Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
File: Zl5NfqijRwyXA-51UUgcNvd0_rs.mft (raw, json)
Hash identifier: WgvhXb7wTB1jkbDeqBa9zqLL3EZmQw8W8hcjUEnnMds=
Subject key identifier: 96:90:F0:6D:D4:48:C5:43:91:28:47:C4:18:DF:6D:8C:F0:CD:0D:B2
Authority key identifier: 66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
Certificate issuer: /CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Certificate serial: 019CADC79AE8516901E1FD8D48736482A6E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
Manifest number: 1564
Signing time: Mon 02 Mar 2026 09:01:05 +0000
Manifest this update: Mon 02 Mar 2026 09:01:05 +0000
Manifest next update: Tue 03 Mar 2026 09:01:05 +0000
Files and hashes: 1: 3dDFlJIiwev5JNzj0uspF-q-hAM.roa (hash: 2MPQXp2XuzXpOvR5MvmUSNMeQLpCxYJhhEk2RjVnZhI=)
2: Zl5NfqijRwyXA-51UUgcNvd0_rs.crl (hash: uIltkxcUx2RCykNWIni0iffb/ynDByuOAa7PbbQFvF4=)
3: tXb-ZOETTYTckpb9Qysc1kmvy6I.roa (hash: ecwsDlNutKSR5EQe4HHz/G8gZ+2PHPrWaHUQyPF5OHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:9a:e8:51:69:01:e1:fd:8d:48:73:64:82:a6:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Validity
Not Before: Mar 2 09:01:05 2026 GMT
Not After : Mar 3 09:01:05 2026 GMT
Subject: CN=9690f06dd448c543912847c418df6d8cf0cd0db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a9:c5:30:0c:da:ae:19:2e:78:47:cc:15:ff:
92:e6:2e:af:d2:b1:98:9f:51:d2:86:44:9c:db:84:
eb:cf:e3:a9:92:fc:78:40:26:9e:00:3b:85:fe:de:
8d:59:00:bd:59:28:73:1f:95:de:e7:64:d1:21:09:
b9:3b:c4:1f:b3:23:b7:82:17:51:90:4f:f0:75:cd:
e5:4e:6e:28:ae:7c:45:05:d4:4a:3b:b4:b7:2b:6d:
a1:16:8d:9c:16:90:bc:d6:9b:f2:d0:6f:f7:de:54:
cc:62:89:ac:fe:eb:1c:51:f8:92:6b:6b:cc:43:b0:
e5:37:ff:14:e2:2f:53:62:be:c9:e0:4e:6e:ee:45:
1a:0d:61:3c:ef:f4:1d:b5:18:e2:7f:02:0b:9e:1a:
5b:0d:1a:65:a2:7d:40:b0:97:05:02:d5:50:1d:70:
e9:3f:17:99:6d:0e:73:52:ba:5c:3e:ab:8e:ae:62:
83:19:77:d6:43:42:3d:c9:2d:8c:84:74:fe:93:3d:
45:20:e1:aa:4f:9a:aa:8c:e3:72:1b:b2:2f:8a:de:
ee:d4:ff:00:09:75:73:3c:af:22:7d:13:5e:18:e7:
90:2b:eb:9a:4d:5e:e0:10:2b:c0:04:dc:e0:e1:3e:
96:94:4a:09:85:7a:fc:c4:6b:40:ac:e8:b9:fc:ae:
3a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:90:F0:6D:D4:48:C5:43:91:28:47:C4:18:DF:6D:8C:F0:CD:0D:B2
X509v3 Authority Key Identifier:
keyid:66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0f:cd:6c:eb:9e:0e:45:37:53:94:d0:17:6c:82:02:d3:20:
0c:7d:e9:66:2f:44:d7:e7:8d:cb:96:ad:37:c2:b0:ed:42:ee:
85:08:d2:3f:1c:a5:66:97:29:e0:c8:af:af:b1:ae:30:e6:8c:
0b:b3:72:f5:26:7e:c9:96:ea:cd:7f:49:cb:f1:73:bc:c5:37:
8f:fc:ef:90:01:0e:dc:5a:df:b9:2d:43:48:27:5d:b5:3a:7d:
cc:4d:69:b4:76:5b:d2:0e:24:ef:c8:7d:50:f4:07:07:27:0e:
64:e5:de:6c:c0:58:5b:c4:0d:e8:62:04:4a:c4:c4:6d:80:09:
3a:16:43:91:31:aa:ef:ff:12:51:7c:68:63:1d:1d:7f:a4:23:
17:e1:ef:35:25:20:6b:10:c5:17:98:f8:2e:fc:e9:1e:b0:81:
a4:d9:cc:09:af:3d:76:29:13:13:2f:9b:e5:85:29:32:7c:db:
ab:2b:bb:e7:e9:cd:1b:52:0a:2f:9d:1a:df:cc:85:8e:d6:64:
52:ec:64:72:b0:db:de:92:a0:d7:22:18:37:d9:5b:37:70:4f:
e6:f6:99:3e:45:80:b5:fd:bd:f5:ff:07:7f:2e:c5:11:2f:c7:
56:53:28:7a:68:41:72:fd:cd:14:63:86:4c:51:1f:ee:6b:f7:
ef:39:bc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:39:07 2026 by rpki-client