Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
File: Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft (raw, json)
Hash identifier: j9ErKaJpxuE9hoypIecMhUYzcTSSkA+SANxRJTnL13M=
Subject key identifier: E8:1C:F7:1F:E9:2A:F1:5C:C6:2B:04:49:02:30:B5:72:BD:D7:B4:1A
Authority key identifier: 4B:3E:59:6A:24:D4:36:50:CB:60:E8:FC:C9:E4:4D:6F:8C:92:9D:35
Certificate issuer: /CN=4b3e596a24d43650cb60e8fcc9e44d6f8c929d35
Certificate serial: 019F91DAE1D16DC9FD75911B05EF1D6DBA32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
Manifest number: 09F0
Signing time: Fri 24 Jul 2026 02:01:08 +0000
Manifest this update: Fri 24 Jul 2026 02:01:08 +0000
Manifest next update: Sat 25 Jul 2026 02:01:08 +0000
Files and hashes: 1: QHXSRTuQ2wXN4fBaqbTGI2do0QM.roa (hash: 6/Lj3vL/L1J4PjbZ1lCMZ4grKgrWI3SnlcnhAkor32k=)
2: Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.crl (hash: xyZhtiz5FbzNfYyiWEyUjJfGGK6N479vNxhRianHX2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:e1:d1:6d:c9:fd:75:91:1b:05:ef:1d:6d:ba:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3e596a24d43650cb60e8fcc9e44d6f8c929d35
Validity
Not Before: Jul 24 02:01:08 2026 GMT
Not After : Jul 25 02:01:08 2026 GMT
Subject: CN=e81cf71fe92af15cc62b04490230b572bdd7b41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6d:ca:29:3d:92:71:ab:1d:e1:6b:d2:44:fe:
66:a0:b3:56:ec:6f:a0:6d:59:4f:c8:79:01:ef:76:
ef:da:41:3c:e7:02:d1:88:73:3d:86:b7:6c:b2:a3:
9d:a1:e3:57:30:a1:b2:39:45:c6:50:7e:f2:ca:88:
bf:e3:43:5c:f2:6e:44:fa:c4:46:ab:92:68:cf:f2:
60:64:2f:aa:8b:8e:ff:ba:52:17:a3:36:40:d2:79:
ca:3e:a7:af:46:27:ea:f3:7f:89:ee:de:00:61:3d:
69:f0:e1:a4:30:e7:bb:34:c0:95:13:16:d3:32:7e:
ae:cf:2e:75:56:27:63:f1:e5:73:78:a0:4f:15:16:
fa:6b:ef:99:14:89:f8:bb:9f:64:01:69:ba:fd:d1:
dc:e3:2f:e3:e1:1e:0d:68:29:11:45:43:52:15:8b:
29:3c:2e:5a:ff:b7:5d:90:b0:ca:3c:e9:13:91:f8:
cc:fd:74:be:6a:c7:7a:aa:19:bc:d2:91:a7:53:7d:
fb:98:17:41:c6:a8:29:58:ef:6d:df:c1:86:c1:27:
c8:ed:0c:99:d2:ba:49:a0:28:90:17:d9:c3:6e:9e:
5f:60:01:ea:40:75:fa:19:55:25:71:c4:e6:c7:d5:
57:2e:f5:4f:8a:dc:98:5f:21:ab:05:61:72:59:19:
f3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1C:F7:1F:E9:2A:F1:5C:C6:2B:04:49:02:30:B5:72:BD:D7:B4:1A
X509v3 Authority Key Identifier:
keyid:4B:3E:59:6A:24:D4:36:50:CB:60:E8:FC:C9:E4:4D:6F:8C:92:9D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7d:a1:6c:3d:9f:a3:90:af:7a:56:09:be:06:a5:8e:8c:71:
e9:f1:93:3c:c1:10:bf:34:24:29:4b:dd:12:b2:36:c5:da:fc:
24:68:84:2d:ae:aa:94:17:ed:b5:f3:96:95:28:1c:0d:59:8c:
f5:f8:34:d2:ec:38:08:34:67:ed:85:78:7c:42:e1:26:d2:b9:
3a:8c:b5:e5:d4:f9:ed:1f:b3:56:31:a7:6f:c1:30:86:ef:08:
c4:c7:90:c1:39:f9:88:b1:30:47:70:32:0e:44:2f:b0:5d:ab:
2c:4f:45:d5:cf:73:04:09:2d:32:2e:ad:76:61:b4:76:b1:1e:
e4:8e:43:de:69:1b:6e:a4:9d:5b:c4:2b:2b:2a:7f:30:73:4f:
29:9e:e2:6c:5c:9f:ce:25:93:38:ff:55:a4:4d:85:fa:57:72:
d0:25:4d:87:02:10:96:86:c2:fd:d4:4e:ca:31:6f:98:f3:ff:
41:0c:38:c8:95:c0:26:c7:17:5a:aa:f6:36:d4:15:07:8e:92:
d1:3d:93:26:4f:0e:71:a1:e1:c4:5a:96:00:e7:47:09:96:af:
d5:33:75:e1:16:19:95:f2:a0:1b:2d:62:94:ed:a8:9e:e1:02:
05:9e:96:bc:c9:72:13:32:0e:0a:2c:2a:6c:a7:9a:ba:82:54:
95:85:05:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:11:35 2026 by rpki-client