Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
File: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft (raw, json)
Hash identifier: zpsBKooRdfmGBYqiZnW36OUZ+D2t7o4BMfinPh1OTeo=
Subject key identifier: E8:18:F1:76:0B:9B:58:B0:F1:61:79:D4:05:A8:F0:B1:DB:D5:55:02
Authority key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
Certificate issuer: /CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Certificate serial: 01A123F9535CF29D926C0F6B2FA43F0F207C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
Manifest number: 132D
Signing time: Sat 10 Oct 2026 04:01:44 +0000
Manifest this update: Sat 10 Oct 2026 04:01:44 +0000
Manifest next update: Sun 11 Oct 2026 04:01:44 +0000
Files and hashes: 1: DXKA0kXE0N5ZtPOR2Oy4LAcB_4A.roa (hash: Sj3LYG5kwveQsf1vohBBwmgJI5eBDcD/U3wifQsq2hI=)
2: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl (hash: PyyDI44Yti71Az0qFAu2VbwzMLdnuAJQ/D7V362vIl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:f9:53:5c:f2:9d:92:6c:0f:6b:2f:a4:3f:0f:20:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Validity
Not Before: Oct 10 04:01:44 2026 GMT
Not After : Oct 11 04:01:44 2026 GMT
Subject: CN=e818f1760b9b58b0f16179d405a8f0b1dbd55502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:74:92:8a:29:22:44:fe:a3:4e:41:c8:af:b0:
1f:82:de:13:84:73:33:ac:14:89:34:5b:bf:76:d3:
e3:c1:68:ff:c2:2b:ef:5a:be:d0:f4:00:15:95:78:
be:60:e0:bb:32:18:d4:54:89:1e:32:6c:21:0f:04:
a7:79:0f:b4:77:03:54:d7:76:6c:f5:93:58:cc:59:
b0:3d:fc:25:3d:ce:17:b1:59:ba:a7:3e:7c:5a:87:
05:3f:82:4c:ed:19:4f:6f:17:64:0f:70:ba:54:9f:
b4:a8:de:36:0d:f4:aa:ab:ec:03:d0:aa:8a:44:28:
06:91:be:55:36:ec:62:0d:4d:60:af:0d:e2:3a:0c:
24:72:c5:9e:75:de:9c:9b:bc:6b:c4:6e:2c:30:30:
8f:32:3f:3b:b3:1f:eb:e8:91:e6:46:b7:7f:8c:44:
e3:6f:18:79:e8:a7:22:52:1c:4a:e8:f9:d7:d8:eb:
5d:ce:86:80:fb:5a:5e:71:e9:c4:f7:07:d6:4e:b3:
92:14:7a:89:0e:e4:e2:6c:e7:ad:56:5d:e9:a8:e3:
b9:47:aa:b7:9f:dc:a0:45:58:97:c2:29:0c:15:01:
2b:e2:9d:ca:e5:1e:08:1d:8a:8b:d9:ad:3b:ca:1a:
05:fe:1a:a7:7f:b9:bf:1c:a6:8a:3a:18:e6:8b:dd:
f4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:18:F1:76:0B:9B:58:B0:F1:61:79:D4:05:A8:F0:B1:DB:D5:55:02
X509v3 Authority Key Identifier:
keyid:AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ee:e0:b7:c4:6d:84:e8:ea:17:7f:b3:fb:ba:94:08:81:03:
5e:85:56:ed:9b:f6:82:19:f6:8b:a1:d5:c9:7f:db:e5:fa:9d:
42:29:e7:2b:0c:25:fa:5e:c1:53:2e:b9:c5:6a:3f:e5:2b:6a:
8e:9f:41:a4:5e:05:b1:ab:19:5b:f8:38:72:8b:d8:54:d1:ff:
67:8d:e0:ab:de:ff:83:94:b7:8c:d1:28:b4:6b:88:73:b3:42:
fc:6e:69:4b:54:ce:ea:b1:bf:f7:83:9c:d7:7f:2f:eb:8f:73:
b8:18:9a:ab:05:59:c0:af:5a:9e:5c:6c:93:77:22:99:5e:3e:
59:47:11:86:5f:63:ec:62:37:07:fa:6b:0e:fb:f8:3f:73:dc:
91:6b:2a:98:53:e6:e2:e0:24:66:e5:8a:85:e8:83:bc:d2:94:
87:4c:98:cc:31:5c:81:02:1a:4d:48:58:72:c5:b5:76:b1:b0:
b7:80:0f:10:03:90:33:be:d3:10:67:df:96:f2:d8:57:34:04:
9f:da:6d:4e:fe:a4:67:4e:2d:34:dc:bb:8d:83:a0:51:68:b4:
7b:8c:7d:58:35:c5:26:37:ff:b7:d0:93:d1:6b:41:b9:50:0a:
c4:85:28:2a:8b:bd:eb:18:87:79:af:82:fb:d2:3b:0f:5c:06:
f4:15:8d:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEj+VNc8p2SbA9rL6Q/DyB8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMzY3YmMxOWYwNjY5OTY0OTBhMjA2Njc0YzhkYThmNWVk
MmNkMGUwHhcNMjYxMDEwMDQwMTQ0WhcNMjYxMDExMDQwMTQ0WjAzMTEwLwYDVQQD
EyhlODE4ZjE3NjBiOWI1OGIwZjE2MTc5ZDQwNWE4ZjBiMWRiZDU1NTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHSSiikiRP6jTkHIr7Afgt4ThHMz
rBSJNFu/dtPjwWj/wivvWr7Q9AAVlXi+YOC7MhjUVIkeMmwhDwSneQ+0dwNU13Zs
9ZNYzFmwPfwlPc4XsVm6pz58WocFP4JM7RlPbxdkD3C6VJ+0qN42DfSqq+wD0KqK
RCgGkb5VNuxiDU1grw3iOgwkcsWedd6cm7xrxG4sMDCPMj87sx/r6JHmRrd/jETj
bxh56KciUhxK6PnX2OtdzoaA+1pecenE9wfWTrOSFHqJDuTibOetVl3pqOO5R6q3
n9ygRViXwikMFQEr4p3K5R4IHYqL2a07yhoF/hqnf7m/HKaKOhjmi930nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgY8XYLm1iw8WF51AWo8LHb1VUCMB8GA1UdIwQY
MBaAFK02e8GfBmmWSQogZnTI2o9e0s0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zY2M4NDgtNzg2MS00Y2UxLTg3MGQt
ODRiNjdiNDcwYjA0LzEvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zY2M4NDgtNzg2MS00Y2UxLTg3MGQtODRiNjdiNDcwYjA0
LzEvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+7gt8Rt
hOjqF3+z+7qUCIEDXoVW7Zv2ghn2i6HVyX/b5fqdQinnKwwl+l7BUy65xWo/5Stq
jp9BpF4FsasZW/g4covYVNH/Z43gq97/g5S3jNEotGuIc7NC/G5pS1TO6rG/94Oc
138v649zuBiaqwVZwK9anlxsk3cimV4+WUcRhl9j7GI3B/prDvv4P3PckWsqmFPm
4uAkZuWKheiDvNKUh0yYzDFcgQIaTUhYcsW1drGwt4APEAOQM77TEGfflvLYVzQE
n9ptTv6kZ04tNNy7jYOgUWi0e4x9WDXFJjf/t9CT0WtBuVAKxIUoKou96xiHea+C
+9I7D1wG9BWNuA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 11:12:23 2026 by rpki-client