Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
File: RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft (raw, json)
Hash identifier: uA3TMnrF+CmuULWpbA8LvWqvKdYMC6Wf+FkSPkFnfkw=
Subject key identifier: 49:C4:D3:B2:29:32:99:FC:EA:61:40:33:27:8F:52:EF:45:AF:2D:0F
Authority key identifier: 47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
Certificate issuer: /CN=473469a966f4df3cf28171d87c74780fc472f979
Certificate serial: 01A123C18D2930D82C4B48114FADD0E8EA52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
Manifest number: 0D9F
Signing time: Sat 10 Oct 2026 03:00:49 +0000
Manifest this update: Sat 10 Oct 2026 03:00:49 +0000
Manifest next update: Sun 11 Oct 2026 03:00:49 +0000
Files and hashes: 1: DNxT4KfUnSN5D5Pb2TXRMl9CQRk.roa (hash: U4JVcc+2nFb5M82ma1QdMgZr3eKXlGDJ6qSOPbU6n2I=)
2: RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl (hash: pK3Kcq+V4FUpx2auwi1Xf1/lZKVXNyTSI60xLkj8wsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:c1:8d:29:30:d8:2c:4b:48:11:4f:ad:d0:e8:ea:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473469a966f4df3cf28171d87c74780fc472f979
Validity
Not Before: Oct 10 03:00:49 2026 GMT
Not After : Oct 11 03:00:49 2026 GMT
Subject: CN=49c4d3b2293299fcea614033278f52ef45af2d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:3c:62:8d:21:0c:00:5b:3e:1c:6d:e9:eb:
aa:5e:56:6d:4f:23:32:be:cb:fd:df:8e:cd:cf:22:
8d:c7:78:73:ef:65:de:ff:6e:24:85:6e:5a:0c:48:
bb:6b:f7:fb:e0:b8:b9:52:f6:a8:72:d5:b9:bc:0c:
d8:7b:12:8a:d2:82:a0:ed:8e:d4:20:75:a1:d5:6f:
21:db:b4:af:a0:04:06:05:e0:f0:41:53:bc:8b:6e:
20:69:45:fe:1c:1c:11:91:5d:d6:7e:92:11:cb:60:
35:27:2d:b7:6c:03:29:3f:ec:99:fa:97:3f:cf:7a:
e5:31:d4:42:05:6c:60:de:0a:c5:1b:be:02:7b:4a:
b3:64:11:b9:85:6b:0b:74:97:94:ab:3f:24:86:af:
ff:e9:49:78:37:70:09:ee:35:1c:8f:21:31:17:66:
0f:b8:98:d8:69:b0:59:37:e3:b5:d5:a0:ce:06:e7:
ba:74:bf:2f:45:61:7b:63:68:5d:3e:5d:da:0a:9e:
5d:35:4e:58:0e:81:56:6d:37:7b:46:8e:1c:d0:fd:
1c:4a:0f:80:9a:87:46:e0:f2:7f:61:f0:2a:38:a4:
92:14:9b:bf:4d:85:e7:ea:0c:cb:9b:1a:00:66:4e:
4a:44:79:9d:dc:c4:5f:0f:56:a0:fd:40:84:2e:96:
2c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C4:D3:B2:29:32:99:FC:EA:61:40:33:27:8F:52:EF:45:AF:2D:0F
X509v3 Authority Key Identifier:
keyid:47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d8:8c:56:91:f1:cd:28:06:1e:f0:7c:c0:61:b0:57:a9:99:
b4:ce:b3:a4:c1:1c:46:b6:27:30:66:19:74:5c:e1:fa:d4:20:
4a:99:d8:d6:35:47:24:dc:b5:3d:67:23:cd:5c:f1:2a:9d:88:
31:0e:d1:37:55:09:91:f3:c6:87:85:dc:ed:14:2f:db:47:d0:
80:a9:fb:8d:64:72:44:19:35:3e:17:5b:d2:1d:b4:de:85:bc:
5a:fb:1b:d5:76:dd:e7:63:ce:fa:04:4c:18:15:74:77:9b:ac:
83:41:5e:8a:7c:9a:dd:44:08:8f:a0:9b:f1:dd:12:db:02:eb:
c5:3c:89:27:57:50:f9:b3:66:e9:51:8a:d3:09:9a:d7:45:62:
ad:29:22:50:24:ee:7a:12:5d:1a:4c:7c:d8:ec:9b:ae:65:3b:
e3:7e:81:04:8a:7e:8a:f2:e5:cc:75:fd:3d:4f:35:2a:47:f5:
92:e3:e2:78:b9:1c:3a:54:52:7e:03:95:e8:ea:39:f5:53:b9:
a6:1c:97:49:ed:33:fd:51:3a:c1:88:43:23:2d:0a:c8:be:cf:
42:4f:e8:fc:ec:06:d3:82:7c:5a:4f:cb:7c:f5:23:bb:58:07:
88:fd:fc:f5:a2:ab:f3:de:e9:c2:dd:cb:ca:f5:de:78:07:7a:
9a:69:75:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:46:41 2026 by rpki-client