Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
File: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft (raw, json)
Hash identifier: 42mZAFOf/3qj7tvJ/9iAf6LhMdoCjMiGlsWYrFjWtsY=
Subject key identifier: 9F:E5:B2:60:17:4E:45:CA:40:41:41:A9:3E:5E:BD:F4:14:84:88:66
Authority key identifier: 47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
Certificate issuer: /CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Certificate serial: 01A0D34A6EAE95C738711D3982A33E5E3CCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
Manifest number: 0D8F
Signing time: Thu 24 Sep 2026 12:01:05 +0000
Manifest this update: Thu 24 Sep 2026 12:01:05 +0000
Manifest next update: Fri 25 Sep 2026 12:01:05 +0000
Files and hashes: 1: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl (hash: WwE2ijXT6EoPicse2q46LKvPcAktmJF/D2ICBb6FxYM=)
2: XHT_nValr2j6SKOfGPicLhiXyO4.roa (hash: H5XqJ+imumLxCFtabqMwr2EYqfcFyzubhax0NWhApw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:6e:ae:95:c7:38:71:1d:39:82:a3:3e:5e:3c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Validity
Not Before: Sep 24 12:01:05 2026 GMT
Not After : Sep 25 12:01:05 2026 GMT
Subject: CN=9fe5b260174e45ca404141a93e5ebdf414848866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ac:75:1c:b5:0e:aa:c5:f2:1f:dd:69:c0:f9:
aa:c3:b1:21:d7:0d:c8:fc:35:f2:8b:41:99:65:ea:
fb:5d:bc:bd:88:0c:63:53:f3:38:72:c1:7c:be:d7:
f1:59:d5:b6:3a:86:04:a3:9a:a5:5f:56:35:52:32:
22:b7:1c:f9:b5:b1:fe:53:63:a3:ee:25:52:65:6d:
48:11:f3:38:43:01:9b:77:7e:c7:ef:df:38:c5:25:
b3:09:8a:9b:9b:81:6c:67:51:bf:a3:90:1a:02:c4:
1f:5f:cd:74:b2:40:dd:7b:5a:cd:1d:38:86:7a:0b:
9c:97:7a:e3:81:27:20:18:1d:b4:40:de:4f:fd:85:
80:0f:1e:25:54:4a:56:0f:d6:db:2b:a4:67:f9:c2:
6d:78:80:f3:77:44:b1:c1:d7:61:a8:85:c8:36:c4:
f3:c3:ac:67:20:a6:ab:ff:8e:10:c0:88:d9:4b:6c:
43:03:d1:8b:92:a3:79:ad:e5:f0:7a:66:a2:1d:a7:
63:08:d0:02:f7:ea:90:70:63:0d:78:1c:2b:38:37:
4e:78:81:32:84:55:aa:72:9e:61:30:96:29:f1:95:
00:36:8e:ee:ed:d4:a7:8f:40:82:f5:35:56:5b:b2:
be:9b:a3:8a:cc:df:0a:ae:5e:bf:5b:63:e3:39:79:
30:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E5:B2:60:17:4E:45:CA:40:41:41:A9:3E:5E:BD:F4:14:84:88:66
X509v3 Authority Key Identifier:
keyid:47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:67:e5:e7:c8:40:1f:44:f5:67:92:f2:71:2f:06:4c:bc:d3:
f0:aa:0c:ef:40:9d:82:74:41:37:6f:4d:22:8a:f6:ba:c2:10:
9a:eb:c4:46:be:28:e5:5b:28:cd:5e:c5:3b:e6:8f:bc:8a:f7:
a6:e6:96:bb:0e:83:b1:47:d1:67:2a:67:d1:d1:0c:e7:91:b9:
b9:01:47:4c:91:b8:f3:c0:e5:97:79:42:63:7a:f0:a6:8a:6a:
79:58:bd:de:24:c9:62:73:60:cc:e0:1e:59:f9:d8:ca:7a:4b:
7b:58:b0:4d:68:52:42:bf:16:f8:fa:62:df:93:92:cf:1a:5e:
ba:d4:f3:8e:a6:ed:d5:75:9b:56:92:00:69:49:b4:a7:3b:ca:
4c:75:75:d5:cd:63:97:de:fa:83:77:a9:ee:6f:45:45:79:7f:
52:b4:0a:83:04:43:c6:b4:ee:22:29:69:c3:27:0c:55:6d:87:
16:9c:ad:1a:7f:0b:60:da:59:8d:17:b2:35:a1:d9:bb:e7:61:
f1:c3:02:fb:c9:ca:50:26:12:34:68:ca:3f:f7:0b:61:3b:82:
78:1c:dd:ec:32:90:c9:64:7c:be:51:14:28:9f:56:7b:4e:d0:
f9:6d:f7:64:3e:07:bb:8b:51:b4:73:af:64:72:8d:27:82:10:
99:57:29:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:47:28 2026 by rpki-client