Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.mft
File: 421ZT1_jgr7Czo46Majyjm2XwB4.mft (raw, json)
Hash identifier: 88fcd3mrhhEKF2QZdwkiCqVOXcJfsbgvSW731Fax+6U=
Subject key identifier: 29:DE:E1:2C:1C:7E:96:35:3F:25:29:A7:5C:CF:4C:3D:58:1F:38:9E
Authority key identifier: E3:6D:59:4F:5F:E3:82:BE:C2:CE:8E:3A:31:A8:F2:8E:6D:97:C0:1E
Certificate issuer: /CN=e36d594f5fe382bec2ce8e3a31a8f28e6d97c01e
Certificate serial: 01A0D0B6B3082061F1BACFA3AB1EE2268FE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/421ZT1_jgr7Czo46Majyjm2XwB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.mft
Manifest number: 010D
Signing time: Thu 24 Sep 2026 00:00:29 +0000
Manifest this update: Thu 24 Sep 2026 00:00:29 +0000
Manifest next update: Fri 25 Sep 2026 00:00:29 +0000
Files and hashes: 1: 421ZT1_jgr7Czo46Majyjm2XwB4.crl (hash: VgWgw9mhY95SYeEgIIAbZN9/HGTGlRap8owjWQvBvVk=)
2: 4kp9Gd2mxG804RIdTKshm3Dwmdo.asa (hash: eGP/nycwexU78v/Fn01o7w+Fu0NVubrmTB5+YYDpoOY=)
3: rlTxV9_AZMvvIYIdP4ZkM9OxPzQ.roa (hash: gCYbQwWeJazWuKam4wgBrsfYsq8VV5PKDsC6OZTN4xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/421ZT1_jgr7Czo46Majyjm2XwB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:b3:08:20:61:f1:ba:cf:a3:ab:1e:e2:26:8f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e36d594f5fe382bec2ce8e3a31a8f28e6d97c01e
Validity
Not Before: Sep 24 00:00:29 2026 GMT
Not After : Sep 25 00:00:29 2026 GMT
Subject: CN=29dee12c1c7e96353f2529a75ccf4c3d581f389e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:10:97:4f:33:5e:8f:bd:49:f7:18:6d:90:71:
9d:d0:3c:aa:ba:ff:36:0a:7e:09:06:1a:32:6e:fa:
df:43:7c:38:ea:94:ac:e3:46:0e:3d:c8:1f:7f:01:
17:68:a2:bd:81:ce:e3:69:29:99:45:24:32:6b:75:
d0:7c:ab:a9:3b:15:1b:9d:a8:06:a8:51:38:ce:ee:
63:b4:19:61:52:5c:44:06:b9:2f:8a:b8:6e:ef:c9:
4d:d4:2f:be:84:da:c1:58:8b:e1:a8:08:9e:c8:8f:
8e:a3:68:51:be:1e:d2:fe:eb:47:dc:71:7f:06:dd:
41:c7:df:da:bb:4f:7a:3b:42:e5:2a:48:d2:eb:8b:
f3:50:71:cd:9c:99:5e:7f:80:ae:80:47:b5:f0:5a:
88:5b:81:0c:6c:f7:06:76:27:50:c5:df:2e:e1:57:
f4:42:5f:ca:e2:60:c7:f7:b1:ed:85:de:48:c7:61:
5b:8b:cf:b5:c3:ce:17:06:2f:57:eb:45:db:b0:05:
72:5b:a4:eb:93:66:56:f3:b8:bb:e2:1f:b1:69:0d:
2d:08:b2:29:0c:8b:6f:fd:03:cc:4a:33:cb:a8:b2:
de:8f:6f:31:28:f1:ce:13:81:97:2c:f3:43:a7:6b:
8d:2d:12:76:57:c5:1c:4b:59:3f:7d:bf:1f:79:ae:
88:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DE:E1:2C:1C:7E:96:35:3F:25:29:A7:5C:CF:4C:3D:58:1F:38:9E
X509v3 Authority Key Identifier:
keyid:E3:6D:59:4F:5F:E3:82:BE:C2:CE:8E:3A:31:A8:F2:8E:6D:97:C0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/421ZT1_jgr7Czo46Majyjm2XwB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:5a:1f:99:95:fc:78:83:43:89:42:d3:d1:2d:71:60:38:59:
8b:07:5a:59:fa:5e:19:e6:ae:b4:87:76:6a:a8:de:1d:2b:8a:
33:be:50:2f:e5:4d:e1:3c:0b:28:29:ff:c6:0b:6a:52:c6:39:
73:36:83:06:c4:63:65:59:2e:66:09:53:d7:0a:4a:8c:3c:88:
c7:88:b1:60:ff:fe:0f:43:29:14:54:b7:eb:1f:ef:ab:88:c0:
f2:7c:98:04:75:86:92:f5:8a:93:f5:87:76:8e:69:66:ae:3c:
e9:a2:cc:de:45:4f:f1:fa:ed:18:fa:73:00:c3:f2:8d:f6:f4:
07:22:68:8d:64:49:31:da:2c:8d:a5:34:27:e1:4d:ed:b1:bf:
19:1e:f8:d4:9d:91:04:aa:96:0d:72:01:f3:4c:4d:88:62:ab:
f5:b5:05:f4:98:4d:7b:bb:50:b8:0c:9c:24:b8:c7:bc:8a:6c:
40:ba:5e:f2:58:2e:03:4d:f1:2d:fe:ff:5f:04:bb:05:76:f0:
cf:0a:03:8e:7b:fc:4b:21:9a:66:87:9f:9f:79:30:60:4a:d6:
9d:09:e0:e1:12:26:e1:aa:12:a2:e8:6a:e4:a8:43:8e:da:6c:
2f:60:bb:1c:37:7d:ce:90:50:4f:af:b1:f5:72:22:db:15:b3:
fb:53:2d:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQtrMIIGHxus+jqx7iJo/kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNmQ1OTRmNWZlMzgyYmVjMmNlOGUzYTMxYThmMjhlNmQ5
N2MwMWUwHhcNMjYwOTI0MDAwMDI5WhcNMjYwOTI1MDAwMDI5WjAzMTEwLwYDVQQD
EygyOWRlZTEyYzFjN2U5NjM1M2YyNTI5YTc1Y2NmNGMzZDU4MWYzODllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hCXTzNej71J9xhtkHGd0Dyquv82
Cn4JBhoybvrfQ3w46pSs40YOPcgffwEXaKK9gc7jaSmZRSQya3XQfKupOxUbnagG
qFE4zu5jtBlhUlxEBrkvirhu78lN1C++hNrBWIvhqAieyI+Oo2hRvh7S/utH3HF/
Bt1Bx9/au096O0LlKkjS64vzUHHNnJlef4CugEe18FqIW4EMbPcGdidQxd8u4Vf0
Ql/K4mDH97Hthd5Ix2Fbi8+1w84XBi9X60XbsAVyW6Trk2ZW87i74h+xaQ0tCLIp
DItv/QPMSjPLqLLej28xKPHOE4GXLPNDp2uNLRJ2V8UcS1k/fb8fea6IWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCne4SwcfpY1PyUpp1zPTD1YHzieMB8GA1UdIwQY
MBaAFONtWU9f44K+ws6OOjGo8o5tl8AeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDIxWlQxX2pncjdDem80Nk1hanlqbTJYd0I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9lNWRmNDktNDRiOC00MzRlLWE4MTEt
NTcxOTQ2NjhjZWE5LzEvNDIxWlQxX2pncjdDem80Nk1hanlqbTJYd0I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9lNWRmNDktNDRiOC00MzRlLWE4MTEtNTcxOTQ2NjhjZWE5
LzEvNDIxWlQxX2pncjdDem80Nk1hanlqbTJYd0I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW1ofmZX8
eINDiULT0S1xYDhZiwdaWfpeGeautId2aqjeHSuKM75QL+VN4TwLKCn/xgtqUsY5
czaDBsRjZVkuZglT1wpKjDyIx4ixYP/+D0MpFFS36x/vq4jA8nyYBHWGkvWKk/WH
do5pZq486aLM3kVP8frtGPpzAMPyjfb0ByJojWRJMdosjaU0J+FN7bG/GR741J2R
BKqWDXIB80xNiGKr9bUF9JhNe7tQuAycJLjHvIpsQLpe8lguA03xLf7/XwS7BXbw
zwoDjnv8SyGaZoefn3kwYErWnQng4RIm4aoSouhq5KhDjtpsL2C7HDd9zpBQT6+x
9XIi2xWz+1Mt7Q==
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:51:23 2026 by rpki-client