Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/RSZB2gYiVWdTFRKsDAqVqRnUPK0.mft
File: RSZB2gYiVWdTFRKsDAqVqRnUPK0.mft (raw, json)
Hash identifier: kFdZUwkux2phQ5fSLPbR4z+FGD5c/hQ3/g2iob2/G80=
Subject key identifier: 69:E2:AD:89:02:F6:6B:90:E7:EB:64:E4:CC:C7:1C:B1:C7:BE:23:10
Authority key identifier: 45:26:41:DA:06:22:55:67:53:15:12:AC:0C:0A:95:A9:19:D4:3C:AD
Certificate issuer: /CN=452641da06225567531512ac0c0a95a919d43cad
Certificate serial: 01A10248F75D559862051BC839D4EFF8473E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSZB2gYiVWdTFRKsDAqVqRnUPK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/RSZB2gYiVWdTFRKsDAqVqRnUPK0.mft
Manifest number: FF
Signing time: Sat 03 Oct 2026 15:01:38 +0000
Manifest this update: Sat 03 Oct 2026 15:01:38 +0000
Manifest next update: Sun 04 Oct 2026 15:01:38 +0000
Files and hashes: 1: RSZB2gYiVWdTFRKsDAqVqRnUPK0.crl (hash: 75KfNLiDSfM6iu/QKhJuA98MDXR5gLzBuwNMMhtGn38=)
2: eSxvcfqhLX0QyWs8_CCqm1LfHP8.roa (hash: TUmMKY/LqdBmgi+dt4eIZs1daoacVJWVFics7KjldoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/RSZB2gYiVWdTFRKsDAqVqRnUPK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/RSZB2gYiVWdTFRKsDAqVqRnUPK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSZB2gYiVWdTFRKsDAqVqRnUPK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:48:f7:5d:55:98:62:05:1b:c8:39:d4:ef:f8:47:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452641da06225567531512ac0c0a95a919d43cad
Validity
Not Before: Oct 3 15:01:38 2026 GMT
Not After : Oct 4 15:01:38 2026 GMT
Subject: CN=69e2ad8902f66b90e7eb64e4ccc71cb1c7be2310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4e:2a:73:fd:a5:3f:87:17:11:6b:72:02:5d:
99:89:0a:97:c9:ff:af:bb:85:f9:47:e7:58:70:28:
5c:ad:1e:4b:14:9b:b8:36:ee:de:94:5f:62:f9:ce:
e8:3a:e6:70:ab:b7:1b:a0:00:86:1b:7d:9f:58:b4:
be:32:25:ff:eb:04:60:bd:a9:55:c9:51:c9:5b:d0:
d7:ef:ae:2b:62:15:1b:90:6e:3c:d2:fc:56:24:5d:
76:10:16:ad:65:ee:72:e1:80:d4:b6:87:ec:a7:a5:
a0:08:ff:14:40:8b:e6:34:7e:8b:89:93:c8:d0:60:
b7:58:70:b0:91:47:f8:a9:74:b9:4c:2d:ed:e0:8f:
b7:a2:b4:16:3b:52:de:d1:32:55:17:3b:36:44:bd:
ac:fd:8b:0f:c6:7a:24:bc:f9:1a:c3:f5:f1:85:7b:
7b:56:8e:c7:f1:eb:ce:4e:b8:41:e0:f5:f5:03:27:
07:ec:27:52:6c:99:70:d6:be:6a:fe:91:11:c4:68:
11:63:4c:92:9c:fc:89:54:62:9e:73:a9:05:6c:20:
f5:93:dd:e7:9c:b6:a9:a0:da:97:75:ac:d7:44:37:
65:79:83:05:f5:b0:d5:b5:d5:e7:61:10:9c:69:77:
05:c6:d1:83:26:5b:4d:dc:e4:2c:8b:20:df:03:bf:
63:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E2:AD:89:02:F6:6B:90:E7:EB:64:E4:CC:C7:1C:B1:C7:BE:23:10
X509v3 Authority Key Identifier:
keyid:45:26:41:DA:06:22:55:67:53:15:12:AC:0C:0A:95:A9:19:D4:3C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSZB2gYiVWdTFRKsDAqVqRnUPK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/RSZB2gYiVWdTFRKsDAqVqRnUPK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/RSZB2gYiVWdTFRKsDAqVqRnUPK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e7:96:ca:f3:a3:a0:3e:6d:37:66:f4:59:dd:2d:d7:2b:f5:
66:fa:d5:ed:be:ae:35:98:6d:ec:5a:5f:8f:39:87:b6:0e:c9:
12:06:a4:6f:aa:ef:62:e8:6b:3a:56:b7:a1:0f:0c:50:41:f4:
27:1b:07:8a:c9:fe:30:d0:80:a5:f9:19:11:aa:2f:4c:69:3b:
4c:cc:45:c4:04:59:dd:8a:1a:10:45:f8:21:74:aa:05:58:b1:
fa:25:ab:80:52:30:cd:7c:a6:43:10:62:d2:e7:8c:56:70:f7:
1c:b4:17:1c:3e:1d:2c:20:41:fd:20:a6:fd:72:c5:8f:72:23:
45:73:13:60:a8:0e:7f:59:22:d0:8f:ea:e2:24:e0:46:0b:c5:
9d:c4:9a:c5:62:9b:56:48:eb:73:24:b1:7c:1a:82:f9:04:7d:
75:d4:ff:04:9b:45:f9:62:2b:d4:ca:01:32:ed:8d:e8:d6:d7:
dc:93:07:41:a1:fd:fc:7e:6b:20:b1:3f:af:50:de:59:94:07:
1e:dc:0f:05:fb:70:0c:3f:c6:76:b1:25:58:90:87:4d:0a:17:
4c:e6:3b:06:fa:ee:77:05:53:65:9e:82:9c:1f:7f:6c:0d:06:
e8:dd:8e:b3:9b:f2:bf:4f:00:6e:61:e8:33:01:ff:cd:57:76:
46:03:0b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 22:37:16 2026 by rpki-client