Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
File: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft (raw, json)
Hash identifier: +YRs/bD9VIMNEA/yb03YunX4w7+Yh5s4uriAyhFuIdQ=
Subject key identifier: 4D:B9:7E:C0:F5:2A:13:B7:0B:1A:55:5F:04:7B:F1:39:32:E8:59:85
Authority key identifier: AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
Certificate issuer: /CN=af3adce3664bf0e7f688ff4122551734c4d14756
Certificate serial: 01A0D8DF0101B895E4341135D0C774BF8396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
Manifest number: 04A6
Signing time: Fri 25 Sep 2026 14:01:28 +0000
Manifest this update: Fri 25 Sep 2026 14:01:28 +0000
Manifest next update: Sat 26 Sep 2026 14:01:28 +0000
Files and hashes: 1: hJZnvXC0-UgTlF_AH76uiPfGV7c.asa (hash: p2cFMytFL5OC6zEHyn7h+6EUDN+jaMNyN9xu55GAgrQ=)
2: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl (hash: 8iZxkP7HF10/ETV6jIlSvxidRnc/BgGAstghZ3yx/ak=)
3: ymjEj-AVl-jhoYqun7KK_jww1EY.roa (hash: Lravz6mXezUcFlH14r837C4PlhGpAXXPBKh9Ost0iM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:df:01:01:b8:95:e4:34:11:35:d0:c7:74:bf:83:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3adce3664bf0e7f688ff4122551734c4d14756
Validity
Not Before: Sep 25 14:01:28 2026 GMT
Not After : Sep 26 14:01:28 2026 GMT
Subject: CN=4db97ec0f52a13b70b1a555f047bf13932e85985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8d:25:70:ca:31:a6:bb:9d:af:23:73:f0:c2:
bd:18:60:4d:fb:f6:0d:5a:09:d8:dd:06:eb:6b:53:
da:85:d2:bd:36:9f:bc:ee:e4:c7:8c:2d:31:f6:69:
8c:b8:80:3c:a7:7b:53:63:68:43:9f:91:13:8e:7e:
3f:f1:98:12:9a:fd:0e:18:18:a7:f0:b6:4b:52:8e:
ce:0f:c3:a8:f0:da:7b:8d:12:ff:a5:55:9d:0c:1a:
90:21:29:0d:db:e5:07:80:5e:4d:45:f3:33:13:21:
ae:ec:21:ae:68:07:bb:c4:0a:2c:47:40:ec:ef:90:
5f:e7:7b:2a:7a:e7:fe:da:24:6b:6c:7f:48:2e:ef:
51:04:66:07:c6:80:f5:aa:24:28:72:fd:51:4a:45:
1a:4c:e2:80:82:c4:22:b8:64:58:c5:f5:df:e0:82:
59:00:00:e9:7d:43:8b:9a:92:bd:d3:9c:6b:44:f7:
bf:1f:1d:96:96:0d:3d:60:c3:b2:0f:61:64:ea:e0:
fe:5f:80:1e:e2:55:23:d1:9f:d1:b4:1c:11:1d:33:
12:2c:70:5b:79:90:6c:19:95:ab:ad:f8:2a:6c:40:
cb:07:02:51:53:98:15:4f:9c:a2:24:ed:af:73:4b:
ef:15:ea:27:2e:2c:c3:b6:72:c3:cd:54:89:3f:2c:
7a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B9:7E:C0:F5:2A:13:B7:0B:1A:55:5F:04:7B:F1:39:32:E8:59:85
X509v3 Authority Key Identifier:
keyid:AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:1c:86:3e:51:46:1e:e5:08:50:13:41:62:37:af:df:39:0f:
17:aa:bd:8b:6d:7b:a5:47:da:0a:0b:72:14:ac:75:07:11:17:
d7:8b:3e:60:35:70:0d:2c:ee:79:63:7c:af:46:dc:48:36:c5:
9b:4f:88:5b:a8:1b:b3:91:5c:20:f8:20:5c:d1:24:76:bf:18:
73:24:03:65:72:14:9b:a7:f0:20:83:02:1f:cd:96:20:2d:43:
dc:40:38:29:49:c5:c1:60:ab:9f:5e:e5:6e:70:a2:40:fb:50:
07:b2:bb:ed:52:e4:95:b9:b2:79:1b:67:a3:b5:b0:c9:ba:b2:
cf:80:34:1a:56:fe:d4:9e:dd:e7:46:df:a8:dd:8d:68:ed:2b:
66:9a:3a:fb:38:2b:3e:36:83:2e:9b:b4:dc:a3:d9:b1:c9:1e:
1c:11:72:4d:a2:39:7b:ab:c1:3f:18:1d:e4:f6:cf:72:47:f3:
15:86:64:4b:1f:b4:2b:69:e1:9d:b1:24:d8:0f:30:9c:fb:de:
4d:41:9b:25:1c:3f:da:f5:a8:1c:47:39:57:b6:38:07:41:fb:
df:98:0c:00:99:b2:d6:8c:d0:cf:34:1c:89:06:3a:97:3b:8c:
ef:f4:90:80:d4:64:d0:9d:1b:7c:79:35:5f:df:23:aa:00:7a:
cb:e9:50:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:20:31 2026 by rpki-client