Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
File: RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft (raw, json)
Hash identifier: W9B0rw0iN3kGuzYt6lWaeE9jLPZc62KqRcG0dDVMIss=
Subject key identifier: AE:2E:77:69:58:A0:7E:C4:C8:DB:24:40:3A:C6:29:C2:CB:13:00:71
Authority key identifier: 47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
Certificate issuer: /CN=473469a966f4df3cf28171d87c74780fc472f979
Certificate serial: 019FAB2CAAD5F842900E01F2EDFE74036FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
Manifest number: 0CDC
Signing time: Wed 29 Jul 2026 00:00:58 +0000
Manifest this update: Wed 29 Jul 2026 00:00:58 +0000
Manifest next update: Thu 30 Jul 2026 00:00:58 +0000
Files and hashes: 1: DNxT4KfUnSN5D5Pb2TXRMl9CQRk.roa (hash: U4JVcc+2nFb5M82ma1QdMgZr3eKXlGDJ6qSOPbU6n2I=)
2: RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl (hash: SEIRGJv3g8I4ZZHj8dVctO2e7mrc3GPzBM419/XKshw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:aa:d5:f8:42:90:0e:01:f2:ed:fe:74:03:6f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473469a966f4df3cf28171d87c74780fc472f979
Validity
Not Before: Jul 29 00:00:58 2026 GMT
Not After : Jul 30 00:00:58 2026 GMT
Subject: CN=ae2e776958a07ec4c8db24403ac629c2cb130071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c7:18:54:30:75:30:a5:79:7e:76:97:19:66:
9b:26:68:4b:1f:11:45:88:87:ad:88:61:60:ec:31:
6a:35:ab:a8:c8:31:e7:5b:59:2f:a6:71:49:a7:2f:
33:e3:94:a5:00:25:f5:7d:ef:2e:9a:90:ad:69:6d:
1b:e4:e1:a7:c0:1e:42:70:6f:01:d4:71:1b:b9:91:
07:c7:92:4d:4e:91:59:ca:ab:f6:ae:e3:b4:c5:69:
67:25:89:f5:c7:16:80:8e:f7:d7:64:e3:75:ad:20:
d3:5a:c4:ad:a9:88:15:48:5e:3d:80:7d:fb:e1:0d:
df:84:9f:16:06:d5:8b:92:98:ed:53:3f:a2:bf:13:
d9:04:5e:68:29:5a:9a:b9:6f:fd:66:71:2e:3f:e0:
e5:94:d4:fc:59:ad:55:64:f3:c4:d8:de:1e:3e:00:
5a:0d:28:1e:40:d8:85:06:f4:69:d7:75:f9:9a:e9:
b6:0c:af:cf:98:5a:cb:56:33:34:7e:7f:3c:f3:61:
02:95:48:97:bd:1f:a2:5f:5c:ea:75:72:07:21:ef:
d3:8b:88:ef:82:6b:c4:b2:54:f9:53:d9:bd:93:af:
8c:0e:05:fe:4c:eb:ce:43:11:81:23:b4:79:e2:31:
92:64:d2:96:c8:0e:c6:c7:c8:82:01:52:ad:41:40:
3a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2E:77:69:58:A0:7E:C4:C8:DB:24:40:3A:C6:29:C2:CB:13:00:71
X509v3 Authority Key Identifier:
keyid:47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:43:1e:7a:74:b0:cf:ab:63:5b:b8:e6:1e:9e:23:57:da:9a:
61:74:e3:39:96:97:da:60:45:ad:a6:03:97:79:c5:ad:32:b5:
a4:8a:53:4e:8a:c2:4c:fd:e0:4c:10:57:a3:9c:62:78:fe:c1:
eb:48:55:eb:0c:d1:c4:c5:70:ed:64:0a:58:1d:bc:5a:56:78:
a1:51:14:3b:b4:6e:ee:a5:0b:d2:4b:56:2b:aa:f1:42:75:bb:
53:98:f9:14:3b:15:11:5d:52:a1:02:e2:d9:7f:07:27:54:ca:
46:bd:83:79:36:b1:5d:32:51:1f:03:78:6b:fc:1f:2c:d9:dc:
82:da:4d:61:2e:01:99:85:b8:35:bd:08:c5:c3:4a:ae:b5:2f:
98:59:ce:69:89:85:64:74:29:15:33:2b:34:0c:2f:01:57:31:
a7:61:1b:a1:20:00:96:32:ab:46:ab:f5:da:80:53:70:6e:d3:
b7:04:ab:1f:30:85:6e:89:ac:c5:ee:84:06:9f:61:91:7a:33:
9c:4b:ea:be:19:0f:b5:8c:a6:3c:8c:0d:0b:80:6e:de:94:e3:
d7:0c:ac:90:a5:c4:2f:aa:51:ad:a8:5b:62:ca:88:e7:c5:77:
d6:99:7d:29:9e:8c:d4:23:0e:5d:93:05:9b:40:db:86:2c:e1:
c6:54:3e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:13:47 2026 by rpki-client