Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
File: Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft (raw, json)
Hash identifier: WqFtl/ExT8kYt80oS9c4Iec2VaYi+pip7wGiOrBUQ4w=
Subject key identifier: 25:68:90:F1:63:3C:23:57:C3:67:DF:A7:18:9D:C9:22:FE:09:49:86
Authority key identifier: 4B:3E:59:6A:24:D4:36:50:CB:60:E8:FC:C9:E4:4D:6F:8C:92:9D:35
Certificate issuer: /CN=4b3e596a24d43650cb60e8fcc9e44d6f8c929d35
Certificate serial: 019FAAF58E79A4B8E5CE8B347580726D703B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
Manifest number: 09FD
Signing time: Tue 28 Jul 2026 23:00:47 +0000
Manifest this update: Tue 28 Jul 2026 23:00:47 +0000
Manifest next update: Wed 29 Jul 2026 23:00:47 +0000
Files and hashes: 1: QHXSRTuQ2wXN4fBaqbTGI2do0QM.roa (hash: 6/Lj3vL/L1J4PjbZ1lCMZ4grKgrWI3SnlcnhAkor32k=)
2: Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.crl (hash: VF/W7EpA8PO1JX7FB4fbE589iLI8X2CKAxdB2myYVP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:8e:79:a4:b8:e5:ce:8b:34:75:80:72:6d:70:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3e596a24d43650cb60e8fcc9e44d6f8c929d35
Validity
Not Before: Jul 28 23:00:47 2026 GMT
Not After : Jul 29 23:00:47 2026 GMT
Subject: CN=256890f1633c2357c367dfa7189dc922fe094986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c3:14:09:0a:53:b8:ef:80:59:02:e8:e8:82:
97:e5:9b:57:50:0f:59:1a:af:8a:39:ee:68:03:5a:
5c:a1:69:71:20:af:6e:11:ec:a8:39:c8:5f:1f:6d:
c9:02:a0:ac:e0:b0:91:6a:f5:8b:99:03:a0:93:69:
86:05:33:68:5a:b5:39:21:b5:fb:4f:4b:7b:fa:5b:
3a:c4:f6:92:55:15:47:8d:56:35:a2:a1:17:a0:94:
a7:57:05:a0:f9:f6:16:67:00:ff:da:83:05:1b:1e:
0b:99:50:d4:6f:5a:29:93:5a:0b:0e:6a:db:0d:68:
96:10:7d:21:87:15:0e:64:98:c6:5f:95:21:18:a1:
50:53:3b:dc:13:2e:cc:4e:ee:e4:f2:9d:c1:87:ee:
71:82:15:6d:d1:ad:e5:c0:1f:d6:78:8b:21:33:3e:
61:08:2c:2f:19:20:ba:5e:b5:1a:41:c8:79:00:a8:
8a:79:38:af:df:8e:c2:f2:83:29:cd:91:2e:06:e2:
c9:74:5f:3b:91:59:9e:3d:2e:41:22:f2:32:61:46:
dd:f0:53:80:9a:5a:3b:bf:68:4f:53:b5:5b:bc:bd:
c6:97:0c:e7:d2:5a:aa:f7:1f:23:71:25:06:37:4a:
76:d1:5c:b6:bb:e0:47:44:ad:b0:07:58:1b:06:62:
0c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:68:90:F1:63:3C:23:57:C3:67:DF:A7:18:9D:C9:22:FE:09:49:86
X509v3 Authority Key Identifier:
keyid:4B:3E:59:6A:24:D4:36:50:CB:60:E8:FC:C9:E4:4D:6F:8C:92:9D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:2f:df:2e:79:63:6a:79:c4:99:ed:a8:0b:09:39:08:13:a8:
42:d8:b5:c2:76:3f:b1:ef:3b:de:7f:58:f8:8f:b2:2f:94:bd:
20:a3:b1:21:19:78:c4:69:6d:7f:ed:d0:52:fd:12:57:ac:a6:
f1:13:c5:30:10:5d:8e:a5:08:5a:91:a3:5f:69:49:6d:20:d7:
a5:87:3f:a7:45:c8:28:36:1d:e1:64:97:26:c8:4c:1c:bc:51:
df:90:bf:d6:8f:e5:79:25:20:e3:39:34:1b:20:0c:0e:f6:b5:
1b:f9:3f:4b:fe:55:e6:40:4f:fe:8c:df:f4:d8:19:5f:4b:b4:
ba:99:cf:38:45:98:57:87:89:12:8f:bf:5c:0e:46:59:2e:30:
66:52:b9:f9:65:c1:75:64:dd:fe:fb:3d:08:b4:e9:bf:09:e3:
69:6e:c0:5d:37:a1:56:c8:72:c8:34:9c:6e:7e:55:2b:04:c8:
f7:ba:2c:2e:19:cc:61:53:db:47:30:88:a4:ac:e9:fa:13:84:
48:ee:1e:d5:12:1e:e8:87:b1:5c:87:ec:51:11:46:75:82:50:
32:c6:1a:6a:ac:ae:64:84:fc:d8:2e:e0:81:8e:5e:f4:10:3b:
83:cb:59:46:d1:04:e9:1e:c0:ae:4c:33:34:ed:e6:e2:b2:66:
13:ea:a5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:05:27 2026 by rpki-client