Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
File: RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft (raw, json)
Hash identifier: m2kb8R/wZejH0aE9NALtcG2WU6EDnoAiaIUuUZdidfc=
Subject key identifier: 40:12:97:4C:B3:D4:84:15:56:7D:0B:EC:1F:B1:74:AA:65:B7:02:76
Authority key identifier: 47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
Certificate issuer: /CN=473163527e83542dce693b16d0aedcd126d3319a
Certificate serial: 01A0E3D0E8613C424CE9FE371B0D69F0E7CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
Manifest number: 1A77
Signing time: Sun 27 Sep 2026 17:01:53 +0000
Manifest this update: Sun 27 Sep 2026 17:01:53 +0000
Manifest next update: Mon 28 Sep 2026 17:01:53 +0000
Files and hashes: 1: RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl (hash: MU/2kIL5xchxcX6uXnM/j8L/2v5zENllZNWtck081wA=)
2: pFkI7meix8Wvnh8I7pdS5zO5VAs.roa (hash: IiBaDlI4V6mbfD8AaxYpOFH+8BQ1zVQO5KQlE9ThC6Y=)
3: wIc-Rh6w6YDK1W-UeGedBj1DHzA.roa (hash: AHq1ZvIykr30MtwSSGLXsUeCsh/Ryu5hRBrmdW7qIMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:d0:e8:61:3c:42:4c:e9:fe:37:1b:0d:69:f0:e7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473163527e83542dce693b16d0aedcd126d3319a
Validity
Not Before: Sep 27 17:01:53 2026 GMT
Not After : Sep 28 17:01:53 2026 GMT
Subject: CN=4012974cb3d48415567d0bec1fb174aa65b70276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cc:74:9d:36:aa:15:5f:5e:ed:d3:b4:be:0d:
e3:8b:bf:2c:94:e0:9d:cc:d1:c4:ac:31:86:46:4b:
e2:42:34:9f:ad:d3:10:fd:bf:9e:76:94:de:0f:ea:
61:50:d6:46:26:53:7a:53:1c:5d:1e:f7:30:1e:fa:
10:ae:9b:74:72:b0:b3:16:1a:bc:7a:d1:bf:1a:d0:
7a:96:33:3e:56:93:51:35:44:a4:c9:8e:57:32:4d:
d7:21:83:54:e4:0c:dc:62:16:57:c2:14:01:9a:d5:
52:6d:0f:e8:e3:54:d0:5f:29:28:ec:6a:46:4b:9f:
64:5a:c6:7a:85:d3:9a:42:54:02:93:0a:01:18:47:
88:f6:5e:a3:b3:ea:0a:1b:2f:d2:3a:52:c7:8b:c2:
8a:50:5e:0b:d1:23:7c:d2:c7:e5:8a:32:e7:0b:b7:
bc:08:b8:1d:3e:bb:0e:55:65:b7:6c:d0:42:ca:2f:
36:d9:9e:13:22:8b:a3:fb:c7:09:c4:1f:ad:0a:22:
7a:f9:7a:8e:89:9b:c2:e5:96:18:0c:d2:34:86:24:
e1:37:0c:bf:c4:8d:a8:f1:61:b7:e8:63:a8:70:c6:
0d:43:83:b8:dc:7c:fd:4e:30:7d:10:f3:e6:f0:ea:
f6:ba:84:0a:d7:00:23:09:b8:49:1f:95:fb:d7:ce:
a5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:12:97:4C:B3:D4:84:15:56:7D:0B:EC:1F:B1:74:AA:65:B7:02:76
X509v3 Authority Key Identifier:
keyid:47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:1b:7a:a0:74:cf:d3:a7:be:b4:cc:5c:b1:24:df:50:df:c4:
50:7b:65:a5:92:b7:24:23:05:10:fe:80:a7:88:9b:8f:cc:1a:
5c:2f:be:da:52:06:d7:c5:97:33:6c:c4:ad:74:db:50:86:42:
07:1a:5c:a3:18:57:85:2a:37:ba:9f:2f:de:2f:cc:ca:ad:e1:
24:26:9d:67:c8:1f:71:85:eb:2d:21:0f:86:9e:c3:a2:a7:88:
3e:e4:c4:2b:b3:61:4d:fc:76:78:2e:b9:23:27:79:95:2b:32:
fa:66:df:c6:e5:96:09:41:f4:71:b8:2c:24:31:33:16:0a:66:
59:0c:92:6e:77:3a:8a:ea:c6:0b:b0:83:3f:fb:28:cb:31:4f:
35:84:b2:e8:41:4c:7c:13:40:4a:fe:21:30:6e:e0:93:b3:c2:
22:71:79:10:d3:5a:5d:90:77:c7:ed:c8:21:5f:94:ce:f8:0f:
ae:a2:fb:e0:2b:2d:7f:86:a3:68:13:6d:2e:61:3a:61:e6:90:
01:11:15:5a:7f:ed:75:f4:92:3c:15:59:de:35:fe:cd:f8:bb:
57:b8:25:7e:8d:7f:18:0c:ed:f6:82:fd:0d:b7:e9:7f:20:ae:
c3:80:7e:d2:3d:62:16:bb:3b:7a:59:ac:82:de:cc:b1:b2:0d:
d4:9d:3c:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDj0OhhPEJM6f43Gw1p8OfPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MzE2MzUyN2U4MzU0MmRjZTY5M2IxNmQwYWVkY2QxMjZk
MzMxOWEwHhcNMjYwOTI3MTcwMTUzWhcNMjYwOTI4MTcwMTUzWjAzMTEwLwYDVQQD
Eyg0MDEyOTc0Y2IzZDQ4NDE1NTY3ZDBiZWMxZmIxNzRhYTY1YjcwMjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsx0nTaqFV9e7dO0vg3ji78slOCd
zNHErDGGRkviQjSfrdMQ/b+edpTeD+phUNZGJlN6UxxdHvcwHvoQrpt0crCzFhq8
etG/GtB6ljM+VpNRNUSkyY5XMk3XIYNU5AzcYhZXwhQBmtVSbQ/o41TQXyko7GpG
S59kWsZ6hdOaQlQCkwoBGEeI9l6js+oKGy/SOlLHi8KKUF4L0SN80sflijLnC7e8
CLgdPrsOVWW3bNBCyi822Z4TIouj+8cJxB+tCiJ6+XqOiZvC5ZYYDNI0hiThNwy/
xI2o8WG36GOocMYNQ4O43Hz9TjB9EPPm8Or2uoQK1wAjCbhJH5X7186lowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEASl0yz1IQVVn0L7B+xdKpltwJ2MB8GA1UdIwQY
MBaAFEcxY1J+g1Qtzmk7FtCu3NEm0zGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnpGalVuNkRWQzNPYVRzVzBLN2MwU2JUTVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hYjIzODktOGQzNi00M2ZlLWFmNDIt
OWEzODQxOTY3MTgxLzEvUnpGalVuNkRWQzNPYVRzVzBLN2MwU2JUTVpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9hYjIzODktOGQzNi00M2ZlLWFmNDItOWEzODQxOTY3MTgx
LzEvUnpGalVuNkRWQzNPYVRzVzBLN2MwU2JUTVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASBt6oHTP
06e+tMxcsSTfUN/EUHtlpZK3JCMFEP6Ap4ibj8waXC++2lIG18WXM2zErXTbUIZC
BxpcoxhXhSo3up8v3i/Myq3hJCadZ8gfcYXrLSEPhp7DoqeIPuTEK7NhTfx2eC65
Iyd5lSsy+mbfxuWWCUH0cbgsJDEzFgpmWQySbnc6iurGC7CDP/soyzFPNYSy6EFM
fBNASv4hMG7gk7PCInF5ENNaXZB3x+3IIV+UzvgPrqL74Cstf4ajaBNtLmE6YeaQ
AREVWn/tdfSSPBVZ3jX+zfi7V7glfo1/GAzt9oL9DbfpfyCuw4B+0j1iFrs7elms
gt7MsbIN1J08tA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 01:08:16 2026 by rpki-client