Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/RSZB2gYiVWdTFRKsDAqVqRnUPK0.mft
File: RSZB2gYiVWdTFRKsDAqVqRnUPK0.mft (raw, json)
Hash identifier: X33l4XvwZJyslFhdIyQJI98h1wZXGMGN+fUh13MxsQg=
Subject key identifier: 2E:65:A9:26:FB:8E:72:B5:3E:97:4F:69:8F:55:EA:58:60:38:A0:AE
Authority key identifier: 45:26:41:DA:06:22:55:67:53:15:12:AC:0C:0A:95:A9:19:D4:3C:AD
Certificate issuer: /CN=452641da06225567531512ac0c0a95a919d43cad
Certificate serial: 01A0E92DB1A9B1E34758794AF5C6DAD86F60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSZB2gYiVWdTFRKsDAqVqRnUPK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/RSZB2gYiVWdTFRKsDAqVqRnUPK0.mft
Manifest number: F2
Signing time: Mon 28 Sep 2026 18:01:20 +0000
Manifest this update: Mon 28 Sep 2026 18:01:20 +0000
Manifest next update: Tue 29 Sep 2026 18:01:20 +0000
Files and hashes: 1: RSZB2gYiVWdTFRKsDAqVqRnUPK0.crl (hash: eHEZFxQ4a5Q7YNDu7rwZ8DcpjCotLkQuaaAPR+CUMtE=)
2: eSxvcfqhLX0QyWs8_CCqm1LfHP8.roa (hash: TUmMKY/LqdBmgi+dt4eIZs1daoacVJWVFics7KjldoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/RSZB2gYiVWdTFRKsDAqVqRnUPK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/RSZB2gYiVWdTFRKsDAqVqRnUPK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSZB2gYiVWdTFRKsDAqVqRnUPK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 18:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2d:b1:a9:b1:e3:47:58:79:4a:f5:c6:da:d8:6f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452641da06225567531512ac0c0a95a919d43cad
Validity
Not Before: Sep 28 18:01:20 2026 GMT
Not After : Sep 29 18:01:20 2026 GMT
Subject: CN=2e65a926fb8e72b53e974f698f55ea586038a0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a3:d2:eb:fb:b6:22:59:a4:4e:f3:4b:6c:60:
5b:e4:9c:f6:7a:f9:89:30:2c:9d:a2:d6:f5:32:e8:
c2:4a:3e:a7:67:d8:99:69:2b:b6:1f:30:32:9a:e7:
60:ba:ed:57:fb:01:67:ed:2b:3a:ad:4a:92:64:64:
53:ba:fa:97:5e:86:0d:54:52:eb:7e:91:21:fd:05:
c0:f9:63:5f:c5:f9:59:db:c3:ec:3c:9e:46:87:a9:
b0:0f:1d:2a:a9:71:39:d4:5d:cd:60:b7:95:06:e4:
8a:36:09:09:ed:f6:da:04:a9:80:9a:70:e2:92:2c:
e0:01:7a:3c:61:ae:d5:a1:15:19:89:5a:b7:f5:15:
c3:7b:c4:f8:bf:bd:54:ba:79:7c:15:8a:5a:9a:1c:
65:c1:b7:ec:4a:1a:d9:36:5b:f4:38:61:4e:a9:ca:
fe:56:60:b2:9d:6b:d3:af:87:08:e8:6b:5a:01:b4:
6c:36:b7:cf:f2:1c:4d:b8:1a:83:a9:9f:11:ee:80:
a6:dc:4b:13:b3:b1:d1:f4:d6:31:55:a3:b2:2f:f3:
95:75:7e:7d:d3:44:cb:b5:a5:0a:eb:29:34:79:6c:
2f:07:ab:59:56:66:09:55:a1:66:c7:42:2b:07:c1:
5c:84:df:7d:c8:8a:62:33:0a:de:aa:5f:b9:96:3d:
53:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:65:A9:26:FB:8E:72:B5:3E:97:4F:69:8F:55:EA:58:60:38:A0:AE
X509v3 Authority Key Identifier:
keyid:45:26:41:DA:06:22:55:67:53:15:12:AC:0C:0A:95:A9:19:D4:3C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSZB2gYiVWdTFRKsDAqVqRnUPK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/RSZB2gYiVWdTFRKsDAqVqRnUPK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/RSZB2gYiVWdTFRKsDAqVqRnUPK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:95:1a:83:a7:51:b9:27:43:77:d9:e9:37:f7:9c:1c:1a:52:
93:0b:ab:9e:2b:30:16:c0:0f:62:31:92:0e:0f:4b:10:2f:e7:
06:67:4b:2b:46:ea:e0:1b:7d:b3:fa:02:cb:37:a3:3b:1c:04:
e5:69:08:ea:cc:f6:1e:08:c1:3a:34:bc:10:5c:26:ce:55:c1:
53:32:bc:cc:ac:d8:f2:99:4a:1c:83:1f:d3:6f:5c:06:c2:6c:
dd:2b:06:ae:37:38:14:5c:3f:f6:22:4d:8b:18:47:a6:66:91:
4c:16:e1:89:b9:14:ea:e0:c0:eb:23:17:55:94:bc:4e:39:bc:
d4:a1:c6:bd:c3:50:e5:43:63:65:01:7a:a8:c5:07:e8:9e:ff:
70:d3:42:79:94:9f:54:c4:e8:e1:e7:56:2e:67:f9:b2:bc:29:
d6:e9:84:4c:11:9e:e8:62:02:4a:c8:1b:58:1e:c9:00:f7:66:
5e:b8:65:0a:6e:18:46:4c:48:b0:46:a3:14:d2:e0:01:27:2f:
a7:13:bc:a5:7c:b9:e1:16:7b:75:f2:42:db:99:2f:b0:28:8a:
72:4c:e6:d8:db:4d:db:b3:e6:f2:a9:21:53:52:5f:29:ff:30:
68:1e:3e:d6:72:a4:31:84:20:b7:ce:5c:92:2b:f7:70:7e:a1:
82:de:14:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:05:58 2026 by rpki-client