Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
File: Rzd55qd8flghMZh2TOKsDmvuYjY.mft (raw, json)
Hash identifier: TXB0D6VO2DW8gmCKKXXnHccQqFrwS6c6QkMDIGlU4Bo=
Subject key identifier: 27:8D:F1:84:33:E0:96:31:C2:1B:6C:41:11:02:21:34:DE:E3:6D:F2
Authority key identifier: 47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36
Certificate issuer: /CN=473779e6a77c7e58213198764ce2ac0e6bee6236
Certificate serial: 01A0C669EAE139657B50F8F666DAA1D913AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
Manifest number: 0545
Signing time: Tue 22 Sep 2026 00:00:25 +0000
Manifest this update: Tue 22 Sep 2026 00:00:25 +0000
Manifest next update: Wed 23 Sep 2026 00:00:25 +0000
Files and hashes: 1: 2z-c3MpGdlvNK98wFJ-FhUpQXTk.roa (hash: jD+P5ccWJZqhrEzl8gpwfaAxbm2916uuSP5OIhhxw0M=)
2: Rzd55qd8flghMZh2TOKsDmvuYjY.crl (hash: 0M30tQ5mJOR1kdJHe2++CrEd1Doe+JM4Jm93eQfysGM=)
3: nLrwE_Xuj7FEwaVr2PMMyDOjcsM.roa (hash: CdwJHzzCL/DT7oBvlE4BtdzceymGADOR4McXAN25EBU=)
4: zyBvK059nS2Wwp2gBqWo7Jx-YsI.roa (hash: YgqvlJooFLvwv+N90i8hB60uaCFF3pjZWTtq+9rP5ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:69:ea:e1:39:65:7b:50:f8:f6:66:da:a1:d9:13:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473779e6a77c7e58213198764ce2ac0e6bee6236
Validity
Not Before: Sep 22 00:00:25 2026 GMT
Not After : Sep 23 00:00:25 2026 GMT
Subject: CN=278df18433e09631c21b6c4111022134dee36df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:28:2d:45:92:0b:30:b3:4d:75:bc:a7:45:09:
2d:15:2f:4d:c4:5a:93:0e:ab:78:c5:ea:a5:72:24:
a9:be:6a:d4:a3:71:ec:84:2b:f9:53:6d:81:f3:c9:
54:4c:81:a2:75:d1:2c:1c:53:32:df:58:dd:3e:51:
52:79:37:41:a4:e3:8c:cf:b2:04:28:a9:02:ef:0f:
53:85:99:18:b9:95:20:80:31:e9:8d:5d:eb:c8:c7:
2d:4a:5b:57:20:7f:cb:0c:12:81:0e:8b:5f:9b:6f:
5c:d5:39:f1:33:45:af:5d:b4:4b:55:a4:d4:fb:fd:
9c:d6:cb:5d:94:f4:55:38:be:a3:fb:3f:ce:24:27:
ba:f9:aa:b2:04:03:fc:a6:d1:b0:eb:2c:35:fd:99:
71:97:39:38:1d:da:13:95:cd:11:46:12:f5:5e:1f:
ab:34:2a:1a:e9:55:0a:94:76:08:a0:d5:7d:4a:25:
56:e7:24:c6:de:1a:fb:ad:f0:eb:98:97:b9:6d:c5:
9c:85:74:59:a1:18:33:92:89:87:cb:95:f1:75:0b:
f3:0a:36:80:78:c1:09:5a:28:1e:0c:65:a8:1c:f8:
f1:e3:55:82:fe:c1:64:66:8d:8f:c5:6f:8a:25:7b:
b1:e6:c9:fc:07:02:f4:06:56:53:f1:12:b5:ce:03:
da:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8D:F1:84:33:E0:96:31:C2:1B:6C:41:11:02:21:34:DE:E3:6D:F2
X509v3 Authority Key Identifier:
keyid:47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:be:5c:10:a6:12:85:40:5c:af:b9:98:9e:e1:58:8b:cf:8c:
72:12:31:a9:f4:cc:2e:65:dd:0a:2c:e0:a5:8d:3a:d5:aa:b8:
8b:b2:4b:bc:1e:9a:aa:cf:1d:c7:a6:c8:47:28:6d:f3:b0:cb:
64:2a:53:08:3c:5f:09:73:24:d3:af:89:14:22:c4:c2:12:6a:
32:fa:18:31:32:92:9a:0d:a3:06:e8:09:17:1d:98:95:b7:d4:
8e:d6:6a:49:20:64:cf:1a:77:58:d1:fd:62:b2:1b:2e:b7:30:
44:ba:5b:b4:f9:e9:c0:a7:8c:a5:5c:59:40:20:2a:43:db:dc:
c8:7d:e8:20:c0:e9:a0:32:fd:e1:29:e1:b7:3f:e4:c2:22:04:
00:23:da:99:39:24:a7:8d:d1:da:bd:59:9d:38:5b:ed:64:38:
52:99:a2:9e:ca:72:95:f8:8e:af:eb:b9:93:a9:46:b6:12:48:
11:94:31:83:0d:1b:be:13:dc:a7:ae:d0:42:dd:95:59:a4:eb:
b0:72:7f:b8:74:2b:35:e8:af:6f:f7:e9:37:e1:ae:fe:02:37:
c2:09:0d:f7:5c:97:2a:7f:7f:a2:fd:90:d5:2a:02:a3:2f:b4:
c3:e2:58:da:7f:56:07:b0:cd:00:96:0d:15:ad:13:c5:9b:0b:
f0:c0:bb:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGaerhOWV7UPj2Ztqh2ROuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3Mzc3OWU2YTc3YzdlNTgyMTMxOTg3NjRjZTJhYzBlNmJl
ZTYyMzYwHhcNMjYwOTIyMDAwMDI1WhcNMjYwOTIzMDAwMDI1WjAzMTEwLwYDVQQD
EygyNzhkZjE4NDMzZTA5NjMxYzIxYjZjNDExMTAyMjEzNGRlZTM2ZGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SgtRZILMLNNdbynRQktFS9NxFqT
Dqt4xeqlciSpvmrUo3HshCv5U22B88lUTIGiddEsHFMy31jdPlFSeTdBpOOMz7IE
KKkC7w9ThZkYuZUggDHpjV3ryMctSltXIH/LDBKBDotfm29c1TnxM0WvXbRLVaTU
+/2c1stdlPRVOL6j+z/OJCe6+aqyBAP8ptGw6yw1/Zlxlzk4HdoTlc0RRhL1Xh+r
NCoa6VUKlHYIoNV9SiVW5yTG3hr7rfDrmJe5bcWchXRZoRgzkomHy5XxdQvzCjaA
eMEJWigeDGWoHPjx41WC/sFkZo2PxW+KJXux5sn8BwL0BlZT8RK1zgPalwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCeN8YQz4JYxwhtsQRECITTe423yMB8GA1UdIwQY
MBaAFEc3eeanfH5YITGYdkzirA5r7mI2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnpkNTVxZDhmbGdoTVpoMlRPS3NEbXZ1WWpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZDc1ODMtZDEwYy00N2RiLWFlZTEt
NThkNjY0MjEwNjY5LzEvUnpkNTVxZDhmbGdoTVpoMlRPS3NEbXZ1WWpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8xZDc1ODMtZDEwYy00N2RiLWFlZTEtNThkNjY0MjEwNjY5
LzEvUnpkNTVxZDhmbGdoTVpoMlRPS3NEbXZ1WWpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN75cEKYS
hUBcr7mYnuFYi8+MchIxqfTMLmXdCizgpY061aq4i7JLvB6aqs8dx6bIRyht87DL
ZCpTCDxfCXMk06+JFCLEwhJqMvoYMTKSmg2jBugJFx2YlbfUjtZqSSBkzxp3WNH9
YrIbLrcwRLpbtPnpwKeMpVxZQCAqQ9vcyH3oIMDpoDL94Snhtz/kwiIEACPamTkk
p43R2r1ZnThb7WQ4UpminspylfiOr+u5k6lGthJIEZQxgw0bvhPcp67QQt2VWaTr
sHJ/uHQrNeivb/fpN+Gu/gI3wgkN91yXKn9/ov2Q1SoCoy+0w+JY2n9WB7DNAJYN
Fa0TxZsL8MC7xQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 11:50:30 2026 by rpki-client