Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
File: rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft (raw, json)
Hash identifier: U2FAQjLYytsyTvJ9WYw6GcejRRXQ6OZhFek3IpcBjmA=
Subject key identifier: 71:8A:52:F5:DB:99:3C:45:66:65:93:A9:F4:43:D9:44:9F:24:BC:01
Authority key identifier: AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF
Certificate issuer: /CN=ad9479afe3a9a18e1c374fca022d1ff2a255b1af
Certificate serial: 01A124D49E32A2647E3F0A44D9A2BE0A6F53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
Manifest number: 054D
Signing time: Sat 10 Oct 2026 08:01:16 +0000
Manifest this update: Sat 10 Oct 2026 08:01:16 +0000
Manifest next update: Sun 11 Oct 2026 08:01:16 +0000
Files and hashes: 1: 15iMLkZijLxFQhyhHpyZVO_Pbh0.roa (hash: 4vg9pvNIz6AeHAhcqTYuN2xhMEHA7ity8ku3fgSFNxI=)
2: rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl (hash: 9sTFyIPQOSsyEqHzjZajfV1msZt+NIpcSm5CJMZbJcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:d4:9e:32:a2:64:7e:3f:0a:44:d9:a2:be:0a:6f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9479afe3a9a18e1c374fca022d1ff2a255b1af
Validity
Not Before: Oct 10 08:01:16 2026 GMT
Not After : Oct 11 08:01:16 2026 GMT
Subject: CN=718a52f5db993c45666593a9f443d9449f24bc01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:85:fe:8b:11:6d:e6:84:9d:88:cf:ff:fb:
7a:39:dc:d9:74:6b:fb:8c:bd:39:75:f4:6a:18:ec:
40:14:1c:10:89:02:e1:36:d0:11:d1:43:89:cd:55:
80:d6:73:03:ac:d8:b1:78:f3:f4:94:fc:be:3a:8b:
4e:32:0d:81:65:dd:f7:26:0d:1d:09:db:24:d3:87:
a2:0e:f6:ba:83:0e:32:0f:36:9c:45:51:74:af:22:
42:a4:c6:e3:6c:50:6e:c0:33:9d:8b:8a:7f:7b:d6:
77:1f:48:12:18:8d:38:cf:f0:77:0b:36:91:54:63:
db:ab:f1:c2:69:d2:bf:1f:1b:94:82:3c:47:12:ba:
87:5c:d2:29:5f:f1:59:ce:f1:47:6c:61:0b:91:2a:
8c:43:60:db:2d:a3:bb:fb:cd:9b:33:d8:5b:50:cd:
f2:1c:96:4e:fe:24:ef:d0:e7:a9:b6:80:42:ea:a7:
20:75:a4:1e:e7:a7:35:3d:72:84:a6:64:c1:73:45:
97:5c:2e:08:9c:f5:3e:6f:2d:d9:22:1d:9e:bf:3f:
4c:2e:fa:1d:b6:c2:a1:e9:f7:22:f3:dd:50:44:59:
a9:3c:ce:bf:b9:61:04:e7:1f:61:78:28:f4:29:07:
7c:94:24:fa:fa:c8:1a:f1:17:d7:1a:66:05:ba:08:
ee:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8A:52:F5:DB:99:3C:45:66:65:93:A9:F4:43:D9:44:9F:24:BC:01
X509v3 Authority Key Identifier:
keyid:AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9a:a1:81:26:65:8c:79:16:a1:8a:9c:68:24:5a:cf:ce:d6:
cc:a7:b2:ff:0a:d1:21:cb:e8:8e:8e:57:c6:b1:6d:0c:85:ff:
cc:7d:8c:d3:86:96:32:57:be:fa:c6:96:eb:d6:2c:2d:24:d7:
50:2a:f7:19:33:08:4b:ea:54:18:87:ee:23:0a:fb:03:47:e5:
ee:b4:89:dd:11:91:b6:58:a0:3d:0a:34:b7:2d:4b:a0:8d:81:
b1:bf:95:6b:d3:01:a8:d4:51:c9:28:cd:29:f8:16:a0:e7:d4:
1d:6b:4d:f2:88:d3:04:5a:7c:ab:5a:c4:e6:e9:3a:2b:94:52:
80:79:54:bc:ba:f9:1c:3b:92:02:13:47:84:ad:e1:30:4e:cd:
a6:cc:bb:6c:4c:0c:85:76:33:b9:67:30:df:7c:07:21:d8:6b:
e3:42:19:59:6b:6d:66:1b:59:88:61:a2:c2:34:71:df:6e:0e:
75:88:8e:9e:25:56:90:c7:ad:c1:5f:63:04:3d:5e:7e:4a:d1:
13:e5:a5:79:51:53:e4:dd:9b:17:29:80:ae:32:34:c9:33:c9:
05:69:5b:c3:51:9b:56:f4:7e:84:ac:87:6d:d0:3a:d8:31:0e:
33:07:2d:64:db:be:7d:70:9a:47:95:90:23:cd:64:7d:ea:95:
91:a5:ea:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:22:39 2026 by rpki-client