Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
File: Rzd55qd8flghMZh2TOKsDmvuYjY.mft (raw, json)
Hash identifier: b5nwTXakI55TBOgXesa2ZGkzeimcniMMs4it7zUlT1M=
Subject key identifier: 22:7A:F4:B3:4C:8E:79:A5:7C:A9:58:EA:8E:73:CE:7A:51:90:26:1B
Authority key identifier: 47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36
Certificate issuer: /CN=473779e6a77c7e58213198764ce2ac0e6bee6236
Certificate serial: 01A0D5DDD138DD02F2CDCE712EAC82BA0FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
Manifest number: 054D
Signing time: Fri 25 Sep 2026 00:01:18 +0000
Manifest this update: Fri 25 Sep 2026 00:01:18 +0000
Manifest next update: Sat 26 Sep 2026 00:01:18 +0000
Files and hashes: 1: 2z-c3MpGdlvNK98wFJ-FhUpQXTk.roa (hash: jD+P5ccWJZqhrEzl8gpwfaAxbm2916uuSP5OIhhxw0M=)
2: Rzd55qd8flghMZh2TOKsDmvuYjY.crl (hash: V+fBU3ucVJagDLyJpDCxtvDbMWNDJTJg+IKQhqsoOgs=)
3: nLrwE_Xuj7FEwaVr2PMMyDOjcsM.roa (hash: CdwJHzzCL/DT7oBvlE4BtdzceymGADOR4McXAN25EBU=)
4: zyBvK059nS2Wwp2gBqWo7Jx-YsI.roa (hash: YgqvlJooFLvwv+N90i8hB60uaCFF3pjZWTtq+9rP5ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:d1:38:dd:02:f2:cd:ce:71:2e:ac:82:ba:0f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473779e6a77c7e58213198764ce2ac0e6bee6236
Validity
Not Before: Sep 25 00:01:18 2026 GMT
Not After : Sep 26 00:01:18 2026 GMT
Subject: CN=227af4b34c8e79a57ca958ea8e73ce7a5190261b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5f:5f:2a:bd:22:f5:17:7e:54:9e:fd:04:37:
28:00:7a:67:90:4b:90:d5:b4:c2:5a:21:64:fe:d0:
a0:c4:fa:10:f5:da:58:15:86:f8:40:61:c8:f6:28:
f0:0b:aa:8f:9e:65:e0:86:78:07:79:c5:2b:9b:7a:
21:dd:94:6a:4f:b0:6c:7c:df:4e:a5:69:5d:36:db:
13:97:30:24:70:2a:dd:a6:28:9e:02:75:4e:33:70:
9d:a7:88:67:2d:02:62:7b:12:f4:03:86:37:36:6f:
9a:3b:dd:26:e2:cf:3b:5a:ba:f8:c8:47:27:df:6b:
f3:03:95:4e:1d:4c:bb:cf:a1:8f:c0:f8:d0:f8:8b:
72:22:7f:7c:a5:36:f8:a9:c8:7c:77:cb:db:fb:b7:
98:ea:ca:b5:0a:cd:e3:35:46:87:0d:79:67:db:44:
bd:24:48:e8:de:76:31:6f:c3:12:a5:af:fe:33:a1:
70:18:38:02:ef:a3:c9:93:bf:e6:e0:92:67:b9:ad:
4d:84:15:f4:82:46:5f:2c:e3:da:13:1a:5c:41:13:
84:34:cd:3b:d2:b7:59:43:f4:ab:21:fa:cd:d8:64:
73:c3:ae:c0:5e:9b:bc:f4:dd:dd:2f:be:6c:8a:26:
f6:66:79:1b:45:d2:79:e1:26:b2:fa:5c:b6:b8:c4:
14:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7A:F4:B3:4C:8E:79:A5:7C:A9:58:EA:8E:73:CE:7A:51:90:26:1B
X509v3 Authority Key Identifier:
keyid:47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:d6:c8:39:4a:39:78:d4:79:9f:b1:8e:d4:61:15:1a:d0:e0:
40:79:02:e2:ab:9e:f6:04:65:81:f9:b9:0c:7e:f9:a6:89:87:
71:b7:e2:48:82:ff:84:e7:f8:3e:96:09:b3:84:0a:e9:9b:2e:
88:71:ac:d3:3b:bf:bb:8d:29:de:7f:7a:89:ad:72:ee:37:2f:
68:77:fe:fe:5f:fe:5b:ed:67:f5:3b:a3:64:64:a7:5a:37:90:
c8:d7:e7:23:66:5c:29:24:5c:3d:af:40:6e:2d:d7:8d:1a:d1:
73:a1:79:79:6b:27:2a:8a:19:f7:be:b2:9c:f7:f3:f5:36:08:
48:38:e0:df:55:a4:c0:05:c0:8f:2c:d6:12:87:8e:49:0a:d4:
c7:e5:91:fe:e9:14:77:14:1e:e9:89:50:d8:01:25:ed:7a:8c:
50:09:55:cd:47:77:18:d0:da:06:6f:df:f7:81:66:78:88:d6:
7b:cf:99:b5:fc:b3:c9:39:d9:06:d3:e6:74:cd:5a:d4:43:d5:
48:ec:ed:66:a4:20:52:23:be:40:ae:11:5f:e0:3f:61:b9:ab:
c7:71:20:3b:dc:12:3b:33:bc:31:47:ce:ac:5f:57:46:6f:ee:
81:b7:da:13:16:80:1f:33:fa:6a:82:37:15:6a:62:32:c2:f8:
9e:13:08:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:45:52 2026 by rpki-client