Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/RSZB2gYiVWdTFRKsDAqVqRnUPK0.mft
File: RSZB2gYiVWdTFRKsDAqVqRnUPK0.mft (raw, json)
Hash identifier: cr5AkBhHaQrmy+ASID/hDam1YOeohv7xHftI6p1Za7k=
Subject key identifier: AB:E5:5D:FE:6D:C6:28:58:0E:A0:88:04:24:CA:F4:9B:FB:E3:AD:FF
Authority key identifier: 45:26:41:DA:06:22:55:67:53:15:12:AC:0C:0A:95:A9:19:D4:3C:AD
Certificate issuer: /CN=452641da06225567531512ac0c0a95a919d43cad
Certificate serial: 019F9549C3B270AFD7C74AB4961B6F8FFCF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSZB2gYiVWdTFRKsDAqVqRnUPK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/RSZB2gYiVWdTFRKsDAqVqRnUPK0.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:01:07 +0000
Manifest this update: Fri 24 Jul 2026 18:01:07 +0000
Manifest next update: Sat 25 Jul 2026 18:01:07 +0000
Files and hashes: 1: RSZB2gYiVWdTFRKsDAqVqRnUPK0.crl (hash: GAQKT0j/PqnFDP1LCIOp/Xp1rFq5zXzFA3ymBGPmSqk=)
2: eSxvcfqhLX0QyWs8_CCqm1LfHP8.roa (hash: TUmMKY/LqdBmgi+dt4eIZs1daoacVJWVFics7KjldoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/RSZB2gYiVWdTFRKsDAqVqRnUPK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/RSZB2gYiVWdTFRKsDAqVqRnUPK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSZB2gYiVWdTFRKsDAqVqRnUPK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:c3:b2:70:af:d7:c7:4a:b4:96:1b:6f:8f:fc:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452641da06225567531512ac0c0a95a919d43cad
Validity
Not Before: Jul 24 18:01:07 2026 GMT
Not After : Jul 25 18:01:07 2026 GMT
Subject: CN=abe55dfe6dc628580ea0880424caf49bfbe3adff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4d:fd:c6:55:a8:8f:2f:66:75:c8:8d:64:a6:
41:cc:48:00:fb:02:6c:70:dc:29:9b:3a:55:df:b7:
2c:b8:9f:35:82:4e:5a:31:66:f1:b3:de:45:85:e2:
43:85:3c:75:73:e1:63:45:f8:7a:1d:c3:ea:74:98:
9d:41:fc:55:c7:45:6b:33:de:19:90:0f:45:2f:8d:
59:e5:25:bd:74:c2:a6:a7:78:43:66:8e:c2:ce:0b:
01:f2:31:bc:e9:fa:12:13:92:98:e3:30:d5:ae:56:
c4:04:07:cd:e4:81:35:cc:f0:9f:4e:16:b6:8f:3f:
d1:68:2a:80:64:46:04:de:ec:dc:70:d6:d7:14:ff:
2c:fb:58:a4:05:13:36:d2:fc:c1:12:96:4e:ff:92:
92:6b:21:29:0f:f6:ed:9e:eb:f5:f7:45:b0:af:79:
1e:e8:ee:00:31:27:4d:2d:35:e7:2d:56:74:9d:74:
64:c6:21:2e:e3:13:9e:df:01:5a:6d:19:fd:89:8a:
00:0b:49:c5:7c:c6:ed:97:a6:59:f2:0b:3e:8b:28:
36:80:1c:76:d8:65:cf:52:22:74:49:0f:47:20:b9:
bb:2b:46:b4:b5:53:a7:90:d8:8d:39:dc:8f:3f:80:
14:7a:a1:03:9a:70:9a:2f:62:68:ea:e0:4a:77:0a:
7c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E5:5D:FE:6D:C6:28:58:0E:A0:88:04:24:CA:F4:9B:FB:E3:AD:FF
X509v3 Authority Key Identifier:
keyid:45:26:41:DA:06:22:55:67:53:15:12:AC:0C:0A:95:A9:19:D4:3C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSZB2gYiVWdTFRKsDAqVqRnUPK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/RSZB2gYiVWdTFRKsDAqVqRnUPK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/RSZB2gYiVWdTFRKsDAqVqRnUPK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:6a:30:44:3f:e7:b6:44:59:4c:2a:ba:bb:92:59:96:ed:a3:
a0:40:f7:54:72:9f:87:88:20:bc:ec:6b:fe:d9:65:7e:a1:4c:
2e:14:db:03:ab:d5:9b:af:08:d7:cd:e4:b4:f8:7a:b3:07:e6:
45:ba:f6:b2:0f:d4:6c:97:ff:2e:92:58:69:eb:7c:ba:ed:82:
cd:b5:30:e8:a7:c7:c8:da:a0:84:1c:97:40:21:1e:15:f2:fe:
84:47:fc:6f:10:7e:4e:9e:11:3c:d5:a4:98:3e:c5:d9:f8:25:
f4:02:fb:4d:d9:51:ac:82:df:3c:a3:24:11:54:8c:16:0b:9c:
f4:3a:0b:c3:6c:7f:aa:dc:9c:48:82:02:9a:c5:9e:d3:23:bc:
04:9b:00:1f:bf:c9:bf:b3:f6:bc:d2:45:fb:92:d8:40:04:81:
6d:ee:1e:bf:0b:66:2f:4a:e7:34:ae:05:48:c7:27:1d:dd:5f:
7c:73:6f:fb:f5:d2:c3:7a:79:98:a7:c5:a5:5a:a5:c0:8e:02:
b0:50:58:75:5f:c5:56:a8:b2:5f:fc:09:79:62:af:5b:d1:4d:
b5:8c:58:06:b6:02:ff:a4:30:33:5d:55:92:68:4b:08:57:71:
23:a1:49:44:22:3c:21:f6:bb:cb:29:ed:d7:fc:ff:8a:64:5e:
9e:13:ff:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:43:38 2026 by rpki-client