Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
File: Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft (raw, json)
Hash identifier: pwlMpRuRwAtcXz/jOr7JN1vwtrlUlzxa7SBZZ/OMwyk=
Subject key identifier: B9:53:1D:9D:2D:D7:64:70:93:F7:AC:F3:84:DC:34:10:98:96:CB:5C
Authority key identifier: 4B:3E:59:6A:24:D4:36:50:CB:60:E8:FC:C9:E4:4D:6F:8C:92:9D:35
Certificate issuer: /CN=4b3e596a24d43650cb60e8fcc9e44d6f8c929d35
Certificate serial: 01A1DEDEE2458D0393A255BA082671994D7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
Manifest number: 0B21
Signing time: Sun 15 Nov 2026 11:01:51 +0000
Manifest this update: Sun 15 Nov 2026 11:01:51 +0000
Manifest next update: Mon 16 Nov 2026 11:01:51 +0000
Files and hashes: 1: QHXSRTuQ2wXN4fBaqbTGI2do0QM.roa (hash: 6/Lj3vL/L1J4PjbZ1lCMZ4grKgrWI3SnlcnhAkor32k=)
2: Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.crl (hash: DG8LmEaR7LcmXe70COWEdWBV8qHSv3B3pt8+DNsBhqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:e2:45:8d:03:93:a2:55:ba:08:26:71:99:4d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3e596a24d43650cb60e8fcc9e44d6f8c929d35
Validity
Not Before: Nov 15 11:01:51 2026 GMT
Not After : Nov 16 11:01:51 2026 GMT
Subject: CN=b9531d9d2dd7647093f7acf384dc34109896cb5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2d:80:15:68:ef:cb:46:f4:3e:2c:41:11:3c:
8c:80:0e:a0:95:5e:4e:ad:9b:d8:86:78:b1:a2:f6:
f8:f1:4c:d4:a4:88:65:6b:87:0e:83:d4:2c:a1:88:
f5:49:87:c7:2b:90:da:3e:96:34:32:c5:c5:56:f9:
90:0b:1c:62:47:54:f2:56:93:21:cf:ff:62:8e:d6:
f7:d4:fd:38:3e:6e:4e:2c:d4:0a:b4:8d:ed:bb:d2:
c8:bc:32:98:4c:ab:92:86:20:9c:29:ed:7e:ab:36:
1a:5f:b3:ed:5c:fa:c1:30:cc:6b:3e:89:ee:ba:63:
67:a2:2e:39:b5:bb:07:69:45:82:b1:f8:ac:f6:e0:
9e:a5:fe:49:8d:c1:e0:40:e9:80:6d:96:ce:ec:f0:
a3:e7:c3:a9:9e:f0:7a:ec:98:f9:12:2a:fa:ca:b8:
bc:70:14:25:b7:d7:7b:a3:63:5c:50:d0:be:0c:39:
39:ec:52:22:89:5c:60:68:28:32:9f:b7:4e:20:b3:
22:43:07:09:71:ec:4e:3b:bd:5c:4d:ef:32:72:a0:
97:c8:0b:79:19:c3:d0:a3:c4:94:64:51:aa:aa:d5:
dc:f5:1f:15:b0:6f:43:1a:00:15:3e:3f:a6:8e:05:
8b:7f:31:c9:cb:14:1f:a7:d5:b7:12:8f:da:8c:32:
34:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:53:1D:9D:2D:D7:64:70:93:F7:AC:F3:84:DC:34:10:98:96:CB:5C
X509v3 Authority Key Identifier:
keyid:4B:3E:59:6A:24:D4:36:50:CB:60:E8:FC:C9:E4:4D:6F:8C:92:9D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:39:19:76:4a:d0:cc:c6:2b:ba:6d:c0:da:10:f9:39:f6:36:
1c:33:f0:5b:2b:12:b2:e4:32:7f:88:8d:5e:06:c9:38:a5:59:
4e:0e:58:18:d1:14:d7:9b:91:29:f7:b3:87:2d:5d:30:e8:c2:
00:fd:ab:dc:04:9a:cf:5e:f8:67:60:c4:e2:13:fe:61:09:6e:
f0:ee:da:fa:a6:5a:d1:60:ce:06:02:96:6e:ab:1f:5d:2e:d7:
20:8d:fe:c1:68:e2:a5:77:08:17:ce:76:a9:80:ab:dd:2e:52:
16:c6:38:a4:e3:89:f7:4e:94:e8:e9:71:83:31:f4:64:be:85:
de:94:a1:95:69:d1:3c:67:c1:69:0e:7a:57:88:2f:a1:8d:be:
86:b0:25:16:f9:ee:61:d2:52:5f:4a:c2:67:e4:8a:6b:71:f0:
65:23:97:d6:c2:fd:bb:23:26:22:16:a0:12:08:ed:d5:aa:f3:
b1:a7:b0:de:0d:53:3e:86:8d:89:3a:67:db:a6:2a:58:79:8a:
87:5e:2c:c9:89:8d:1c:5c:77:99:e4:e8:eb:35:09:63:7c:11:
fe:17:d8:30:0d:3a:1e:1d:f5:95:c2:eb:7e:b4:39:a8:8e:47:
e6:c2:f3:be:89:bf:e6:d7:59:86:b5:b4:b5:c6:d4:3f:bf:79:
02:23:a2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:44:01 2026 by rpki-client