Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
File: RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft (raw, json)
Hash identifier: R/6Wh390nVIbkWwdMf+M9kX00CCMZcSkt9vJ4w3OP5M=
Subject key identifier: F3:50:30:57:B9:EA:19:14:68:9F:60:78:EA:2E:99:59:C0:E8:1C:BD
Authority key identifier: 45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
Certificate issuer: /CN=459ad2ece3e5911093d964753b656459c9bc05a7
Certificate serial: 019D97E1F6785E7055AD94CCCF2AE45AFC0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
Manifest number: 1147
Signing time: Thu 16 Apr 2026 20:01:01 +0000
Manifest this update: Thu 16 Apr 2026 20:01:01 +0000
Manifest next update: Fri 17 Apr 2026 20:01:01 +0000
Files and hashes: 1: RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl (hash: BlvOJO2qBzyf0iCoRua1Rg7FqXVGCimnX5y6Ypi6vjE=)
2: oxM4weLdM3j7jrYJT8BJG0W0cJ4.roa (hash: JzjynEnEp0mde9J1/ZPR8Pa7VycJrBNUsALJMI999+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:f6:78:5e:70:55:ad:94:cc:cf:2a:e4:5a:fc:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459ad2ece3e5911093d964753b656459c9bc05a7
Validity
Not Before: Apr 16 20:01:01 2026 GMT
Not After : Apr 17 20:01:01 2026 GMT
Subject: CN=f3503057b9ea1914689f6078ea2e9959c0e81cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:be:47:29:73:aa:70:ec:f0:84:f1:31:6f:6d:
0f:a9:c6:2c:ac:4c:18:a0:d2:7c:05:89:ea:27:c1:
db:86:57:c7:dc:6c:a2:ca:b7:fc:d6:a4:af:57:fe:
80:da:ca:31:f4:78:29:64:a0:02:35:74:29:c2:10:
84:16:30:19:30:5c:04:14:16:f3:0e:20:08:36:9d:
33:37:8c:bc:d3:bb:0b:bd:67:81:c0:a7:84:15:e7:
d6:21:96:d5:ad:ac:80:8e:fb:7f:34:00:54:41:26:
51:29:88:fd:d4:a0:b0:c8:ca:af:4a:96:43:6a:44:
62:a0:f7:11:5e:64:20:bb:22:b1:53:02:a8:8f:ba:
c1:63:a3:83:87:74:fd:1e:a8:2b:b4:c5:1e:e6:91:
19:76:61:33:28:9b:bb:15:16:c3:7f:07:b2:46:50:
8d:24:53:29:94:49:42:8d:a1:d4:99:47:18:7a:60:
bb:4b:75:86:cb:46:44:70:7c:d4:8b:fe:e0:1f:32:
d6:bd:80:51:0c:e7:ea:8d:dd:fb:3e:52:f9:d0:de:
d1:a9:4a:60:e9:01:b6:5c:f9:c8:81:46:29:44:5d:
be:10:32:b2:2d:70:d9:3b:b8:82:ab:db:df:e0:a9:
e9:10:92:93:41:0b:0c:13:03:3d:fc:3b:8b:20:05:
75:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:50:30:57:B9:EA:19:14:68:9F:60:78:EA:2E:99:59:C0:E8:1C:BD
X509v3 Authority Key Identifier:
keyid:45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:22:f0:b9:f9:24:bb:50:d3:61:51:90:e2:68:3b:82:a6:19:
9d:b3:98:4a:2c:ef:18:17:34:4d:e0:2f:bc:e8:58:a7:fc:de:
9d:29:45:f7:3d:8c:d7:0f:df:04:a3:a4:13:7b:9d:27:ad:d6:
ed:5e:85:f1:e9:98:8c:e5:d1:2f:a0:91:d8:15:f1:7a:de:e4:
2f:ca:e3:cf:d7:b5:73:d9:42:05:76:65:ea:34:3f:14:5a:5e:
dc:33:be:26:5d:b9:9c:0b:eb:3e:8b:fc:6b:50:c4:bb:b9:dd:
66:ad:43:25:86:37:b9:1d:2e:e4:b2:3e:89:c4:0c:a4:0b:c0:
98:d2:1a:d5:cb:b7:bd:bd:34:9a:4e:de:52:4e:05:00:0a:19:
25:09:02:dc:36:2d:20:91:dc:83:30:e7:1a:76:ea:b4:c2:f3:
d1:e1:b4:a6:46:a9:06:b4:a2:03:db:32:53:14:07:fb:d7:d1:
61:0b:e0:02:3d:a2:df:b6:b6:cd:14:67:74:28:a7:4b:e9:69:
43:6a:f5:b7:6e:a3:94:0b:8a:c8:6a:f3:cc:d2:56:09:02:b9:
e0:cd:7e:5d:71:7b:07:60:cf:13:21:e8:9e:47:7c:f8:d7:b0:
e3:25:8f:ad:f1:67:f5:f7:a7:21:46:a2:29:cb:7c:b6:f4:79:
1a:9c:e9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:18:20 2026 by rpki-client