Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
File: RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft (raw, json)
Hash identifier: vs7n3Ax1+j285ZJrt8BH4sOaBv65QSRAmZX/VtuDOtY=
Subject key identifier: A2:E3:C5:BB:91:B0:3F:80:3C:8C:28:C6:B7:FE:C2:5A:85:59:33:DA
Authority key identifier: 47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
Certificate issuer: /CN=473163527e83542dce693b16d0aedcd126d3319a
Certificate serial: 01A10A7053CD57845C6CC0C7F70389A5A980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
Manifest number: 1A8B
Signing time: Mon 05 Oct 2026 05:01:35 +0000
Manifest this update: Mon 05 Oct 2026 05:01:35 +0000
Manifest next update: Tue 06 Oct 2026 05:01:35 +0000
Files and hashes: 1: RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl (hash: oYWTtqUice1/vpIXdu+Ty3KBsIIpvrc8DODB0X9W9Sk=)
2: pFkI7meix8Wvnh8I7pdS5zO5VAs.roa (hash: IiBaDlI4V6mbfD8AaxYpOFH+8BQ1zVQO5KQlE9ThC6Y=)
3: wIc-Rh6w6YDK1W-UeGedBj1DHzA.roa (hash: AHq1ZvIykr30MtwSSGLXsUeCsh/Ryu5hRBrmdW7qIMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:70:53:cd:57:84:5c:6c:c0:c7:f7:03:89:a5:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473163527e83542dce693b16d0aedcd126d3319a
Validity
Not Before: Oct 5 05:01:35 2026 GMT
Not After : Oct 6 05:01:35 2026 GMT
Subject: CN=a2e3c5bb91b03f803c8c28c6b7fec25a855933da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a8:e1:ab:c6:7d:e9:f4:c6:b0:38:0a:5a:60:
58:06:ae:49:ad:61:0a:42:3f:31:f6:af:a9:14:3d:
ac:03:06:9a:2c:df:1a:9f:73:8f:8b:2a:b1:a3:b2:
3f:71:61:22:8e:f8:9f:ab:0d:3e:5b:8b:13:88:c7:
1f:a0:aa:d4:0c:89:40:a8:2a:c0:dc:df:8a:e0:8e:
12:00:51:fb:12:b8:9f:45:7b:93:0e:c8:92:a3:d2:
2b:d3:81:89:6b:62:41:40:42:50:e5:28:e8:58:2a:
96:ac:0c:88:12:35:56:42:8c:cb:60:75:7e:4f:63:
d8:79:e5:93:36:4e:18:ed:6a:46:57:cc:b1:23:d6:
c6:5b:81:4e:07:91:1a:a4:ba:7d:99:42:c9:8e:56:
07:26:a3:6e:e8:9b:b1:97:21:f4:66:f5:26:ab:e3:
fe:9d:f6:4f:fd:cb:f7:d2:67:eb:67:a8:2c:be:82:
f7:1e:43:ef:f3:8e:ef:3d:fd:ad:a4:3b:fe:50:ed:
0f:02:7b:9c:fd:3f:ce:dc:49:0f:dc:0b:3a:06:f1:
f3:da:98:a5:9d:ae:81:98:06:e5:bf:2d:e1:4f:d6:
a7:03:2a:34:f6:00:48:89:5e:c9:db:2b:61:18:14:
1d:4d:fd:af:d2:5b:cf:16:72:75:fd:cb:fd:5e:67:
c7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E3:C5:BB:91:B0:3F:80:3C:8C:28:C6:B7:FE:C2:5A:85:59:33:DA
X509v3 Authority Key Identifier:
keyid:47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ba:cd:8a:67:2d:c3:d7:7c:ee:75:4d:3e:15:eb:93:0b:78:
5c:79:9a:da:43:55:9e:53:d4:10:f7:69:bb:4c:67:02:37:35:
72:22:91:4f:6a:13:5c:25:6d:d1:b4:f9:56:60:4a:b5:05:33:
38:ed:8b:10:37:c9:75:26:d5:5d:45:f0:d9:5a:04:db:6d:56:
b5:8c:fe:35:89:50:9d:5e:de:23:5f:24:4e:48:99:3a:e1:2c:
d2:3b:a0:8b:de:e8:5f:fb:84:18:b1:3d:5a:85:3a:05:dd:e3:
b6:01:25:64:58:ba:04:94:31:97:59:d4:42:cb:79:68:29:d4:
d2:e0:bb:7d:1e:31:b4:b1:6e:32:84:68:34:c2:0b:88:7a:7c:
db:65:6f:58:53:ac:d1:31:48:51:57:ab:c1:6f:9e:4c:77:1b:
9f:44:c8:fb:88:7d:1d:58:1d:01:36:6d:b8:a1:c2:f8:c8:96:
3e:db:ac:33:b3:db:25:53:a8:db:29:00:6b:ba:53:d4:f3:a7:
d6:52:7a:57:63:89:38:87:df:3f:52:96:c4:f3:46:db:64:4c:
67:3b:1d:67:37:57:fe:6f:e0:bd:e3:7c:3a:19:d2:aa:b3:6e:
44:ca:8c:74:61:ce:7c:65:1d:54:33:3d:f4:cf:ea:99:e0:1e:
3b:d4:8e:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEKcFPNV4RcbMDH9wOJpamAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MzE2MzUyN2U4MzU0MmRjZTY5M2IxNmQwYWVkY2QxMjZk
MzMxOWEwHhcNMjYxMDA1MDUwMTM1WhcNMjYxMDA2MDUwMTM1WjAzMTEwLwYDVQQD
EyhhMmUzYzViYjkxYjAzZjgwM2M4YzI4YzZiN2ZlYzI1YTg1NTkzM2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Kjhq8Z96fTGsDgKWmBYBq5JrWEK
Qj8x9q+pFD2sAwaaLN8an3OPiyqxo7I/cWEijvifqw0+W4sTiMcfoKrUDIlAqCrA
3N+K4I4SAFH7ErifRXuTDsiSo9Ir04GJa2JBQEJQ5SjoWCqWrAyIEjVWQozLYHV+
T2PYeeWTNk4Y7WpGV8yxI9bGW4FOB5EapLp9mULJjlYHJqNu6JuxlyH0ZvUmq+P+
nfZP/cv30mfrZ6gsvoL3HkPv847vPf2tpDv+UO0PAnuc/T/O3EkP3As6BvHz2pil
na6BmAblvy3hT9anAyo09gBIiV7J2ythGBQdTf2v0lvPFnJ1/cv9XmfH5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLjxbuRsD+APIwoxrf+wlqFWTPaMB8GA1UdIwQY
MBaAFEcxY1J+g1Qtzmk7FtCu3NEm0zGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnpGalVuNkRWQzNPYVRzVzBLN2MwU2JUTVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hYjIzODktOGQzNi00M2ZlLWFmNDIt
OWEzODQxOTY3MTgxLzEvUnpGalVuNkRWQzNPYVRzVzBLN2MwU2JUTVpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9hYjIzODktOGQzNi00M2ZlLWFmNDItOWEzODQxOTY3MTgx
LzEvUnpGalVuNkRWQzNPYVRzVzBLN2MwU2JUTVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADrrNimct
w9d87nVNPhXrkwt4XHma2kNVnlPUEPdpu0xnAjc1ciKRT2oTXCVt0bT5VmBKtQUz
OO2LEDfJdSbVXUXw2VoE221WtYz+NYlQnV7eI18kTkiZOuEs0jugi97oX/uEGLE9
WoU6Bd3jtgElZFi6BJQxl1nUQst5aCnU0uC7fR4xtLFuMoRoNMILiHp822VvWFOs
0TFIUVerwW+eTHcbn0TI+4h9HVgdATZtuKHC+MiWPtusM7PbJVOo2ykAa7pT1POn
1lJ6V2OJOIffP1KWxPNG22RMZzsdZzdX/m/gveN8OhnSqrNuRMqMdGHOfGUdVDM9
9M/qmeAeO9SOPQ==
-----END CERTIFICATE-----
Generated at Mon Oct 5 10:46:30 2026 by rpki-client