Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
File: RZO5rApIawA3dl1gXIscgQQEbwo.mft (raw, json)
Hash identifier: 1o6NxOO2zX7q9kwqVJXUVL2URn6cn5STd9lgbkVUA94=
Subject key identifier: 78:F3:DB:27:33:2F:9C:64:01:4F:0B:25:E3:2E:CF:D1:B0:15:CB:C6
Authority key identifier: 45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
Certificate issuer: /CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Certificate serial: 019D99D0563857F0992E935E30AE0FD3042A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
Manifest number: 02AA
Signing time: Fri 17 Apr 2026 05:01:00 +0000
Manifest this update: Fri 17 Apr 2026 05:01:00 +0000
Manifest next update: Sat 18 Apr 2026 05:01:00 +0000
Files and hashes: 1: RZO5rApIawA3dl1gXIscgQQEbwo.crl (hash: fhzr6+rSY9cPs8qwKvfZcOPkkY9P2YF98XQm8o9C87w=)
2: dvF6DGgeQycYzO0PrasV3XyKjgQ.roa (hash: y+mb9vuI2SRMIEXtA5lNvvJhpmo6Layb3vm++u5RXUI=)
3: wI0XWks7N-3mxHINRAc_Pr0zx0E.roa (hash: K7NYJiBW0sb92sBxmCfSIOocbSVsDC0M9ao2jSPriUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:56:38:57:f0:99:2e:93:5e:30:ae:0f:d3:04:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Validity
Not Before: Apr 17 05:01:00 2026 GMT
Not After : Apr 18 05:01:00 2026 GMT
Subject: CN=78f3db27332f9c64014f0b25e32ecfd1b015cbc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f9:7a:b4:f1:36:18:79:fe:ce:3b:12:ff:46:
b9:cf:09:52:9e:48:76:ca:ab:ca:0f:6f:b5:35:3c:
7a:7b:57:bd:37:b6:8d:c7:8f:6d:07:27:dd:18:08:
6f:f1:4d:d3:11:5d:ee:45:89:b0:66:7a:df:0e:df:
c3:fd:6f:e2:a3:fb:6f:90:fa:dc:21:19:4c:d8:52:
95:19:53:01:dc:c2:ab:e4:27:5f:34:9b:4b:70:95:
f6:82:09:a4:5a:68:e7:94:0a:c6:f4:16:0f:ca:0d:
52:1a:e0:72:5c:4c:02:da:c4:c6:4b:39:cc:31:0b:
6a:54:ed:85:52:fd:e4:37:c4:c1:28:25:0d:62:c7:
47:5d:b0:ed:4a:67:23:8b:04:56:4e:c7:5e:1e:6f:
62:3a:d3:3e:02:da:1a:0f:af:85:bd:e9:46:12:25:
cb:5a:ff:6a:17:86:e1:7f:c7:36:09:83:a5:a3:b2:
17:64:18:5b:b5:51:8c:3f:78:e1:48:5b:00:23:14:
ae:55:c5:7e:c9:b7:26:39:f1:ff:83:6a:5a:0d:2d:
b5:c7:1a:b5:1a:40:5b:da:fd:fc:06:2d:ce:0f:09:
f5:53:58:9d:d5:2e:83:d8:37:31:ec:89:a9:49:32:
fe:cf:66:4f:a6:04:1d:95:9b:7d:87:6c:aa:37:94:
7c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F3:DB:27:33:2F:9C:64:01:4F:0B:25:E3:2E:CF:D1:B0:15:CB:C6
X509v3 Authority Key Identifier:
keyid:45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:6c:71:0f:e7:0c:e6:bc:dc:0f:31:28:38:0a:32:e8:5d:9c:
79:ef:47:99:cd:b6:bd:11:dc:96:af:9b:71:c2:b6:4e:2d:27:
71:4a:fe:67:c5:58:80:5b:11:b1:5f:5d:10:db:08:a3:42:0b:
68:6f:6e:bd:00:07:be:5a:33:ca:fc:30:07:42:a3:ab:63:07:
0b:7c:d5:85:e2:35:ae:dc:b9:e1:81:fa:3f:64:c8:11:3d:68:
82:2d:05:1f:0b:70:b9:5f:23:6e:bf:55:2a:95:6c:be:6e:33:
98:1e:6e:ba:3e:98:ed:26:80:4e:64:b4:28:d2:2b:e4:bc:c5:
f7:fb:f7:1a:69:3e:1a:52:aa:54:b5:25:21:f7:ba:e5:a9:44:
8b:0d:c3:97:ec:3d:7c:04:a6:5b:a7:fc:27:d7:25:2c:84:33:
e7:da:a6:0d:34:0f:48:64:fa:dd:20:7d:da:05:90:39:4f:ca:
4b:54:e9:c6:85:b0:89:d3:df:c4:b0:fe:f5:04:e1:7b:25:3a:
e1:1a:08:14:1a:da:fd:44:96:02:46:7d:7e:32:ce:c0:b3:86:
1b:fb:9f:3e:80:cf:72:62:e0:ac:4a:1a:3f:2c:3b:a1:2c:0f:
b8:bf:5f:c3:84:1a:af:15:b6:31:66:77:7a:dc:4a:d0:e1:4c:
72:da:26:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:25:03 2026 by rpki-client