Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
File: z173qHDUsUjrHU9P5mbtUFSt6uw.mft (raw, json)
Hash identifier: B76k0I72naaWK3jKdWJLq0Ev8Y5xppBFAa0DVdKuDEw=
Subject key identifier: 96:FA:AF:E3:60:20:99:45:10:E3:97:61:59:71:CA:1A:2A:EF:43:F5
Authority key identifier: CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC
Certificate issuer: /CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec
Certificate serial: 019D9F2E65191AE6916015EEBA65D6AA9D31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
Manifest number: 103B
Signing time: Sat 18 Apr 2026 06:01:50 +0000
Manifest this update: Sat 18 Apr 2026 06:01:50 +0000
Manifest next update: Sun 19 Apr 2026 06:01:50 +0000
Files and hashes: 1: WcEXb1FwWuq7CmZIR_j833VQVLg.roa (hash: YwtVclxxnke6RUqR5TUDz5Eu+w+6DwiJjWOIUuWJONU=)
2: bfREzEwR-EXPjAe3wBGoI04LV-k.roa (hash: 769fYTMFcVF5MUU/DGKAsF33sj2AY85ZIEX4Env7vD8=)
3: z173qHDUsUjrHU9P5mbtUFSt6uw.crl (hash: bfu/I+wuhQgn6k/Wr6l4jO1X0zPrileweQa93nfJK2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9f:2e:65:19:1a:e6:91:60:15:ee:ba:65:d6:aa:9d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec
Validity
Not Before: Apr 18 06:01:50 2026 GMT
Not After : Apr 19 06:01:50 2026 GMT
Subject: CN=96faafe36020994510e397615971ca1a2aef43f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d3:a6:31:0a:ce:38:1c:81:8f:b1:a1:08:0b:
8f:45:ee:3b:09:6c:2d:a4:e0:e2:a7:45:63:4b:a7:
c2:22:7e:b9:d2:db:34:c1:0d:3d:56:fa:c3:19:4f:
2d:2d:c4:47:8a:08:90:1f:d0:b5:d7:5e:4d:61:da:
b7:8c:5f:9f:de:24:b1:e0:32:8c:ff:d7:26:60:5e:
88:e2:13:82:d1:0a:22:6e:5a:a9:79:46:c6:e1:5a:
f3:c3:38:c1:3a:43:43:cb:9d:c7:a3:3b:a4:1a:12:
6d:5a:e7:a1:db:c5:3e:60:23:7d:91:77:08:cb:cf:
c4:b7:a4:02:b3:2d:96:3c:6c:4a:43:43:bd:2e:4c:
f9:96:9c:f1:19:f2:3e:8d:0b:fe:17:63:15:db:e3:
4a:1a:62:d1:6b:2a:42:7b:14:d9:4d:c2:de:be:73:
bd:e4:b8:c4:86:3c:5e:d5:72:10:64:b3:9f:d9:03:
a5:bc:82:56:46:18:c6:74:3c:3d:4d:cf:11:2d:17:
1f:7c:d6:1a:1a:9e:ba:06:2e:65:0f:54:ca:63:d6:
e6:5a:ef:69:f1:67:f2:0f:fb:78:b4:54:b7:4b:38:
9c:01:10:e3:12:6e:21:e5:ae:42:16:58:dc:31:54:
1f:f3:ff:f2:10:11:f6:c8:92:e0:63:b4:bc:bd:2b:
cc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FA:AF:E3:60:20:99:45:10:E3:97:61:59:71:CA:1A:2A:EF:43:F5
X509v3 Authority Key Identifier:
keyid:CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:ca:b9:83:93:0d:bb:31:1b:ba:7f:e2:d1:62:48:da:26:45:
54:4d:7c:00:6f:da:b6:1b:4a:b5:c5:8f:5d:1b:f9:2d:64:aa:
d0:4e:7c:cb:af:52:58:72:b7:56:c4:79:d0:ed:3d:24:97:40:
31:78:60:f1:d6:79:f7:b3:42:6e:a5:f9:4f:a1:16:74:49:b9:
29:5a:48:b8:ea:7d:dc:f7:9d:11:c8:99:fd:86:54:e5:c0:b6:
6d:c7:81:8e:ef:39:31:1f:03:d5:a9:3a:70:e0:0e:29:eb:bd:
16:9a:1f:1d:6e:14:fe:fd:28:05:f8:70:6f:94:e6:32:aa:db:
0b:a2:29:e5:54:c2:a9:ba:36:d0:bc:1e:48:40:91:b0:5e:3d:
75:21:42:87:ec:f4:32:31:9d:a5:f5:5c:2e:14:d0:16:33:ce:
40:6d:40:8c:67:4a:e5:a1:aa:02:12:79:31:59:9f:d8:08:c5:
45:60:c9:44:7f:2c:0b:36:17:d2:6d:38:ac:10:59:64:f8:bb:
76:86:ec:32:0f:24:fc:0e:ff:98:ef:22:cf:7c:e0:01:30:81:
98:27:4b:51:7e:21:a8:67:9c:4e:ba:25:e5:41:d1:eb:86:3e:
4a:e2:b1:17:20:5f:17:78:34:b5:b3:9a:d3:4d:5a:25:ec:94:
68:e4:d5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:07:11 2026 by rpki-client