Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
File: Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft (raw, json)
Hash identifier: KMLaUmTO3hOf0jPSlJHVyhd+parEJE88zTDkEeQi6Uw=
Subject key identifier: A4:28:8C:B3:E4:65:A8:EE:8D:55:E8:4B:1D:EC:80:48:D9:EC:EE:63
Authority key identifier: 4B:3E:59:6A:24:D4:36:50:CB:60:E8:FC:C9:E4:4D:6F:8C:92:9D:35
Certificate issuer: /CN=4b3e596a24d43650cb60e8fcc9e44d6f8c929d35
Certificate serial: 019EC1488105E2EC0208EEC6B1A1689A25FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
Manifest number: 0984
Signing time: Sat 13 Jun 2026 14:00:14 +0000
Manifest this update: Sat 13 Jun 2026 14:00:14 +0000
Manifest next update: Sun 14 Jun 2026 14:00:14 +0000
Files and hashes: 1: QHXSRTuQ2wXN4fBaqbTGI2do0QM.roa (hash: 6/Lj3vL/L1J4PjbZ1lCMZ4grKgrWI3SnlcnhAkor32k=)
2: Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.crl (hash: aNCDWc1I8ste6dNw3Kvb+1dvEp6FHR5AERf7mffqVOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:81:05:e2:ec:02:08:ee:c6:b1:a1:68:9a:25:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3e596a24d43650cb60e8fcc9e44d6f8c929d35
Validity
Not Before: Jun 13 14:00:14 2026 GMT
Not After : Jun 14 14:00:14 2026 GMT
Subject: CN=a4288cb3e465a8ee8d55e84b1dec8048d9ecee63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:70:02:88:a6:ac:d4:03:4c:4b:00:ac:2c:5a:
38:7d:32:55:2e:f0:d3:7f:5c:d6:e7:fe:5b:31:b7:
a5:fb:f9:24:8c:61:19:5f:97:0d:9b:a6:70:28:f6:
fb:e5:fd:cf:5a:36:12:0d:9c:3c:ed:3d:e2:61:2e:
ba:ec:35:8f:a0:e1:30:54:23:4a:3c:c9:19:2a:2d:
4c:f7:98:2a:a6:c2:e6:d4:cd:34:26:7a:47:66:90:
3e:86:09:58:76:93:d6:cf:b8:27:7e:62:08:94:f4:
ba:c0:6a:ed:ce:2a:86:6d:01:b1:e1:e0:49:06:51:
db:cf:75:cd:b5:46:4b:69:cd:f3:1f:7c:7b:0d:70:
e0:e9:1f:10:fb:e7:0f:fc:13:95:8e:2a:0e:6a:76:
d0:7b:a7:d1:89:ae:52:da:6d:83:46:01:50:9c:3d:
67:52:26:bd:34:2c:c2:96:58:ae:b5:c5:c3:6d:41:
cc:04:76:dd:4b:d7:23:07:df:54:38:68:73:a2:3f:
94:78:63:b0:75:48:ec:e1:a1:11:8f:06:fc:41:a4:
ce:d3:e0:f3:18:e2:0f:51:fe:cc:2e:59:44:61:b5:
c0:44:da:48:af:fc:f0:09:e7:fb:a2:13:b5:a5:a3:
4c:00:39:c3:be:f2:ec:23:04:2f:f4:b7:e3:39:27:
fd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:28:8C:B3:E4:65:A8:EE:8D:55:E8:4B:1D:EC:80:48:D9:EC:EE:63
X509v3 Authority Key Identifier:
keyid:4B:3E:59:6A:24:D4:36:50:CB:60:E8:FC:C9:E4:4D:6F:8C:92:9D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2d:c6:d4:b7:27:d9:4d:14:d0:f9:26:2a:89:13:29:e5:8e:
ca:aa:39:f9:96:76:77:2a:f8:b5:6e:a6:e8:08:03:b9:fb:b2:
d4:57:de:e5:33:2f:ea:62:bc:ca:dc:87:19:50:8a:64:a0:27:
fb:51:51:63:2e:33:25:9d:fd:5a:1d:28:6a:4e:69:71:d0:e4:
98:61:23:61:30:b6:d9:14:d3:f6:0c:4e:f0:11:9e:88:86:3e:
a3:15:1e:c9:ed:a2:4c:83:b4:18:28:63:1f:5b:a0:67:41:85:
f6:92:d1:61:67:06:dc:27:65:c7:90:cb:ba:a5:6a:71:54:6e:
c0:a2:cb:25:0b:87:c9:bf:34:8a:02:cd:53:a3:fb:5f:cc:da:
7b:f7:61:07:79:2f:c0:f4:94:01:c7:ec:1d:36:c6:c0:0a:4a:
9f:c0:e4:f9:c4:a0:37:64:99:a9:45:27:6a:dd:72:ea:37:c1:
be:11:87:6b:8f:e7:89:dd:0c:a1:f0:57:a3:4f:1d:83:6d:98:
70:07:b6:3b:dc:e8:16:19:82:93:f5:e8:f1:e3:a7:b7:4b:0b:
15:1d:1b:37:54:e9:ce:73:2b:76:bd:92:81:c8:c9:4f:a3:e1:
77:78:b3:aa:2a:d0:a2:85:98:40:87:da:fe:f8:b6:65:f6:78:
ec:0f:67:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:55:22 2026 by rpki-client