
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
File: Rzd55qd8flghMZh2TOKsDmvuYjY.mft (raw, json)
Hash identifier: UlR5Sq4sKsiXnxA5VuUQFYifz2YChbZ4YqpIKgyCuo4=
Subject key identifier: 21:74:D0:87:A8:23:9E:38:62:4B:99:80:63:20:F1:17:CE:C8:22:49
Authority key identifier: 47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36
Certificate issuer: /CN=473779e6a77c7e58213198764ce2ac0e6bee6236
Certificate serial: 019D9B504AA4278F9C55B56472585224E265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
Manifest number: 03A1
Signing time: Fri 17 Apr 2026 12:00:23 +0000
Manifest this update: Fri 17 Apr 2026 12:00:23 +0000
Manifest next update: Sat 18 Apr 2026 12:00:23 +0000
Files and hashes: 1: 2z-c3MpGdlvNK98wFJ-FhUpQXTk.roa (hash: jD+P5ccWJZqhrEzl8gpwfaAxbm2916uuSP5OIhhxw0M=)
2: Rzd55qd8flghMZh2TOKsDmvuYjY.crl (hash: IOykbse01hvvdkle2WHAr4Mgb3zVj4wufJ3iA3Ldd3s=)
3: nLrwE_Xuj7FEwaVr2PMMyDOjcsM.roa (hash: CdwJHzzCL/DT7oBvlE4BtdzceymGADOR4McXAN25EBU=)
4: zyBvK059nS2Wwp2gBqWo7Jx-YsI.roa (hash: YgqvlJooFLvwv+N90i8hB60uaCFF3pjZWTtq+9rP5ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:4a:a4:27:8f:9c:55:b5:64:72:58:52:24:e2:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473779e6a77c7e58213198764ce2ac0e6bee6236
Validity
Not Before: Apr 17 12:00:23 2026 GMT
Not After : Apr 18 12:00:23 2026 GMT
Subject: CN=2174d087a8239e38624b99806320f117cec82249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:37:7d:ca:b7:30:f8:ff:d5:2f:f4:42:6c:d2:
28:11:e7:70:19:a9:f5:d4:5a:71:c2:b5:e1:0f:96:
0c:e8:9a:e2:07:e5:f2:1b:fa:3b:76:1c:1f:58:5f:
e7:92:c1:eb:07:7e:f8:7a:2d:b7:a6:e3:9c:b1:10:
5e:14:72:e7:9f:8f:2e:a9:5d:09:0f:44:51:77:5d:
27:6b:de:02:b5:18:c8:67:ba:e0:56:45:ed:57:5a:
f9:6b:48:5a:ad:8e:1d:9a:37:6d:9e:f8:fc:be:ac:
5e:50:5b:6f:85:fd:4c:3a:78:19:df:cb:d0:6e:51:
35:7e:3b:90:76:10:d9:34:2c:3c:07:bd:aa:6c:15:
1d:c9:cb:2c:4c:9c:9b:fc:62:71:05:08:3c:9d:fa:
bb:95:38:9a:8e:b9:64:53:d9:90:3d:ed:ee:49:26:
4a:4f:1e:07:2c:19:17:af:c6:ff:d9:98:33:0c:79:
2c:1e:11:38:85:28:6a:d8:dc:e7:41:b1:5c:06:c5:
d1:67:5b:c5:1d:7c:e5:9f:92:6a:82:c1:85:40:61:
81:b0:4f:c6:d1:bf:fc:80:e7:83:6e:db:f8:f5:ce:
3c:b5:4f:0c:6b:c7:cc:f9:41:89:b3:ae:4d:5f:91:
0e:4a:20:dd:b4:b7:21:29:54:77:31:05:3f:6e:48:
4f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:74:D0:87:A8:23:9E:38:62:4B:99:80:63:20:F1:17:CE:C8:22:49
X509v3 Authority Key Identifier:
keyid:47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:90:a8:33:e2:30:81:c2:41:a1:db:70:1e:1b:ae:a9:20:f2:
e8:5b:0e:44:4a:90:4d:a0:5d:77:60:83:99:cd:29:ac:2f:58:
a1:1d:c9:56:07:87:fa:54:44:bf:98:4f:4b:f1:bb:63:e6:38:
01:98:71:6a:a8:5c:a2:a8:de:17:40:4d:c7:af:3c:a3:61:65:
c1:3c:78:6d:9b:72:79:0f:9a:91:52:43:01:c1:55:14:80:45:
79:67:a2:7a:d0:3b:00:8e:f0:ee:8d:cc:c1:b7:73:02:52:df:
cb:bf:52:5b:c9:a7:b3:ad:b4:bd:dc:fd:2b:58:e7:db:1d:16:
69:c8:7d:b4:c6:5d:6f:4d:af:d1:59:a2:6e:e6:12:6b:5e:e9:
32:1a:13:41:55:02:30:c6:c2:6b:86:8f:24:b2:06:3f:8b:c7:
a7:2a:c5:f1:12:12:a4:af:46:e4:85:a0:bc:d4:8a:3d:da:77:
3a:2a:35:27:c4:23:af:5b:eb:66:15:1e:52:a3:42:1e:f0:72:
1b:4f:fa:bb:f6:3a:7c:05:4a:be:ed:52:3d:23:d0:7e:60:38:
a2:05:34:92:17:a0:c9:9a:21:f7:a7:c6:e6:d3:ef:61:3e:37:
38:0d:6b:f1:2b:1d:11:90:2d:9a:d2:c6:80:dd:1a:1a:82:77:
ed:e1:fb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:14:56 2026 by rpki-client