Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
File: RzC917vMVv6TebEYysfh-SBSp64.mft (raw, json)
Hash identifier: y/WnAd3MlvD2o/hCNZkQO2CfeRD+uXwGgDSmNj/5pCc=
Subject key identifier: 6F:FF:2C:7D:58:A6:F5:52:AA:42:1F:7C:9E:08:1A:6E:5D:00:66:DF
Authority key identifier: 47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE
Certificate issuer: /CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae
Certificate serial: 019DA41C7570BBE316823F8AAC7F326C4935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
Manifest number: 0685
Signing time: Sun 19 Apr 2026 05:00:21 +0000
Manifest this update: Sun 19 Apr 2026 05:00:21 +0000
Manifest next update: Mon 20 Apr 2026 05:00:21 +0000
Files and hashes: 1: O2TJIvTx_voT0YHcBveB5ME3HxU.roa (hash: iQiLUq3IFvglKvs6Hy5MwuxHRRp9rkkjwK4qxW0zxvg=)
2: RzC917vMVv6TebEYysfh-SBSp64.crl (hash: GAMmrTvdpr6el8qoi3MYYYuaD/Lu+rG7flfn1MPPv0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:75:70:bb:e3:16:82:3f:8a:ac:7f:32:6c:49:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae
Validity
Not Before: Apr 19 05:00:21 2026 GMT
Not After : Apr 20 05:00:21 2026 GMT
Subject: CN=6fff2c7d58a6f552aa421f7c9e081a6e5d0066df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d3:6d:ea:43:45:c8:2f:0b:e4:f8:0b:fa:3b:
f2:89:ec:50:c0:69:e6:b7:d7:ac:d0:58:e0:ab:61:
be:6c:34:e8:92:39:90:fd:24:3a:35:92:ca:64:55:
b3:97:27:e3:00:4e:a0:77:f3:90:ed:27:4c:e1:63:
31:34:7b:a5:2c:2a:6b:c9:80:ec:42:eb:ca:32:13:
0f:e3:ff:1a:f9:48:6f:ec:8a:bb:ab:cc:90:04:d6:
e1:2d:b6:fd:a5:87:07:e5:58:ae:51:af:39:19:b2:
22:3d:95:0f:8b:88:65:53:29:36:b2:ab:bc:f1:a6:
78:05:48:14:58:fb:89:41:06:16:43:69:43:78:a1:
67:23:2b:52:cd:e8:78:a8:b3:87:ff:89:f6:da:6f:
51:9b:48:a4:95:3e:aa:6b:bb:0c:10:9c:98:23:50:
22:c2:fb:8b:b3:8d:ae:27:b4:7f:76:6e:86:d1:97:
15:a3:17:5d:e9:b9:97:1f:57:8d:68:97:0d:67:70:
73:3a:15:22:e5:d3:2f:34:64:4c:77:af:e6:1d:37:
b9:80:fd:7a:91:1b:06:a1:e9:e9:69:08:03:33:9d:
4e:79:ea:3f:79:09:87:71:07:b5:13:94:ed:a6:85:
ac:4c:f7:24:68:90:40:c7:98:a2:ab:a1:87:6d:4d:
a1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FF:2C:7D:58:A6:F5:52:AA:42:1F:7C:9E:08:1A:6E:5D:00:66:DF
X509v3 Authority Key Identifier:
keyid:47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ae:23:4e:c4:7c:38:35:cd:27:8a:be:48:c6:11:97:12:59:
c2:d1:6d:ef:eb:42:4f:0a:66:c4:a6:b1:0e:15:0d:ce:ea:dd:
a5:ff:dc:4c:5a:e5:05:a2:f3:8c:8f:bd:e0:b5:11:e2:40:e0:
f3:3f:15:86:63:30:2b:b4:d0:13:75:53:82:8e:73:66:01:b6:
37:9c:71:a3:f8:be:90:b6:eb:9e:39:eb:2d:6c:87:db:02:c7:
01:10:ae:58:84:9b:ef:f0:c6:38:c5:08:c7:ee:5e:a8:ec:49:
56:d3:e0:c2:ce:0f:d7:19:52:ed:d0:f2:92:f3:48:24:c3:a4:
58:45:0b:35:7a:75:15:79:93:3a:3b:61:ef:08:fa:98:be:59:
09:cc:f7:38:0e:6e:af:1b:19:14:6f:16:00:66:2b:b8:08:5a:
50:ba:7d:7f:84:d4:62:2f:ee:ad:be:ef:61:d2:36:ac:8c:25:
cb:d1:bc:8a:8b:f8:08:04:64:aa:b4:cd:19:e5:f8:b8:50:ee:
1a:ed:f8:f7:6b:65:93:c9:59:17:13:86:7c:c9:8d:ce:4e:f1:
90:d9:2e:2a:33:c1:a8:14:1f:44:8f:70:be:5e:14:ce:69:f3:
bd:19:bc:59:69:3a:69:a7:e9:a0:17:d6:bb:99:26:96:3e:64:
4c:f6:0f:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kHHVwu+MWgj+KrH8ybEk1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MzBiZGQ3YmJjYzU2ZmU5Mzc5YjExOGNhYzdlMWY5MjA1
MmE3YWUwHhcNMjYwNDE5MDUwMDIxWhcNMjYwNDIwMDUwMDIxWjAzMTEwLwYDVQQD
Eyg2ZmZmMmM3ZDU4YTZmNTUyYWE0MjFmN2M5ZTA4MWE2ZTVkMDA2NmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NNt6kNFyC8L5PgL+jvyiexQwGnm
t9es0Fjgq2G+bDTokjmQ/SQ6NZLKZFWzlyfjAE6gd/OQ7SdM4WMxNHulLCpryYDs
QuvKMhMP4/8a+Uhv7Iq7q8yQBNbhLbb9pYcH5ViuUa85GbIiPZUPi4hlUyk2squ8
8aZ4BUgUWPuJQQYWQ2lDeKFnIytSzeh4qLOH/4n22m9Rm0iklT6qa7sMEJyYI1Ai
wvuLs42uJ7R/dm6G0ZcVoxdd6bmXH1eNaJcNZ3BzOhUi5dMvNGRMd6/mHTe5gP16
kRsGoenpaQgDM51Oeeo/eQmHcQe1E5TtpoWsTPckaJBAx5iiq6GHbU2hQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG//LH1YpvVSqkIffJ4IGm5dAGbfMB8GA1UdIwQY
MBaAFEcwvde7zFb+k3mxGMrH4fkgUqeuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnpDOTE3dk1WdjZUZWJFWXlzZmgtU0JTcDY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mZjljZjYtYzY5MC00YzQ0LTlmNjMt
ZGIxYjYzYTBhOGMxLzEvUnpDOTE3dk1WdjZUZWJFWXlzZmgtU0JTcDY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9mZjljZjYtYzY5MC00YzQ0LTlmNjMtZGIxYjYzYTBhOGMx
LzEvUnpDOTE3dk1WdjZUZWJFWXlzZmgtU0JTcDY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARq4jTsR8
ODXNJ4q+SMYRlxJZwtFt7+tCTwpmxKaxDhUNzurdpf/cTFrlBaLzjI+94LUR4kDg
8z8VhmMwK7TQE3VTgo5zZgG2N5xxo/i+kLbrnjnrLWyH2wLHARCuWISb7/DGOMUI
x+5eqOxJVtPgws4P1xlS7dDykvNIJMOkWEULNXp1FXmTOjth7wj6mL5ZCcz3OA5u
rxsZFG8WAGYruAhaULp9f4TUYi/urb7vYdI2rIwly9G8iov4CARkqrTNGeX4uFDu
Gu3492tlk8lZFxOGfMmNzk7xkNkuKjPBqBQfRI9wvl4UzmnzvRm8WWk6aafpoBfW
u5kmlj5kTPYP6A==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:51 2026 by rpki-client