Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
File: dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft (raw, json)
Hash identifier: wp7SD9BLsfzfvtxoU0Jn764fWHSEjFrM4oh0j89fP0o=
Subject key identifier: 6A:A1:5E:10:A9:17:6A:5F:9B:DD:4D:19:41:B6:00:85:C3:A6:25:0A
Authority key identifier: 75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED
Certificate issuer: /CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
Certificate serial: 019D9DAC9D79EDB074EB28A778AFF5561BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
Manifest number: 0117
Signing time: Fri 17 Apr 2026 23:00:28 +0000
Manifest this update: Fri 17 Apr 2026 23:00:28 +0000
Manifest next update: Sat 18 Apr 2026 23:00:28 +0000
Files and hashes: 1: 5vgf_9aZThkj_7VAzPV1SdycQ9s.roa (hash: WWuwQNMz2jPS1Lz9ZyTa8kKgvLVWvH3DolJRQpBYZVw=)
2: ZUFdt76XEIRqjB1ZsCU8KDPIIeE.roa (hash: +22Qmq4Y9pNmDRsynGIXRX9EtOmlc0lMrcEc8jeBxvw=)
3: dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl (hash: izXawTNiQFIchEB+R9hxRTx8zBigytsWaU6mQ+umRNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ac:9d:79:ed:b0:74:eb:28:a7:78:af:f5:56:1b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
Validity
Not Before: Apr 17 23:00:28 2026 GMT
Not After : Apr 18 23:00:28 2026 GMT
Subject: CN=6aa15e10a9176a5f9bdd4d1941b60085c3a6250a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:72:09:e7:b0:02:6f:80:60:10:01:46:fc:f0:
9f:fe:2f:0d:49:5d:96:93:42:c7:d5:bb:11:0b:c3:
a4:3b:3a:f1:b1:9f:fb:1b:ee:51:fa:2a:75:e5:f5:
9f:cc:4f:b0:e8:a1:80:bc:45:46:d6:0d:a7:23:38:
3f:eb:b5:df:aa:7c:ce:d0:b5:df:2d:8d:4b:9c:4a:
ad:bc:61:55:e5:d4:60:7b:29:81:ae:a8:f9:61:07:
ac:92:10:c4:2b:75:17:75:92:9c:a4:e8:95:14:d4:
85:00:1e:5f:70:f7:dc:16:ef:62:b5:7c:fd:9b:ca:
34:af:b8:01:f5:bd:fa:17:28:09:6a:25:ec:1b:6a:
36:cf:84:1d:c6:fa:6e:38:64:b1:3f:f2:9e:99:59:
3a:35:d2:79:a3:ea:b5:3f:fc:b1:a6:32:21:b5:21:
0b:cf:ee:8d:f0:9e:95:d6:8c:d3:e8:26:e5:0b:8c:
06:9d:86:3a:6b:b9:16:9f:85:27:60:01:52:a9:38:
12:54:82:7d:c2:b3:ee:a6:76:5b:d4:91:49:6b:e6:
9c:d4:f7:6c:71:d4:8c:79:6e:fc:dc:37:92:31:6b:
14:70:27:68:fb:52:57:12:e6:bd:f8:b7:ce:41:42:
0d:65:db:e9:39:57:c1:64:52:ae:38:42:10:a9:5d:
f3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A1:5E:10:A9:17:6A:5F:9B:DD:4D:19:41:B6:00:85:C3:A6:25:0A
X509v3 Authority Key Identifier:
keyid:75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ce:9c:bf:ca:19:91:20:41:8e:a2:1e:2c:e7:af:e3:28:5f:
63:1b:36:6a:22:52:ee:10:10:a5:1b:15:e6:cd:c8:67:c2:f9:
f9:62:aa:05:54:6b:a5:c9:98:95:f4:0c:04:55:fc:f8:86:07:
9a:c0:ed:eb:02:35:68:a3:85:3e:a4:8e:7a:f6:fb:f8:9b:63:
87:61:02:ab:f3:7f:9d:0a:a6:78:05:c7:54:13:5f:b9:51:d4:
72:17:a4:73:b8:38:91:8b:68:48:6d:25:8e:5c:46:c9:6a:d7:
2d:89:b4:64:61:1f:9d:d7:b2:93:7b:fa:05:c0:9c:ba:8d:4a:
b7:0e:63:ef:34:d1:31:ef:a4:d7:14:d4:75:81:cc:3c:d0:e0:
ef:7b:12:c2:2a:84:03:a8:1a:64:95:2a:26:4c:66:37:3a:95:
bd:b5:d2:82:16:e7:f8:d2:0c:2a:60:6f:30:e7:bb:76:f8:1c:
5e:d1:19:14:61:75:56:1c:00:05:01:4e:63:ec:dd:b7:48:91:
48:9c:49:88:c4:0f:98:8c:02:5b:45:b0:26:e2:3d:fc:97:c5:
73:0e:2b:f2:1a:dd:17:b8:b1:29:cb:0e:71:f9:1d:91:27:9e:
dd:b4:0b:21:00:2d:b7:49:09:be:66:b0:af:89:dc:dc:3c:6c:
72:d0:d5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:54:17 2026 by rpki-client