Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
File: RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft (raw, json)
Hash identifier: l7doYin5hvznx+e4KIiM5qMct9lhI/lXuneh9gLYE30=
Subject key identifier: E8:5C:C3:43:20:16:83:1B:89:D0:85:D2:C6:E4:BE:F0:9A:3B:FE:EE
Authority key identifier: 47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
Certificate issuer: /CN=473469a966f4df3cf28171d87c74780fc472f979
Certificate serial: 019D9A06C6A787BA52D211B45183AA55D2C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
Manifest number: 0BCA
Signing time: Fri 17 Apr 2026 06:00:28 +0000
Manifest this update: Fri 17 Apr 2026 06:00:28 +0000
Manifest next update: Sat 18 Apr 2026 06:00:28 +0000
Files and hashes: 1: DNxT4KfUnSN5D5Pb2TXRMl9CQRk.roa (hash: U4JVcc+2nFb5M82ma1QdMgZr3eKXlGDJ6qSOPbU6n2I=)
2: RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl (hash: NLUDND+c8FFt8EZ/G/wTXg5x9IJhIpiFq1Du2C8+tnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:c6:a7:87:ba:52:d2:11:b4:51:83:aa:55:d2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473469a966f4df3cf28171d87c74780fc472f979
Validity
Not Before: Apr 17 06:00:28 2026 GMT
Not After : Apr 18 06:00:28 2026 GMT
Subject: CN=e85cc3432016831b89d085d2c6e4bef09a3bfeee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:e7:09:ef:ea:5f:ca:8a:9f:a4:f2:57:b0:
1e:70:87:ed:7b:0b:b5:ea:16:a0:06:70:91:66:23:
17:52:ca:3a:43:a1:eb:6b:bd:3f:29:f7:b8:ef:ee:
55:63:a3:e2:44:75:12:b8:49:f2:ba:1b:a0:55:da:
40:ac:68:9b:cd:42:bb:9a:45:92:fd:2b:45:27:b0:
71:6f:32:25:80:4a:8c:9b:5e:06:7a:9c:22:bc:1c:
4d:cd:77:95:c7:27:ef:c6:b6:d2:bf:e1:85:fb:6e:
ec:96:c9:f6:83:89:25:00:e0:4e:d0:a4:37:f9:99:
01:4a:e5:de:d6:57:36:cf:57:bb:5c:34:bf:f3:2d:
dc:11:8e:f4:08:06:a1:28:25:a4:28:bd:f7:b4:bd:
5e:c3:0a:54:e6:ae:de:40:3b:ee:33:fe:8d:f9:b0:
d9:63:31:af:dd:f8:c3:af:fb:ab:e4:13:50:8f:f1:
fd:e3:45:a8:92:e9:2d:a1:3c:86:d4:c7:b6:68:43:
34:c8:4c:c1:86:57:81:60:44:8c:b0:02:e4:54:17:
13:e5:42:90:11:7b:f8:f9:d2:09:58:59:11:c6:7e:
ac:7c:de:fc:87:c6:fa:41:b1:81:c5:f8:5f:bd:e8:
b0:ca:34:44:a6:55:5f:0a:57:ce:4a:43:56:78:4b:
3d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5C:C3:43:20:16:83:1B:89:D0:85:D2:C6:E4:BE:F0:9A:3B:FE:EE
X509v3 Authority Key Identifier:
keyid:47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e7:e4:9f:79:57:5f:9e:bb:65:ba:56:89:f4:ca:1f:25:a4:
14:b7:31:de:bf:27:0f:d1:cb:12:56:e1:04:a2:48:22:53:55:
68:2e:5f:30:af:34:51:3e:c0:00:ac:f4:62:b8:92:78:59:aa:
1c:eb:f0:22:87:3c:c0:af:e4:67:89:8d:a0:d7:eb:98:07:12:
77:b8:26:7c:fb:51:1c:88:da:78:56:8d:94:8e:20:9a:db:60:
43:d5:00:23:e7:2c:6a:9d:99:6f:1d:05:c2:1e:37:77:b9:df:
31:5b:a7:25:48:c5:f6:1f:95:d1:09:c9:11:4b:10:cb:63:29:
00:29:b5:57:17:12:a5:b5:c6:fc:c4:2d:c6:fe:76:88:ed:29:
44:77:a2:e2:14:3c:bc:4f:5c:7e:be:74:48:73:55:dc:84:18:
3d:26:da:8f:1b:c7:ce:c5:3d:c5:72:78:a7:8e:ad:b9:b9:94:
47:1b:9e:05:a2:37:bb:1e:0a:7f:24:3c:e3:76:44:b8:21:45:
51:ef:c5:55:1b:21:f3:8d:90:39:74:53:42:7a:9a:b9:3f:18:
e8:c1:36:41:e5:7f:1f:d9:44:27:8a:05:3f:8d:b9:66:52:91:
e5:fe:63:9c:46:72:e4:d3:53:91:ae:31:9e:c8:d4:9f:a4:a8:
4d:5a:15:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:19:12 2026 by rpki-client