55:5c:9f:56:51:7d:e6:2d:0e:f2:db:7b:
b1:6d:82:2e:ef:94:09:1f:8d:ac:0a:18:7d:8f:04:
98:cb:53:35:f4:8c:df:b7:cc:57:7c:5a:c2:6f:7b:
b0:9c:23:59:0a:df:cb:3c:6a:15:3f:fa:95:63:0c:
f3:ce:eb:91:73:bf:a5:d2:dc:24:dd:2d:c6:e3:71:
bc:82:2a:99:b6:ba:e4:f3:10:1d:48:77:74:6a:57:
86:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E8:17:C3:13:0A:03:F0:38:50:DC:A9:A6:6E:28:33:12:55:C8:24
X509v3 Authority Key Identifier:
keyid:47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:20:3d:97:28:c8:d5:2c:c8:73:ec:93:85:b6:e5:81:7b:b2:
10:3e:75:87:12:85:d4:0c:b0:da:88:6c:f2:07:63:3a:e5:c8:
40:3d:04:c6:84:5a:69:63:ba:ba:1d:e1:1c:a8:91:5d:0d:c9:
35:94:00:d0:ea:62:d0:2f:36:37:60:c0:c7:34:00:f6:07:e2:
42:9b:9e:6f:cc:8f:3d:0a:12:92:6d:f5:c2:92:82:b8:02:54:
74:11:09:fb:f3:08:7c:ac:ef:6d:95:83:e6:b3:c8:89:54:9d:
e3:3a:d1:38:eb:e8:11:fa:20:d0:c1:df:2e:be:be:f2:78:ff:
d3:c2:c3:bc:a1:77:57:b7:10:ef:c3:2a:06:88:0d:a1:e4:3b:
86:a0:96:e2:86:96:9c:5f:3e:98:d1:97:e8:21:33:af:3e:60:
ef:46:96:0c:5a:49:58:95:89:79:99:83:54:59:74:ee:85:d9:
66:c0:40:1a:25:d9:71:a1:00:5d:50:b6:9a:7e:94:51:1a:60:
d7:58:67:80:b5:67:e9:89:19:37:de:14:b3:20:42:2b:79:38:
2e:c4:ad:a7:84:c4:82:c3:a2:3d:f3:0a:8e:2b:aa:41:73:9b:
21:9d:e8:1f:94:bc:f2:be:6d:f7:9f:eb:11:51:11:82:60:83:
c2:67:05:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CJOrrGkK8G1Estk/0fCx7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3M2RkYmM0YmIzODFkYmVmMjRkMmZmOGI0ZTFmMjNmMmRk
ZjQwY2MwHhcNMjYwNjEzMTgwMDU5WhcNMjYwNjE0MTgwMDU5WjAzMTEwLwYDVQQD
EygzY2U4MTdjMzEzMGEwM2YwMzg1MGRjYTlhNjZlMjgzMzEyNTVjODI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqngyfHjMZyAExFeVPjU+TrB+yIri
CB02FMtMD6F80qoNaK+pocO+Ak4do7RSdlFAL93jU7SlcUVvP82jmdosVSdeZTR2
B6EEDw9wYiS967/KsozNu/lkQjdV5PZecvnu9h3oaOvsldFu1DrFHa7KEkljI4DT
kkPXmHZ3Kq5NSZ31y+t2lIMYxZD+L0xg90TyuYJL6SbdmOssqoGMYIY8sHy0nXCD
ZVdVXJ9WUX3mLQ7y23uxbYIu75QJH42sChh9jwSYy1M19Izft8xXfFrCb3uwnCNZ
Ct/LPGoVP/qVYwzzzuuRc7+l0twk3S3G43G8giqZtrrk8xAdSHd0aleGNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzoF8MTCgPwOFDcqaZuKDMSVcgkMB8GA1UdIwQY
MBaAFEc928S7OB2+8k0v+LTh8j8t30DMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnozYnhMczRIYjd5VFNfNHRPSHlQeTNmUU13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81NWJmOWYtMjQwZi00OWJiLWIzMGUt
NjA0YjIwMWU2NWY4LzEvUnozYnhMczRIYjd5VFNfNHRPSHlQeTNmUU13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81NWJmOWYtMjQwZi00OWJiLWIzMGUtNjA0YjIwMWU2NWY4
LzEvUnozYnhMczRIYjd5VFNfNHRPSHlQeTNmUU13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHCA9lyjI
1SzIc+yThbblgXuyED51hxKF1Ayw2ohs8gdjOuXIQD0ExoRaaWO6uh3hHKiRXQ3J
NZQA0Opi0C82N2DAxzQA9gfiQpueb8yPPQoSkm31wpKCuAJUdBEJ+/MIfKzvbZWD
5rPIiVSd4zrROOvoEfog0MHfLr6+8nj/08LDvKF3V7cQ78MqBogNoeQ7hqCW4oaW
nF8+mNGX6CEzrz5g70aWDFpJWJWJeZmDVFl07oXZZsBAGiXZcaEAXVC2mn6UURpg
11hngLVn6YkZN94UsyBCK3k4LsStp4TEgsOiPfMKjiuqQXObIZ3oH5S88r5t95/r
EVERgmCDwmcF4Q==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:05:10 2026 by rpki-client