Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
File: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft (raw, json)
Hash identifier: yXK69KeAuEK/8ReDmBgwAwk/g4c7pfAfbXM5iqigMQE=
Subject key identifier: 3C:EB:8B:C3:CB:A5:BC:03:3F:A4:53:57:2B:FF:0C:AC:E7:7D:0D:8D
Authority key identifier: AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
Certificate issuer: /CN=af3adce3664bf0e7f688ff4122551734c4d14756
Certificate serial: 01A0E663F49F0CA02657C872E91078DF44A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
Manifest number: 04AD
Signing time: Mon 28 Sep 2026 05:01:45 +0000
Manifest this update: Mon 28 Sep 2026 05:01:45 +0000
Manifest next update: Tue 29 Sep 2026 05:01:45 +0000
Files and hashes: 1: hJZnvXC0-UgTlF_AH76uiPfGV7c.asa (hash: p2cFMytFL5OC6zEHyn7h+6EUDN+jaMNyN9xu55GAgrQ=)
2: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl (hash: iZgPcZJZ2qJsHJWorVNBxwAjJ7wblm6gHAuM8GFiaD0=)
3: ymjEj-AVl-jhoYqun7KK_jww1EY.roa (hash: Lravz6mXezUcFlH14r837C4PlhGpAXXPBKh9Ost0iM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:63:f4:9f:0c:a0:26:57:c8:72:e9:10:78:df:44:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3adce3664bf0e7f688ff4122551734c4d14756
Validity
Not Before: Sep 28 05:01:45 2026 GMT
Not After : Sep 29 05:01:45 2026 GMT
Subject: CN=3ceb8bc3cba5bc033fa453572bff0cace77d0d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:94:29:be:b1:f7:c4:e6:57:02:78:6d:0c:5b:
52:e4:2e:e1:d9:53:4d:73:97:d2:6c:63:9c:9b:48:
c8:73:07:a6:2b:0e:8f:86:55:7a:2e:e5:09:76:57:
72:67:be:ec:7b:2d:8d:d1:12:9b:f3:e4:b3:f4:67:
46:76:86:d0:17:a5:90:99:bc:76:2e:f8:3f:dd:40:
7e:09:4e:82:bd:12:64:34:7a:e3:d2:7f:41:9e:87:
3c:fe:3a:03:1f:88:29:7d:aa:8c:8f:ef:b6:54:09:
5a:97:d8:75:0f:39:c7:32:27:91:ca:d9:a9:1b:cc:
8b:3a:d1:b7:62:35:e4:3f:b9:a8:cf:1f:ed:57:ff:
a8:60:7c:2c:53:27:ff:75:25:cb:ce:ad:d0:31:d2:
f7:4d:ec:a1:df:4f:2c:e6:31:9c:fd:3b:47:d1:29:
ba:9b:d7:f3:3c:9c:67:9e:0d:b3:bb:2b:32:c0:63:
fd:5b:6b:e7:d5:2c:8a:6b:f0:3e:03:67:f5:5b:12:
47:03:81:8f:85:69:aa:37:19:89:f6:ce:c4:b6:fc:
45:65:b2:b3:b3:28:4f:ea:f0:28:86:0a:39:e7:06:
ef:59:1b:b7:5a:e5:c4:8e:de:8c:c5:45:f4:ee:8f:
2b:5d:12:8c:dc:07:58:2a:01:8a:15:c0:ca:ee:88:
6b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EB:8B:C3:CB:A5:BC:03:3F:A4:53:57:2B:FF:0C:AC:E7:7D:0D:8D
X509v3 Authority Key Identifier:
keyid:AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:4c:19:29:e9:14:8f:0a:0f:40:d1:fa:81:b6:12:b6:7f:64:
c0:b5:23:b6:fa:90:b1:04:6a:4e:af:75:a0:fe:ef:7a:bb:1b:
1c:71:fd:e3:88:43:93:4a:32:e7:ed:65:9d:b1:8b:a1:da:e2:
6e:21:76:42:c1:65:54:ce:7e:3f:dd:2a:05:50:66:b1:e2:15:
0b:fc:47:95:5e:23:0a:36:c5:e9:5a:e3:48:da:21:dc:3f:e4:
56:bf:87:38:ae:54:40:cb:11:4b:f7:23:db:df:b9:5f:e6:ad:
da:e0:8a:01:85:4a:9e:51:6e:0b:af:f3:25:15:61:77:24:04:
f9:7e:5c:ce:16:bf:f7:15:3a:2f:22:5b:b6:60:3b:7f:59:db:
e4:54:fd:9f:d5:ce:17:54:1e:7d:89:a7:f2:19:8c:69:0e:c9:
ea:e5:0b:36:75:95:f5:bf:d1:83:1e:50:b1:0d:d6:19:0f:4d:
04:3b:56:e3:e4:62:7b:c4:17:78:f6:ed:ab:69:eb:4b:60:8a:
52:b1:1d:7f:bb:c4:60:62:63:fe:25:26:fc:03:ac:fb:7a:10:
2c:5e:0c:35:25:74:c1:37:a3:76:7c:db:a1:18:03:cc:4c:da:
b7:59:94:c1:92:99:2b:a5:6a:2e:f5:c6:b6:83:f8:ea:eb:a3:
eb:56:ae:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 08:32:16 2026 by rpki-client