Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.mft
File: A0BZzz9bz7oJObTF2cPThs7NTOw.mft (raw, json)
Hash identifier: rHLQ7UOy3WzLXZg8jURzJMF6Fb3SL222M10Vhud2oPs=
Subject key identifier: 30:85:E7:32:5B:61:CB:D7:47:FD:83:5F:59:D7:77:14:7D:EF:BC:69
Authority key identifier: 03:40:59:CF:3F:5B:CF:BA:09:39:B4:C5:D9:C3:D3:86:CE:CD:4C:EC
Certificate issuer: /CN=034059cf3f5bcfba0939b4c5d9c3d386cecd4cec
Certificate serial: 01A0DF4F21A704AD134B2B125403ED9666AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0BZzz9bz7oJObTF2cPThs7NTOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.mft
Manifest number: 043F
Signing time: Sat 26 Sep 2026 20:01:40 +0000
Manifest this update: Sat 26 Sep 2026 20:01:40 +0000
Manifest next update: Sun 27 Sep 2026 20:01:40 +0000
Files and hashes: 1: A0BZzz9bz7oJObTF2cPThs7NTOw.crl (hash: n4FVKcekNf/yDtyHxcNl+i7dTnQ+s1LsL4rO70ucYgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0BZzz9bz7oJObTF2cPThs7NTOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:4f:21:a7:04:ad:13:4b:2b:12:54:03:ed:96:66:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034059cf3f5bcfba0939b4c5d9c3d386cecd4cec
Validity
Not Before: Sep 26 20:01:40 2026 GMT
Not After : Sep 27 20:01:40 2026 GMT
Subject: CN=3085e7325b61cbd747fd835f59d777147defbc69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:63:28:cd:64:a4:6f:2f:cf:e8:39:c4:0e:76:
14:ea:97:eb:20:d1:b8:71:4b:3e:ff:62:f8:8a:0c:
17:49:5a:3a:76:0a:5d:5e:da:8e:f0:64:6d:90:cc:
a6:a3:04:d9:b6:56:c5:09:4b:6b:da:37:4f:67:b4:
d4:d5:a9:51:f9:51:4b:22:ea:13:60:d4:80:4a:d2:
71:8c:9c:11:d5:d8:19:6a:6b:40:6f:db:93:28:24:
21:8b:67:ce:74:15:9f:5e:c6:7f:32:2a:8a:cc:12:
32:e0:1a:1a:b8:0b:e7:b4:a2:3a:11:a3:59:85:b2:
57:98:9e:4f:3a:b6:bd:8c:27:4c:4d:bd:e1:59:d9:
da:80:fd:75:c6:6b:70:d8:c7:10:67:4e:be:d3:71:
93:71:d8:ed:fc:c7:34:40:e9:13:0e:03:24:74:c4:
76:5a:7c:9c:64:31:1b:c0:d0:e1:4f:66:8e:7a:f7:
0a:52:54:e6:6b:3d:d9:9d:31:6c:7d:78:f4:6f:69:
1c:1d:07:ec:4b:b1:cf:c6:09:de:35:2f:88:53:af:
4f:6e:99:67:79:3b:03:ed:af:81:c8:11:84:e1:08:
54:57:b6:00:fc:b4:a2:2b:2e:35:89:08:c1:2a:4d:
b5:e8:56:35:1f:ab:c8:20:29:0a:d9:27:bf:52:86:
c4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:85:E7:32:5B:61:CB:D7:47:FD:83:5F:59:D7:77:14:7D:EF:BC:69
X509v3 Authority Key Identifier:
keyid:03:40:59:CF:3F:5B:CF:BA:09:39:B4:C5:D9:C3:D3:86:CE:CD:4C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0BZzz9bz7oJObTF2cPThs7NTOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d3:51:2a:8b:3a:83:01:d8:47:e9:b6:4e:6c:35:3b:0b:d5:
f5:1f:2e:5d:01:e7:c6:8a:b2:4b:b3:8f:8d:22:ec:e1:6e:39:
cd:6f:68:5b:92:43:b1:cd:a1:18:42:c6:39:df:17:c1:1d:5f:
c5:18:d1:e7:53:d3:41:e9:c1:bb:d0:b1:15:06:b8:c0:4a:91:
f9:34:17:7a:68:33:f1:6c:26:bd:fa:94:e5:cb:e3:f9:66:51:
7d:c5:45:f1:d5:10:c9:ce:d5:36:29:74:f5:80:df:19:50:ad:
df:d6:1d:7f:56:8f:55:dc:f5:62:0d:f7:27:b6:98:d9:84:ee:
30:27:e7:d1:52:0e:ca:48:33:7b:a1:05:4c:b7:9e:0e:dd:8b:
32:ab:4a:c4:2b:0e:11:45:e8:32:52:b1:86:05:22:d5:87:fd:
9b:38:98:50:b1:53:bb:2b:0f:53:94:04:c3:63:c2:f8:0f:d9:
2a:b3:30:30:a8:01:c0:62:9f:84:ae:df:7a:16:0f:c2:f7:9b:
d3:b8:1a:97:4e:d2:cc:c8:f3:52:67:4d:88:3d:a9:9b:b5:ef:
33:f9:5c:f6:ed:5b:0b:7a:0d:cd:ca:e6:e0:11:87:57:17:cb:
60:0e:85:b1:38:2f:89:7e:4d:dd:cb:d8:2e:05:70:28:b6:56:
c3:03:49:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDfTyGnBK0TSysSVAPtlmaqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNDA1OWNmM2Y1YmNmYmEwOTM5YjRjNWQ5YzNkMzg2Y2Vj
ZDRjZWMwHhcNMjYwOTI2MjAwMTQwWhcNMjYwOTI3MjAwMTQwWjAzMTEwLwYDVQQD
EygzMDg1ZTczMjViNjFjYmQ3NDdmZDgzNWY1OWQ3NzcxNDdkZWZiYzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2MozWSkby/P6DnEDnYU6pfrING4
cUs+/2L4igwXSVo6dgpdXtqO8GRtkMymowTZtlbFCUtr2jdPZ7TU1alR+VFLIuoT
YNSAStJxjJwR1dgZamtAb9uTKCQhi2fOdBWfXsZ/MiqKzBIy4BoauAvntKI6EaNZ
hbJXmJ5POra9jCdMTb3hWdnagP11xmtw2McQZ06+03GTcdjt/Mc0QOkTDgMkdMR2
WnycZDEbwNDhT2aOevcKUlTmaz3ZnTFsfXj0b2kcHQfsS7HPxgneNS+IU69Pbpln
eTsD7a+ByBGE4QhUV7YA/LSiKy41iQjBKk216FY1H6vIICkK2Se/UobE9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCF5zJbYcvXR/2DX1nXdxR977xpMB8GA1UdIwQY
MBaAFANAWc8/W8+6CTm0xdnD04bOzUzsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTBCWnp6OWJ6N29KT2JURjJjUFRoczdOVE93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jNDUxZjYtODY2YS00MDkxLWFhODgt
ZjBhYmI5NTU4ZDQ1LzEvQTBCWnp6OWJ6N29KT2JURjJjUFRoczdOVE93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9jNDUxZjYtODY2YS00MDkxLWFhODgtZjBhYmI5NTU4ZDQ1
LzEvQTBCWnp6OWJ6N29KT2JURjJjUFRoczdOVE93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9NRKos6
gwHYR+m2Tmw1OwvV9R8uXQHnxoqyS7OPjSLs4W45zW9oW5JDsc2hGELGOd8XwR1f
xRjR51PTQenBu9CxFQa4wEqR+TQXemgz8WwmvfqU5cvj+WZRfcVF8dUQyc7VNil0
9YDfGVCt39Ydf1aPVdz1Yg33J7aY2YTuMCfn0VIOykgze6EFTLeeDt2LMqtKxCsO
EUXoMlKxhgUi1Yf9mziYULFTuysPU5QEw2PC+A/ZKrMwMKgBwGKfhK7fehYPwveb
07gal07SzMjzUmdNiD2pm7XvM/lc9u1bC3oNzcrm4BGHVxfLYA6FsTgviX5N3cvY
LgVwKLZWwwNJ7A==
-----END CERTIFICATE-----
Generated at Sun Sep 27 03:46:16 2026 by rpki-client