Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
File: dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft (raw, json)
Hash identifier: 53NryuZwxQGKR6OVu8IrmZE/+0JsYCs3DfX14AgehUw=
Subject key identifier: B1:4F:43:72:28:7B:CB:1F:CC:41:4E:AE:E1:F8:CC:D1:90:6D:A5:AC
Authority key identifier: 75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED
Certificate issuer: /CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
Certificate serial: 019EC14989C07B25E8B1A9ED8EE9B57BADEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
Manifest number: 01AE
Signing time: Sat 13 Jun 2026 14:01:22 +0000
Manifest this update: Sat 13 Jun 2026 14:01:22 +0000
Manifest next update: Sun 14 Jun 2026 14:01:22 +0000
Files and hashes: 1: 5vgf_9aZThkj_7VAzPV1SdycQ9s.roa (hash: WWuwQNMz2jPS1Lz9ZyTa8kKgvLVWvH3DolJRQpBYZVw=)
2: ZUFdt76XEIRqjB1ZsCU8KDPIIeE.roa (hash: +22Qmq4Y9pNmDRsynGIXRX9EtOmlc0lMrcEc8jeBxvw=)
3: dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl (hash: /ba9oeiGL+cVqSmXFHXrCtBqGEeCJVQtEjQlYdKd5tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:89:c0:7b:25:e8:b1:a9:ed:8e:e9:b5:7b:ad:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
Validity
Not Before: Jun 13 14:01:22 2026 GMT
Not After : Jun 14 14:01:22 2026 GMT
Subject: CN=b14f4372287bcb1fcc414eaee1f8ccd1906da5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d7:45:28:07:38:ab:ab:b6:6d:23:9f:f4:71:
7a:66:a4:a8:f3:84:74:8e:de:0c:81:b2:ac:05:50:
b0:d4:3b:ef:4e:13:1c:c5:5b:6f:87:15:6e:f1:26:
af:3e:c6:8a:d2:cc:ed:12:c3:42:33:ba:90:94:67:
8f:9a:45:33:43:9a:76:b0:10:94:c8:f8:34:a8:aa:
b1:ff:29:41:0e:55:77:c0:93:ed:81:ff:c8:21:61:
bd:38:1b:6c:7a:f3:eb:2b:33:bc:60:50:f2:a1:99:
5e:02:73:ed:07:54:d1:ad:86:9c:28:c1:4c:c1:a1:
68:64:fd:fa:d9:ed:79:cd:5c:13:d5:80:b0:78:04:
4a:7b:28:5e:f8:c7:d8:13:42:35:e0:df:4f:a8:b4:
08:e9:d4:ff:4d:cb:b5:d6:1e:19:60:0d:1e:03:b9:
7e:40:69:76:79:2c:5f:0d:d7:29:d0:e8:71:e4:70:
9e:b5:cb:06:45:fe:75:51:78:d6:f2:c4:30:22:c1:
26:44:d2:ed:5d:07:39:c3:2f:e8:72:79:22:cc:0b:
c4:12:df:dc:2d:11:1e:23:78:db:18:43:59:62:6f:
19:9b:6a:81:12:d0:32:ad:71:19:29:8b:f9:f0:3a:
db:a5:95:c5:7f:f0:12:3f:43:bf:00:ed:e0:1f:ac:
ce:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4F:43:72:28:7B:CB:1F:CC:41:4E:AE:E1:F8:CC:D1:90:6D:A5:AC
X509v3 Authority Key Identifier:
keyid:75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:32:91:35:eb:0f:74:ac:63:7a:a7:3f:19:d8:f4:d9:79:dd:
3e:47:19:5a:db:f8:5f:a0:cd:6a:8b:4b:65:b7:6f:d8:55:4e:
4a:74:d0:b6:34:74:67:7a:7d:fb:65:d2:d3:02:db:3d:ba:9f:
b8:00:5f:87:c8:83:ed:d4:4f:36:32:1d:c2:09:a1:83:d6:c6:
65:ed:54:c1:bd:6f:76:6a:29:bc:68:3d:c4:43:1c:ae:77:05:
e5:73:f6:67:55:23:03:47:dc:d6:fe:88:77:31:22:b6:cf:5b:
3c:ed:b6:11:54:ca:74:10:63:12:04:e6:af:54:b8:86:92:87:
ac:46:e6:65:01:d5:3d:68:20:84:e0:69:27:a0:e5:a5:2f:a0:
64:95:e1:21:23:75:92:1b:db:15:24:a1:21:55:59:12:b7:78:
37:de:27:8b:fe:57:b5:d9:6e:92:a1:11:ac:79:ac:3d:10:96:
b4:e8:37:2c:e5:5d:db:0e:b2:27:e3:d3:9e:ce:36:23:00:fd:
10:23:e1:96:26:e1:b7:ef:00:6b:45:74:a9:58:8b:c6:07:d3:
69:ae:b2:1b:c9:18:5f:5d:f7:e6:98:c8:84:29:56:1f:90:d3:
b4:fa:79:c2:7c:ff:ef:0f:d3:83:cd:a8:a7:d2:de:b3:d0:37:
46:49:0a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:44:38 2026 by rpki-client