Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
File: RZO5rApIawA3dl1gXIscgQQEbwo.mft (raw, json)
Hash identifier: XZwE1C+dKa/EzMADvNQ2OM4Ij93fISykH3jQZJdj6bs=
Subject key identifier: 1E:E9:93:F9:B9:DA:EB:7C:07:34:0C:45:1C:10:EC:92:5B:13:1E:33
Authority key identifier: 45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
Certificate issuer: /CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Certificate serial: 019CAC0FC1EA43ECBE36C1218B85D74C072E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
Manifest number: 022E
Signing time: Mon 02 Mar 2026 01:00:39 +0000
Manifest this update: Mon 02 Mar 2026 01:00:39 +0000
Manifest next update: Tue 03 Mar 2026 01:00:39 +0000
Files and hashes: 1: L7X-dPadfDyqsml5uaLmtXl56Kk.roa (hash: /6B0qNK7K7/Q2n1ppduNVDvL664tWHJJr6Qb1VYY0TE=)
2: RZO5rApIawA3dl1gXIscgQQEbwo.crl (hash: kMV68xAE4dmiSJFFzTXbI9R9CWMjRvu4ewoyEasod2A=)
3: dvF6DGgeQycYzO0PrasV3XyKjgQ.roa (hash: y+mb9vuI2SRMIEXtA5lNvvJhpmo6Layb3vm++u5RXUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:c1:ea:43:ec:be:36:c1:21:8b:85:d7:4c:07:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Validity
Not Before: Mar 2 01:00:39 2026 GMT
Not After : Mar 3 01:00:39 2026 GMT
Subject: CN=1ee993f9b9daeb7c07340c451c10ec925b131e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a7:10:4b:43:a4:c9:2d:64:a4:2c:2f:e0:ce:
41:da:fd:ef:e6:40:1a:4b:de:f0:71:a8:1e:69:6f:
5f:54:1c:19:10:2e:ce:58:1e:43:d1:5b:3c:ee:5e:
ed:48:ea:5f:31:db:06:86:68:d2:6b:8f:c5:57:60:
6b:10:94:01:1b:fd:9e:10:a1:91:40:c7:bb:77:77:
e6:f1:e2:ee:60:b6:67:e5:f9:97:9c:6f:bd:f8:16:
a6:30:f8:b9:a7:da:9b:10:2a:2e:92:d5:c9:ef:6e:
4d:6b:c7:32:ee:90:06:b7:af:f9:4a:d8:2e:10:b5:
53:b9:3c:5f:90:a2:49:c2:10:f7:92:34:c2:27:b2:
f2:77:7c:41:40:e6:ba:fb:37:95:98:5e:01:ec:c5:
f3:ad:dd:8a:4c:25:77:8a:f8:74:42:1f:13:d0:d3:
2a:a9:48:e1:01:6e:60:f9:91:76:a6:bb:3f:24:cd:
41:8e:e5:cd:54:d4:2b:c5:fb:df:9b:e8:f8:96:32:
de:8a:e0:43:62:db:da:28:56:46:03:ca:e7:39:aa:
c1:a7:82:d5:98:da:7b:dc:23:49:70:ec:52:23:4a:
6e:0a:fe:6a:26:8a:85:b8:24:39:47:cf:a8:da:71:
fa:a6:b4:22:c6:25:a9:2c:84:06:f2:89:ee:c1:68:
44:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E9:93:F9:B9:DA:EB:7C:07:34:0C:45:1C:10:EC:92:5B:13:1E:33
X509v3 Authority Key Identifier:
keyid:45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:51:a2:a9:ec:f7:01:c4:c9:8d:64:bc:6e:69:19:1d:66:e7:
96:49:d2:3c:2e:2b:e1:8b:74:d2:bc:08:35:06:cf:61:a0:3e:
21:da:a8:98:9e:53:65:e6:f1:bf:94:06:c0:3f:05:e1:93:e2:
42:33:b7:dc:2c:1e:cf:e7:4f:4b:09:76:7c:37:29:34:1a:72:
6f:13:e9:a2:27:15:6d:d4:67:41:25:24:d1:62:cb:44:6c:1c:
13:8e:06:f1:63:b3:93:d4:fa:6b:46:a2:58:95:11:57:7e:50:
f6:32:92:2a:9a:0f:5d:22:11:33:65:f5:96:6f:63:34:79:3f:
5d:76:57:8d:d1:91:5a:83:db:ab:ab:f7:d9:a5:f5:42:e7:44:
d3:89:1c:f5:8b:e8:bd:92:78:84:d3:3e:3a:3f:76:2f:e7:1d:
fd:c3:44:74:b4:ca:bf:3f:31:f2:a9:70:c6:6e:bb:6c:46:91:
55:b0:66:8d:97:1a:a4:1e:26:d5:c4:69:de:69:de:2c:68:52:
57:95:3c:8c:b0:64:c2:ed:8e:a2:c8:05:19:1c:d3:cd:f0:a1:
d4:57:62:13:2b:7d:17:0f:8d:15:3f:ab:b5:9a:14:7e:6b:b9:
a8:38:e8:66:20:4f:f8:2c:da:70:5c:8a:cf:cf:77:c0:88:3b:
51:6a:a3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:16 2026 by rpki-client