Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
File: rrwz1bpYUjTMzvilethsoer8SqI.mft (raw, json)
Hash identifier: qv9Bma28QJKsutCa0nah4rLEjhhl2u2RSfVdD4b8REs=
Subject key identifier: 3B:EB:99:59:BD:DB:FC:AF:01:14:80:0E:DA:60:71:23:D3:38:AC:7C
Authority key identifier: AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
Certificate issuer: /CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Certificate serial: 01A12C573471924B188F22FDCEE7E3017F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
Manifest number: 0A47
Signing time: Sun 11 Oct 2026 19:01:14 +0000
Manifest this update: Sun 11 Oct 2026 19:01:14 +0000
Manifest next update: Mon 12 Oct 2026 19:01:14 +0000
Files and hashes: 1: E907k5QYJtLiwC_jK3iFvXI9RdI.roa (hash: snQqBx0r+DlkIlsrsM46ddsGDow3XlKtABIHB2rzqdc=)
2: rrwz1bpYUjTMzvilethsoer8SqI.crl (hash: yfVL68hdFlOetJsVcsODSKTWVyzmmXDcZMxcjqgeIKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:57:34:71:92:4b:18:8f:22:fd:ce:e7:e3:01:7f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Validity
Not Before: Oct 11 19:01:14 2026 GMT
Not After : Oct 12 19:01:14 2026 GMT
Subject: CN=3beb9959bddbfcaf0114800eda607123d338ac7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:83:cd:3f:d7:04:39:03:61:b9:1f:89:53:db:
42:a1:2b:e7:65:f8:aa:5a:72:7b:a4:83:45:22:8a:
9d:7c:d0:32:7e:aa:95:36:02:b6:69:d5:13:65:b6:
a1:aa:48:d0:08:84:4c:14:ad:13:26:52:b8:c3:f8:
e1:57:4a:7a:b1:71:09:19:2f:08:d8:2b:dd:74:96:
f9:01:d1:3c:f9:4a:15:65:15:9e:80:14:02:22:11:
6b:d6:f2:fd:72:26:d2:cc:66:ea:5f:3c:2b:7a:38:
4b:69:06:4f:f0:98:40:1a:fb:23:0a:f6:d1:4c:50:
a5:60:4b:f7:c1:a2:a5:f8:f9:4f:b1:a0:dc:d4:79:
ee:4f:a3:7d:25:34:7d:5f:43:c9:ff:51:ea:0a:f5:
ef:90:32:82:44:8f:d2:ca:7a:98:c1:07:7f:da:47:
86:6d:cf:0c:a2:a7:93:b4:98:0b:ec:1e:c6:ae:9a:
0c:04:c6:c5:de:ab:d3:cc:32:c7:e3:ba:0f:07:90:
1c:c9:18:d1:07:20:b8:1e:61:3b:1b:53:42:68:0c:
cf:00:f1:ef:3c:b7:fa:51:17:bf:db:a8:10:f4:24:
52:aa:14:d8:d9:4f:0c:6c:67:14:7e:5f:dd:0b:89:
51:38:8d:54:eb:28:a6:f8:f9:45:13:19:ae:1f:5f:
1a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EB:99:59:BD:DB:FC:AF:01:14:80:0E:DA:60:71:23:D3:38:AC:7C
X509v3 Authority Key Identifier:
keyid:AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:0d:af:22:19:41:25:4f:31:3c:6d:55:a2:20:af:f2:c7:6d:
bc:ad:c6:ed:cc:43:47:35:cd:27:b9:8a:d5:9c:df:4d:6a:d5:
b3:cc:67:5c:1a:c1:c6:73:37:ff:33:3b:2a:a6:df:e1:de:93:
bf:0e:db:dd:94:bf:cc:e5:ac:1e:c4:b6:85:97:00:dc:3e:ad:
c0:8e:3e:c9:11:6b:61:b6:b1:5a:26:b3:35:49:80:91:ce:bc:
fa:0c:5e:45:2f:e0:10:ed:72:f7:5d:af:2d:71:fa:50:77:01:
22:ba:8a:72:d6:7c:21:b2:ae:5d:31:26:13:7c:50:a6:fe:c4:
02:56:36:6a:72:8e:7b:a4:ab:87:f3:62:25:d8:d2:e8:fb:39:
bf:58:d5:ac:bf:a0:0b:e5:da:1a:af:9f:ca:12:4d:a6:f2:a9:
bb:e7:b5:a8:60:b8:65:23:6a:ff:4a:98:8a:c0:4f:92:06:a9:
80:92:00:d2:ad:3b:f1:0c:7d:cd:28:15:20:7c:60:29:12:70:
a5:58:f5:4f:85:a5:07:30:e1:3c:85:6d:16:fc:dc:74:63:68:
73:1f:6b:62:5b:d2:3c:ff:c3:1c:04:87:5a:bf:e1:90:d0:be:
ff:2f:0f:e7:14:25:65:7b:de:93:d0:cb:34:14:79:51:8f:75:
92:ae:ea:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:19:14 2026 by rpki-client