Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
File: Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft (raw, json)
Hash identifier: ZlFt0IcrLKFHVQKsq+Zg4O8w/fc37Y7/zuBFiMHjW+k=
Subject key identifier: 87:43:A2:F6:5C:29:CB:6E:40:66:8A:6E:75:90:24:73:C8:A1:8E:A3
Authority key identifier: 4B:3E:59:6A:24:D4:36:50:CB:60:E8:FC:C9:E4:4D:6F:8C:92:9D:35
Certificate issuer: /CN=4b3e596a24d43650cb60e8fcc9e44d6f8c929d35
Certificate serial: 01A0D45E0BABAD6775A5A6B212DD87590B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
Manifest number: 0A97
Signing time: Thu 24 Sep 2026 17:02:07 +0000
Manifest this update: Thu 24 Sep 2026 17:02:07 +0000
Manifest next update: Fri 25 Sep 2026 17:02:07 +0000
Files and hashes: 1: QHXSRTuQ2wXN4fBaqbTGI2do0QM.roa (hash: 6/Lj3vL/L1J4PjbZ1lCMZ4grKgrWI3SnlcnhAkor32k=)
2: Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.crl (hash: wwDz405Fmr66yOtNa86UH8o6bFzEFoZlHgwfrDcd2ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 17:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5e:0b:ab:ad:67:75:a5:a6:b2:12:dd:87:59:0b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3e596a24d43650cb60e8fcc9e44d6f8c929d35
Validity
Not Before: Sep 24 17:02:07 2026 GMT
Not After : Sep 25 17:02:07 2026 GMT
Subject: CN=8743a2f65c29cb6e40668a6e75902473c8a18ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7a:6a:c6:bc:bb:d7:51:8d:2d:25:10:60:af:
9c:2c:8b:18:ba:60:55:f9:4f:af:3a:55:a1:9f:12:
98:60:5b:4c:21:3f:a1:9c:7f:26:1f:63:31:8c:da:
94:6c:83:f3:78:dd:d9:66:d2:ac:5c:ac:6f:8b:cf:
38:08:0c:79:b9:77:84:9a:af:49:5f:a4:af:46:58:
e0:7b:b3:04:14:28:1e:88:3e:14:f4:3f:a2:fd:80:
8d:8d:eb:dc:9c:8f:59:af:d9:46:29:b1:7a:93:79:
6f:67:3c:93:80:3e:e1:cf:7d:38:da:69:95:55:c3:
a5:0d:41:46:db:99:d9:89:d6:1c:56:ca:8f:a2:d2:
4f:0d:7c:bc:51:01:f8:e1:ef:2c:bd:43:10:25:2b:
49:57:56:0a:5f:1f:25:16:6d:db:a9:db:0d:d7:b7:
35:0f:2a:8c:e0:5f:f8:65:7d:ff:2e:71:d1:7a:8a:
1c:19:7f:9d:c1:e3:7f:88:7e:a6:c7:38:7a:aa:7c:
cb:ec:be:2c:68:86:1e:e0:2a:aa:bf:73:7e:48:be:
19:b5:ef:4e:b0:11:ed:13:cf:88:84:ac:57:bf:9e:
b4:ad:7f:1b:94:43:55:68:eb:0a:4d:e5:2c:5d:b3:
a9:47:dd:18:11:52:96:c6:fb:e5:44:f2:02:ce:d0:
47:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:43:A2:F6:5C:29:CB:6E:40:66:8A:6E:75:90:24:73:C8:A1:8E:A3
X509v3 Authority Key Identifier:
keyid:4B:3E:59:6A:24:D4:36:50:CB:60:E8:FC:C9:E4:4D:6F:8C:92:9D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:11:4e:69:b5:f9:ed:85:bd:85:0a:5b:08:d4:4a:cd:91:0d:
d7:e0:ed:c5:2e:09:71:3e:7f:c3:3f:1b:9c:d2:33:11:90:8a:
a2:b2:36:60:79:26:57:cf:9d:92:39:2b:c5:03:dd:93:58:8c:
f6:b7:a7:31:e6:94:d8:74:d7:82:85:b3:07:29:52:3f:50:a9:
ee:26:b8:b4:36:4a:8c:39:d3:0c:54:0b:f9:8c:67:55:34:27:
c1:6f:2c:86:e1:e0:23:ca:6a:93:a0:38:ac:6b:3e:6e:84:75:
7b:cc:00:29:48:44:d4:6c:0c:3d:4d:9d:19:42:27:42:1c:cc:
6f:8c:b4:32:ed:f5:a4:52:bc:ed:6b:73:e7:60:02:09:f8:d5:
ff:51:06:23:2f:c3:22:db:16:f7:e0:69:2c:d8:7d:80:45:95:
35:b6:28:02:93:43:31:6e:37:fd:ca:a7:38:7d:1c:4d:91:ec:
2b:05:45:ff:9b:66:f8:37:22:74:ba:2c:b6:d7:27:61:70:a6:
51:2c:5f:cd:67:0e:16:20:b4:83:cf:f2:1e:a5:d8:f7:0a:79:
70:1e:84:68:5f:eb:e4:4f:65:bd:9a:87:1a:9d:c1:1a:fa:1b:
f7:8b:6c:44:91:cf:42:76:21:8d:73:dd:e6:98:06:ba:f2:13:
68:97:74:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:12:40 2026 by rpki-client