Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
File: Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft (raw, json)
Hash identifier: Rcc0aurSQFNDBMDXiSaVTb98I8FFT6+wRi9+TsMECA8=
Subject key identifier: 39:B0:CF:1A:46:BA:BC:6A:45:33:E0:B5:4C:0A:C4:A0:63:DF:28:5D
Authority key identifier: 4B:3E:59:6A:24:D4:36:50:CB:60:E8:FC:C9:E4:4D:6F:8C:92:9D:35
Certificate issuer: /CN=4b3e596a24d43650cb60e8fcc9e44d6f8c929d35
Certificate serial: 01A0C4E9A63638D0528CE83CDB3891BBD8E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
Manifest number: 0A8F
Signing time: Mon 21 Sep 2026 17:00:41 +0000
Manifest this update: Mon 21 Sep 2026 17:00:41 +0000
Manifest next update: Tue 22 Sep 2026 17:00:41 +0000
Files and hashes: 1: QHXSRTuQ2wXN4fBaqbTGI2do0QM.roa (hash: 6/Lj3vL/L1J4PjbZ1lCMZ4grKgrWI3SnlcnhAkor32k=)
2: Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.crl (hash: LtL6wrepZuWwmPGBrSFZpNEUVz2s90ffV1BbzkYxqCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:a6:36:38:d0:52:8c:e8:3c:db:38:91:bb:d8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3e596a24d43650cb60e8fcc9e44d6f8c929d35
Validity
Not Before: Sep 21 17:00:41 2026 GMT
Not After : Sep 22 17:00:41 2026 GMT
Subject: CN=39b0cf1a46babc6a4533e0b54c0ac4a063df285d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:18:75:08:a0:86:db:37:0e:ee:df:d8:54:1e:
f9:b7:19:f7:3a:7b:86:48:0a:97:8b:72:c2:55:f3:
ff:16:1f:0f:15:3c:c7:b9:9a:b9:35:61:95:b8:98:
be:44:1e:74:d9:66:84:60:5b:21:b2:fa:74:ad:cb:
9a:73:64:45:d4:69:fb:20:46:f3:28:11:ae:a6:6d:
76:17:71:7f:ba:27:7e:41:be:79:06:6d:88:d8:9f:
a6:65:0f:40:b0:5d:dd:1e:96:eb:11:e7:07:65:92:
3d:a7:f3:e6:65:43:72:4b:86:db:69:72:d5:7e:d1:
9e:a0:62:51:1f:b8:15:e5:d7:ab:dd:32:1e:28:a3:
8a:bd:6e:39:34:08:c3:98:02:18:d1:5c:ac:5d:cb:
bc:66:42:07:13:3c:41:79:8e:d4:2b:f2:c8:78:2c:
53:3e:4c:0a:74:1c:24:95:b7:36:c4:0c:ed:49:69:
34:bb:35:bf:24:d6:c9:8f:85:9e:b1:4f:6a:9b:5f:
a2:a8:d1:2f:9c:06:c2:a2:83:0e:ce:5a:92:75:8f:
10:a8:f9:ae:d0:33:24:16:2e:f1:f7:fb:24:3f:4e:
3c:b8:93:16:e0:37:eb:37:3b:6f:55:81:d3:44:ab:
2f:d0:67:69:8f:13:4f:9a:d1:de:33:6c:db:30:ad:
ac:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B0:CF:1A:46:BA:BC:6A:45:33:E0:B5:4C:0A:C4:A0:63:DF:28:5D
X509v3 Authority Key Identifier:
keyid:4B:3E:59:6A:24:D4:36:50:CB:60:E8:FC:C9:E4:4D:6F:8C:92:9D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d4:97:45:22:e8:fa:fe:c0:cd:21:f9:ae:42:89:b7:47:ac:
12:28:5a:27:b3:06:8b:23:9d:07:e7:3a:53:c1:00:42:ae:0b:
c6:a7:fc:bd:60:d6:13:dc:2f:68:17:92:20:82:64:f9:27:39:
2d:9b:9e:7b:55:05:60:21:bc:42:f8:66:44:3c:b0:33:4a:b8:
91:66:d6:79:9c:ee:ea:05:f1:78:cc:75:3c:8d:20:eb:27:2c:
00:f7:1e:a4:60:21:eb:69:05:92:f9:33:07:eb:6c:a2:39:78:
80:f7:fc:d9:48:48:60:84:2f:3b:5e:88:9a:23:82:9d:ec:88:
3d:c0:0e:2f:ef:fb:4e:f2:8f:de:9e:7c:c4:9b:94:4c:88:4f:
28:2d:e8:1f:f9:30:93:0e:ad:db:cd:f1:7f:f0:75:b0:4e:68:
49:cc:6a:c2:2d:b2:02:d8:d7:4b:40:2d:30:6a:12:9a:70:1e:
43:1e:3f:eb:03:a8:3e:85:62:b7:30:c3:05:9d:38:8b:79:aa:
98:4c:77:a9:fe:1b:c6:98:20:31:4d:94:3f:10:2a:87:57:61:
2a:61:77:b5:81:00:b4:bd:94:6d:3e:f1:a8:d3:ca:d5:35:49:
60:90:0b:1c:61:fd:93:08:c1:47:db:76:61:7b:ad:7f:fd:fa:
4a:0e:84:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:24:48 2026 by rpki-client