Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
File: rkZkQGbOrznTr7D9c1sBnOydo2Q.mft (raw, json)
Hash identifier: +aTkp4EO0UzeNXYVKM9mUqTENwLlLxiwJCdIsBP7vAU=
Subject key identifier: BC:75:09:E9:CC:C2:3B:B3:09:A9:34:59:3B:2E:70:CF:FE:0C:FF:F8
Authority key identifier: AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64
Certificate issuer: /CN=ae46644066ceaf39d3afb0fd735b019cec9da364
Certificate serial: 019DA48A70E61744BC53E8A8A3FA7C3493BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
Manifest number: 0547
Signing time: Sun 19 Apr 2026 07:00:29 +0000
Manifest this update: Sun 19 Apr 2026 07:00:29 +0000
Manifest next update: Mon 20 Apr 2026 07:00:29 +0000
Files and hashes: 1: YwZPhm_oPIIN_h73HSe7_TwtVu4.roa (hash: L8RiSrI3D8+7xc9Avh/47HaCMGihyyrZJ30e+0TUw7M=)
2: rkZkQGbOrznTr7D9c1sBnOydo2Q.crl (hash: umny94HZNh1wMfsW3z397ZXQhjhxjHqyfTd45MCo4Jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:70:e6:17:44:bc:53:e8:a8:a3:fa:7c:34:93:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae46644066ceaf39d3afb0fd735b019cec9da364
Validity
Not Before: Apr 19 07:00:29 2026 GMT
Not After : Apr 20 07:00:29 2026 GMT
Subject: CN=bc7509e9ccc23bb309a934593b2e70cffe0cfff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:07:87:94:c0:fb:22:44:b3:64:73:24:66:29:
d0:0f:9a:42:25:6c:1f:ce:2b:fd:04:ca:40:67:12:
54:08:3e:e4:bf:4e:0f:1c:9f:2e:6c:11:6b:c4:a3:
b4:69:69:ff:29:7a:ce:66:7e:d3:c5:dd:76:62:78:
3d:ac:e3:87:9b:14:b4:bb:3c:bb:01:a8:22:9f:26:
74:e1:2b:ce:d0:39:11:60:af:5f:b9:da:e6:c6:89:
2c:07:b5:bc:9c:31:bc:14:bc:40:71:76:87:a0:09:
04:41:ff:30:a8:33:da:e7:6d:79:9b:6e:2e:da:86:
bb:98:54:02:9b:d9:7f:15:b6:6e:ae:d0:89:07:2e:
f2:c7:82:f2:6f:5a:8e:55:64:ab:09:e2:04:06:b3:
89:88:1d:a5:b7:f0:fc:e3:c9:76:f8:53:56:0c:cd:
66:0e:1a:ea:f1:69:1a:dd:28:cb:18:8f:4d:da:6d:
1d:4e:05:b0:2f:14:0f:6c:03:a5:55:86:83:f1:61:
3a:f5:c1:dc:3d:12:da:8b:94:b3:dd:90:ce:97:11:
d8:47:df:49:f7:bb:70:0e:e4:47:15:21:9c:0c:99:
3c:86:b4:96:1e:00:50:33:cd:b9:21:e2:fc:58:76:
d6:cb:a5:a3:5c:81:5a:f3:ba:82:c3:b8:25:e0:2e:
4e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:75:09:E9:CC:C2:3B:B3:09:A9:34:59:3B:2E:70:CF:FE:0C:FF:F8
X509v3 Authority Key Identifier:
keyid:AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:24:a1:bd:51:2f:08:92:b8:b3:35:5f:8e:56:04:4f:d0:9c:
7c:15:21:0f:73:a4:3f:d5:b0:a3:a5:53:ce:46:5c:08:a3:ae:
6b:73:da:0a:64:63:79:51:b4:66:1b:18:a4:d6:26:b9:61:84:
c2:05:8b:a5:85:5d:b2:d1:26:dd:13:e4:26:b9:2a:12:2b:7e:
b2:74:34:50:14:1c:85:60:b7:ea:92:9b:70:ca:45:dd:e0:cc:
02:81:3a:9d:cc:8a:c6:29:90:24:27:21:5f:39:26:15:0d:2b:
3a:95:d1:62:a2:61:1e:db:c4:bd:16:95:ff:ed:9c:d6:98:d1:
9d:5a:49:f8:9b:07:9a:1c:65:21:48:81:41:61:63:ad:ad:85:
2b:24:88:8b:52:e2:e1:27:1e:47:cf:b6:b7:9a:2e:b7:f6:30:
fb:ed:4e:f4:0e:5e:c9:62:e9:ce:7c:f1:b9:f0:67:6e:ee:d5:
e4:b4:3b:be:bb:34:b8:4d:ac:85:2d:e3:7f:58:8e:bc:27:2a:
bc:10:8e:3a:d0:e8:87:a8:f2:da:f6:28:60:a6:f3:87:57:b5:
8c:b0:a0:03:6d:f5:6e:63:b8:25:51:c2:85:8e:9a:85:ae:2e:
0f:d7:03:95:2a:b4:f2:fe:20:f2:6f:3e:76:af:09:ad:f1:01:
a5:df:93:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:06 2026 by rpki-client