Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
File: rrwz1bpYUjTMzvilethsoer8SqI.mft (raw, json)
Hash identifier: An7X+fmKrPviprctkHntbe/Qe5cB9Z/MMzyeYjGR4g4=
Subject key identifier: 78:3A:AF:B0:29:16:B5:25:BF:FD:53:84:BA:F2:DF:FA:4F:9C:7D:82
Authority key identifier: AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
Certificate issuer: /CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Certificate serial: 01A0F0797475EA958BB8BB4620B9A16E6E2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
Manifest number: 0A28
Signing time: Wed 30 Sep 2026 04:01:26 +0000
Manifest this update: Wed 30 Sep 2026 04:01:26 +0000
Manifest next update: Thu 01 Oct 2026 04:01:26 +0000
Files and hashes: 1: E907k5QYJtLiwC_jK3iFvXI9RdI.roa (hash: snQqBx0r+DlkIlsrsM46ddsGDow3XlKtABIHB2rzqdc=)
2: rrwz1bpYUjTMzvilethsoer8SqI.crl (hash: fDy+pMYRM+jfsxTkrP3yiH5MhabPj47Sr8rpEHAxFns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:79:74:75:ea:95:8b:b8:bb:46:20:b9:a1:6e:6e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Validity
Not Before: Sep 30 04:01:26 2026 GMT
Not After : Oct 1 04:01:26 2026 GMT
Subject: CN=783aafb02916b525bffd5384baf2dffa4f9c7d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3c:8d:b5:c7:08:65:fc:a7:b3:87:1f:b9:d8:
61:44:1f:5f:d9:d6:7d:09:30:7b:06:c8:4d:0f:f6:
1a:38:56:f8:eb:32:36:33:a5:73:a7:01:c5:de:52:
76:39:82:38:84:36:0e:af:96:ca:ef:c2:ef:70:41:
67:bf:bf:5a:bc:df:e3:16:56:1e:43:eb:85:18:dd:
cf:57:e1:3b:1b:a1:ae:cb:42:2b:6b:b7:76:84:89:
17:a0:8c:56:d9:1e:ed:90:c9:e0:84:9e:4a:05:c7:
99:9a:cb:a3:7a:cd:43:13:ec:7b:51:a0:06:0a:1b:
d2:b4:58:6a:be:b7:db:bd:6e:35:68:8f:24:23:d6:
bf:8b:88:05:c5:8d:4c:f3:58:02:e9:12:6e:46:3d:
56:40:01:a5:88:55:06:b0:56:08:d1:14:c7:31:86:
ac:34:27:7b:cb:1f:87:1b:f2:6f:b5:73:69:42:db:
46:77:cc:7b:29:ea:2c:8d:ab:2c:75:ad:c9:74:67:
8a:ae:b3:a3:98:20:41:f5:6b:a2:64:d2:d6:b1:aa:
8e:ca:7c:86:79:81:d7:f1:47:4a:63:9e:32:1b:3f:
17:a4:10:2e:40:37:7b:e8:34:d3:cf:c6:ef:7e:75:
0d:0c:3d:45:05:22:bf:78:0b:28:36:a6:a8:f8:ab:
c2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3A:AF:B0:29:16:B5:25:BF:FD:53:84:BA:F2:DF:FA:4F:9C:7D:82
X509v3 Authority Key Identifier:
keyid:AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:db:58:45:0a:4c:61:89:22:90:f1:20:0c:ef:05:e1:33:e5:
92:14:cb:5c:b9:f7:93:1e:23:79:a6:5b:75:23:f9:6d:37:f5:
94:29:ed:7d:42:9b:b7:47:a7:1a:68:3d:c7:b0:30:3f:bd:7d:
68:a7:96:ed:2e:59:0a:6b:62:1b:7b:54:d9:07:a6:39:75:42:
ec:a7:14:58:a4:3a:53:25:d1:91:22:6e:43:33:49:27:b1:49:
f1:70:7c:21:0d:ed:f2:b0:a5:c6:8e:44:d2:59:11:6c:cf:66:
d1:0e:b4:4e:6a:56:57:ee:cf:fd:8c:4b:52:48:ca:d0:fd:0d:
ee:c9:dc:cf:a2:8c:cb:62:50:cd:23:65:00:70:ce:ba:e3:a9:
0d:8a:17:8f:ee:d4:ef:98:54:f5:4f:ef:56:82:99:77:0e:28:
a6:20:a1:bd:d8:04:55:4c:51:25:4d:f9:83:d8:1c:35:f6:e7:
98:e1:95:f7:55:ae:9c:2b:a5:7c:5b:b8:c4:9b:5a:5f:4e:07:
5f:96:59:ad:d5:71:d4:52:17:88:17:77:b8:38:c5:e8:a6:c9:
8f:4f:aa:b3:30:d5:6a:12:4b:cf:7d:99:0e:60:da:d0:25:f0:
e8:e9:c0:d0:d1:d5:c2:e5:5d:46:af:e9:17:b7:92:fd:48:50:
3c:f6:15:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 17:19:12 2026 by rpki-client