Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
File: RZnthOSyEcyLqokUl0E1T4hQ7w8.mft (raw, json)
Hash identifier: tjsAlozlCDDeo4d80Pv6r/5elXIS9hp1dThA+ma2Opw=
Subject key identifier: 0C:22:B3:A9:94:BF:E7:E5:49:A6:1F:06:85:37:C9:95:C0:AC:B5:C4
Authority key identifier: 45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F
Certificate issuer: /CN=4599ed84e4b211cc8baa89149741354f8850ef0f
Certificate serial: 019D981852CDD880A6D2CFE23979B06C3A06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
Manifest number: 0B83
Signing time: Thu 16 Apr 2026 21:00:24 +0000
Manifest this update: Thu 16 Apr 2026 21:00:24 +0000
Manifest next update: Fri 17 Apr 2026 21:00:24 +0000
Files and hashes: 1: RZnthOSyEcyLqokUl0E1T4hQ7w8.crl (hash: njQqBbe0rzeChRZ8b7wZgw0SPvU1W0GGGWGVJWq0SXo=)
2: YAsr4AMd-DQg17IKnmJqPsKycSA.roa (hash: g07FXjeIHQJ20whOb8MTucqM4PupENC/MFjlVryEQbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:52:cd:d8:80:a6:d2:cf:e2:39:79:b0:6c:3a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4599ed84e4b211cc8baa89149741354f8850ef0f
Validity
Not Before: Apr 16 21:00:24 2026 GMT
Not After : Apr 17 21:00:24 2026 GMT
Subject: CN=0c22b3a994bfe7e549a61f068537c995c0acb5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:36:21:68:a7:27:72:38:68:99:98:9d:dc:cc:
c3:d7:45:9b:0e:b4:8c:d1:4e:58:80:33:88:a6:5e:
8b:bc:a7:74:a5:16:7c:69:1d:e7:71:33:2b:59:1f:
d4:35:8c:fe:cc:02:e7:c8:94:9a:21:f0:15:75:00:
d3:65:5d:ef:67:d1:73:b9:7a:53:fb:7d:9d:a2:d3:
31:e1:3e:59:7b:18:b8:f4:c7:7c:31:ef:07:55:30:
68:50:cc:dc:e4:0a:41:cb:11:ba:61:c8:44:4e:12:
06:e5:19:e5:95:a1:66:92:cc:e0:bf:a5:61:2b:f0:
62:b6:78:ee:2a:b9:d2:e7:21:a6:26:01:13:09:ec:
d3:24:6f:25:4a:28:d9:41:8a:8a:29:76:20:a1:94:
98:74:96:41:a9:33:d7:38:07:e7:d4:7b:17:cb:27:
1e:14:4e:84:28:a8:0a:32:e8:22:b7:8b:88:a7:79:
9f:1c:2d:f5:91:32:85:d7:20:73:67:22:14:b5:dc:
3e:a9:4d:b7:31:2e:3f:cc:e7:7c:33:90:3d:7e:d6:
f6:0b:f4:52:a7:bb:25:b0:47:7d:56:50:66:77:bc:
3b:d1:45:e9:da:2c:da:36:17:eb:dc:3d:58:7f:36:
47:bb:da:78:34:ed:61:56:53:f4:5e:2b:21:fc:c2:
d1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:22:B3:A9:94:BF:E7:E5:49:A6:1F:06:85:37:C9:95:C0:AC:B5:C4
X509v3 Authority Key Identifier:
keyid:45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:da:a5:fc:17:04:c7:12:16:0c:e8:68:f3:5b:1b:a7:9e:cd:
ca:46:98:1d:57:07:a2:73:3c:5e:1e:6d:17:72:6e:39:ae:1a:
1b:e9:c6:4f:af:9b:d6:1c:ec:d6:a6:85:c8:09:e1:b6:21:10:
b6:d4:0d:9f:57:ed:d9:16:ba:7b:8a:3c:50:d9:07:88:0a:f2:
ed:e3:fd:26:c7:bf:36:ae:e3:5d:fa:5d:f6:15:5e:b6:bb:ec:
e9:25:4b:de:23:d7:b7:c8:66:9b:25:51:c8:dd:32:88:b1:38:
b9:68:dd:53:22:17:d0:db:0f:cd:2d:1b:c3:d9:80:e3:45:44:
da:3c:52:0b:07:fd:2b:5a:65:96:92:b9:55:40:97:b6:55:3d:
22:6f:a4:52:5c:d8:da:9d:35:24:5f:aa:35:bb:56:bf:e3:27:
9a:69:67:8e:ba:6c:ea:fd:5c:46:62:7b:72:ba:b4:3e:e1:25:
1f:d8:7d:d1:f9:51:5f:a2:ed:4d:a6:04:ad:8c:04:56:b5:8a:
94:f2:fe:ee:5a:a7:a3:41:e8:d8:25:60:21:ab:a2:93:92:2c:
6a:2c:92:30:d5:af:66:fb:65:1f:30:3c:af:3e:e2:f4:12:74:
a2:0a:3b:89:ff:90:4e:68:b7:c0:62:46:49:29:dc:62:4b:24:
a9:46:10:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:37 2026 by rpki-client