Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
File: RZR46fHzCyT9FxmNHKyDW8Hk368.mft (raw, json)
Hash identifier: EYvjZERYI6k/yWQqGiFEyPFM1Mz+tSI3HJDTzRgcJPw=
Subject key identifier: 85:7A:C2:1A:A6:F7:80:A4:63:F0:AC:56:81:1D:79:C3:6A:12:DE:AB
Authority key identifier: 45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
Certificate issuer: /CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Certificate serial: 01A0E9D2B7B871848A2456970CC5CAC1F7CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
Manifest number: 0B18
Signing time: Mon 28 Sep 2026 21:01:35 +0000
Manifest this update: Mon 28 Sep 2026 21:01:35 +0000
Manifest next update: Tue 29 Sep 2026 21:01:35 +0000
Files and hashes: 1: 7QM2KeQ3Wn7b2DM_DaBA8kJny-8.roa (hash: 62/MDcXDz4G8cxXxwlkwD2glafSnz5PZXVYHbOFIM38=)
2: RZR46fHzCyT9FxmNHKyDW8Hk368.crl (hash: Q+FOvGZmcUDStc+kUh0Qb1355O+JjziI4PZdQTm/CIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:d2:b7:b8:71:84:8a:24:56:97:0c:c5:ca:c1:f7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Validity
Not Before: Sep 28 21:01:35 2026 GMT
Not After : Sep 29 21:01:35 2026 GMT
Subject: CN=857ac21aa6f780a463f0ac56811d79c36a12deab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0f:c7:67:9d:36:c2:2e:ea:ca:31:6b:ea:c5:
4f:21:f6:81:1b:34:bf:17:8c:ea:8a:91:4e:aa:17:
79:67:8a:06:7c:af:63:7a:2c:58:f5:26:c3:fb:ed:
2d:4b:d1:37:86:ce:d0:ad:c7:4d:bb:09:58:4c:43:
a9:df:48:a9:3c:35:56:94:90:14:f6:97:31:88:61:
c9:ad:8e:b1:c6:38:a7:32:9c:d6:8d:96:c3:59:7e:
78:5b:32:4d:ba:28:08:2f:5b:75:dc:13:84:55:17:
d6:d9:69:16:70:d8:18:b4:7b:78:e3:28:5b:23:42:
7a:9e:52:27:c7:45:51:43:bd:34:47:df:45:64:37:
30:45:77:32:38:42:bc:d4:9a:eb:2e:12:fd:b1:b4:
25:0e:fd:1e:22:17:e7:3b:4b:e2:50:9d:7d:54:fb:
5d:a1:9f:9a:f8:7f:8b:2c:f9:b2:76:d2:d4:ab:ae:
72:0d:d4:c6:61:56:fc:f5:fd:a4:5b:78:87:74:0c:
e6:61:be:cc:28:c3:fe:57:34:bb:3c:69:4e:b8:2c:
7b:5f:3c:55:f4:15:a2:e9:56:e9:1c:4f:c1:85:21:
e6:0a:8a:d1:c2:d4:f0:e5:c7:7f:37:e9:9c:1e:8b:
f4:58:db:29:ec:37:66:eb:1c:25:10:c4:16:07:c2:
25:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7A:C2:1A:A6:F7:80:A4:63:F0:AC:56:81:1D:79:C3:6A:12:DE:AB
X509v3 Authority Key Identifier:
keyid:45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:32:f9:4b:c8:e6:51:12:7f:e8:dc:b3:a3:14:89:95:1b:cc:
f7:34:2d:4a:93:7e:89:26:e3:5c:6f:9f:60:8d:81:ce:f4:90:
cc:65:d8:0f:61:15:db:ab:8c:dc:f6:cf:74:23:31:52:72:26:
08:98:19:0c:c3:00:93:6d:66:c2:79:61:27:d2:e2:41:36:84:
69:b7:4e:ff:70:b1:66:c1:e8:e4:cd:2d:63:3f:51:0b:52:31:
4a:58:e5:c8:59:1c:c2:86:a0:40:59:d3:d0:74:92:50:a8:d1:
cc:59:ee:6f:f5:29:6d:3e:f8:20:fc:18:1d:92:0c:4f:e5:cb:
22:cc:e1:11:ee:f1:74:63:85:5d:c4:32:1c:d3:db:7c:b5:c9:
09:20:1f:3d:62:24:5a:53:c1:2e:db:ec:06:7c:22:f8:32:96:
71:9e:bf:6c:6f:54:7d:0b:a4:dd:e5:e6:02:5a:28:89:ad:2f:
18:63:84:48:4e:a7:cc:a9:26:4f:3f:e9:d3:a0:24:14:1f:21:
85:6d:db:ae:81:77:25:32:55:87:bd:ff:6b:61:b3:4f:0d:04:
2e:e5:31:0a:ff:97:6b:84:0c:e4:4b:89:a9:db:14:59:92:a6:
80:b1:91:82:31:06:c8:9a:0c:4a:d3:8f:cc:fb:f0:37:0e:1c:
67:20:d5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:01:05 2026 by rpki-client