Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
File: rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft (raw, json)
Hash identifier: HwGCY/r3DD8V3sGrRr5vZ0YFlTsJbngCnsxj2ydhP6k=
Subject key identifier: B8:26:96:05:34:12:C5:BB:AD:F7:51:FE:DA:FA:47:C1:B8:E3:15:C2
Authority key identifier: AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF
Certificate issuer: /CN=ad9479afe3a9a18e1c374fca022d1ff2a255b1af
Certificate serial: 019D9D07B446150245915A8E0A84D0812677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
Manifest number: 0379
Signing time: Fri 17 Apr 2026 20:00:20 +0000
Manifest this update: Fri 17 Apr 2026 20:00:20 +0000
Manifest next update: Sat 18 Apr 2026 20:00:20 +0000
Files and hashes: 1: 15iMLkZijLxFQhyhHpyZVO_Pbh0.roa (hash: 4vg9pvNIz6AeHAhcqTYuN2xhMEHA7ity8ku3fgSFNxI=)
2: rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl (hash: JiJWtQSIANOxARyibkdutTrom7QupYmKsjJ9Z3Uxewc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:07:b4:46:15:02:45:91:5a:8e:0a:84:d0:81:26:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9479afe3a9a18e1c374fca022d1ff2a255b1af
Validity
Not Before: Apr 17 20:00:20 2026 GMT
Not After : Apr 18 20:00:20 2026 GMT
Subject: CN=b82696053412c5bbadf751fedafa47c1b8e315c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:36:0b:46:87:27:29:cc:be:61:45:fb:2d:01:
45:7a:34:7c:19:4c:f9:65:e4:9c:ef:a5:86:9b:37:
19:58:38:ad:40:82:f1:32:2d:3e:c8:c3:36:a9:43:
27:5b:29:8f:06:d1:f6:a2:f7:6f:68:c2:f4:fe:34:
fc:30:71:26:fa:d6:2c:35:2f:b7:7d:f3:6e:13:9a:
d3:36:dd:c1:0e:20:88:3f:f0:cd:a5:b6:68:de:43:
c0:c2:88:a2:38:06:df:1c:8c:a8:8e:f2:4d:39:c5:
7c:89:a6:3c:b9:95:75:02:d7:9d:80:13:ed:40:86:
79:e6:26:fb:2e:2e:bc:98:6e:7c:da:79:3b:ce:d4:
31:36:b7:13:c9:0c:86:a2:94:9a:f2:ad:a6:5f:8f:
e9:5b:8a:92:e1:eb:44:e8:c8:b8:84:30:1d:cb:17:
ee:9b:d1:7e:2f:36:0b:30:a6:54:72:4e:80:37:30:
61:0e:b8:be:e2:87:88:4a:50:6c:f0:12:3d:62:48:
39:b2:91:fb:f0:28:79:4f:d5:b8:11:10:dc:c5:fe:
2d:c8:ab:66:24:06:cf:ca:f1:52:3f:39:f7:86:db:
57:53:da:ad:7a:5f:2b:bf:32:6b:92:86:91:66:0e:
45:d8:85:fb:c8:94:1b:05:5c:be:e2:49:7e:1f:6d:
93:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:26:96:05:34:12:C5:BB:AD:F7:51:FE:DA:FA:47:C1:B8:E3:15:C2
X509v3 Authority Key Identifier:
keyid:AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c4:e6:3a:57:7a:51:59:b5:f4:81:38:c7:c1:86:fa:2d:ca:
7e:88:a8:be:ab:87:bc:02:5c:80:fa:57:23:b0:92:f1:21:db:
13:56:08:88:84:94:13:8f:22:e1:6d:01:38:08:87:8a:e8:ac:
3f:42:c7:3b:88:b8:e7:0e:a4:46:ea:64:ab:8f:97:00:1a:ea:
44:e4:a1:f1:fc:50:83:dd:eb:bf:d0:2c:a4:e4:9a:d6:3a:e6:
73:4a:5e:1d:36:6b:49:dc:cc:cd:00:45:a5:aa:7a:d7:4b:70:
c8:6c:d2:e8:aa:c7:80:85:6e:fc:52:09:56:69:29:c8:bb:b0:
d5:77:fa:cb:60:4e:db:8d:65:dc:72:10:c4:37:e3:38:dc:b8:
76:63:e9:77:00:b7:d2:71:1f:01:dd:90:f3:64:7f:ce:94:89:
ae:6a:cb:6b:5c:43:2b:37:7c:cf:79:58:2a:ec:8e:19:c9:b6:
98:6a:c7:5f:af:7e:d5:94:4b:11:95:08:97:03:f6:00:2e:b0:
f9:ea:96:82:38:57:f4:c6:39:40:ab:a2:eb:5b:f6:ce:7f:8d:
01:a0:78:c6:25:a4:f4:e8:7c:e5:ab:e5:57:72:7b:ef:ff:da:
76:43:96:65:f2:1b:6f:28:31:2c:0c:42:6e:7e:0e:22:36:3a:
e5:88:1d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:47:11 2026 by rpki-client