Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
File: RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft (raw, json)
Hash identifier: 1fBgQf3qyhlbnpTXrd26LxMZLna2ZlH7fT09CAaft7Y=
Subject key identifier: 2D:7F:94:C1:DF:99:BD:19:2F:AF:D1:70:36:56:B8:71:EA:BC:85:8C
Authority key identifier: 47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE
Certificate issuer: /CN=4735e807d349d31564f9fd546138e3598e2007ce
Certificate serial: 01A128B174F8BD01DF186EFAF0BF485CFA39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
Manifest number: 13AC
Signing time: Sun 11 Oct 2026 02:01:20 +0000
Manifest this update: Sun 11 Oct 2026 02:01:20 +0000
Manifest next update: Mon 12 Oct 2026 02:01:20 +0000
Files and hashes: 1: RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl (hash: 8GsVGAM4wLXjrLX6uAapK8EXAksyd2u+hP18FjFG3Gg=)
2: xYQhbQyfXrOfvdiJkCemh8CpZ2k.roa (hash: 3F6vLCFxR75VhJCktR9LybENxtIsB4rpv9WYC6tqfNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 02:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:b1:74:f8:bd:01:df:18:6e:fa:f0:bf:48:5c:fa:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4735e807d349d31564f9fd546138e3598e2007ce
Validity
Not Before: Oct 11 02:01:20 2026 GMT
Not After : Oct 12 02:01:20 2026 GMT
Subject: CN=2d7f94c1df99bd192fafd1703656b871eabc858c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ad:0c:96:a0:dd:97:5f:04:d8:51:a9:d0:d5:
9d:c2:6e:0c:42:21:78:6d:7b:bf:b7:80:44:36:44:
55:1a:33:31:be:da:0e:95:84:02:e1:ca:8b:2e:b1:
f6:e1:ee:28:74:8b:94:02:de:9d:5e:d5:4d:dc:a7:
37:91:09:8b:75:3e:00:a4:02:4f:ed:56:22:af:c5:
5f:bd:0c:15:1e:9b:e6:cf:21:94:98:91:0f:bd:41:
0f:54:87:17:42:ef:76:de:d1:8f:46:e8:d2:53:c9:
13:a9:a7:40:51:b7:57:fe:95:75:18:40:ac:ed:cd:
ce:5a:fb:60:f4:ee:75:fe:b7:d5:26:d0:ba:80:a1:
7d:4e:29:1b:09:62:6f:54:e8:15:28:fc:70:be:b6:
c2:69:de:1d:4b:93:57:b0:0a:1a:13:1b:46:19:96:
7c:ed:d5:2f:70:4f:fc:5c:cd:8d:44:06:06:2b:9a:
6c:d8:24:b4:c6:3a:4a:fd:83:82:0f:c4:a6:d1:2e:
1a:99:22:ee:d3:f2:bf:d4:3e:fe:66:bd:f5:fd:b5:
c2:48:58:41:aa:ff:59:66:01:95:65:53:d6:35:8b:
40:0f:ab:8e:6f:28:14:fb:c7:ad:fc:e1:35:26:43:
75:46:5b:b9:fb:93:b1:9d:80:5d:1d:53:82:68:f3:
5d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7F:94:C1:DF:99:BD:19:2F:AF:D1:70:36:56:B8:71:EA:BC:85:8C
X509v3 Authority Key Identifier:
keyid:47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:84:c9:b4:f6:ae:0d:1a:1e:3e:50:47:93:81:a2:04:b5:bc:
df:4a:be:ee:e2:83:9b:ed:02:95:af:91:61:ab:16:6d:45:df:
06:a0:83:c0:a4:18:68:ec:d2:24:89:d8:79:76:68:a4:51:93:
77:a2:f2:9b:4b:6b:23:6b:e3:ef:32:87:d5:ec:19:0a:38:e5:
ad:2d:c2:45:0c:0a:67:87:19:37:37:99:96:11:d0:6d:74:1f:
b2:e7:16:66:ad:ea:dd:15:7a:8e:68:bc:07:83:0b:39:5f:58:
d3:39:f9:6e:e4:35:63:76:4c:16:ab:1b:43:74:43:c8:c7:2c:
27:cf:94:2b:0d:71:b1:d1:04:16:38:64:52:d6:ca:2e:2d:73:
44:60:aa:b3:2d:a3:32:92:53:fc:06:9a:f7:63:fb:cf:59:92:
9e:1e:e1:5f:df:50:04:90:89:d5:9c:cc:36:70:27:2e:33:81:
52:3b:33:a6:a7:a7:08:6b:c5:6e:67:52:5f:9f:29:0e:f2:4c:
d3:20:56:52:d1:32:5d:e0:f8:98:c4:84:f6:8c:c2:eb:65:08:
35:44:cb:ca:ee:74:23:94:92:7a:35:6a:4c:13:20:49:a1:d1:
06:e2:0d:37:58:fa:9a:83:6e:41:82:21:44:58:a8:8c:cd:34:
93:02:32:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:46:22 2026 by rpki-client