Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
File: RZsv0AU73X53dTmNsWO-6HckeKU.mft (raw, json)
Hash identifier: ijhWsxNThrOvTK/w5ieL18KrqBoul19qCKRX9xRIz1U=
Subject key identifier: 8D:53:85:CD:B1:A8:C9:06:60:3A:5E:46:42:21:EF:42:EF:95:BB:D6
Authority key identifier: 45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
Certificate issuer: /CN=459b2fd0053bdd7e7775398db163bee8772478a5
Certificate serial: 01A1927A5C7EB58549B8949F1E80F19C824B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
Manifest number: 1AD4
Signing time: Sat 31 Oct 2026 15:00:54 +0000
Manifest this update: Sat 31 Oct 2026 15:00:54 +0000
Manifest next update: Sun 01 Nov 2026 15:00:54 +0000
Files and hashes: 1: 1HXGb5-BWji6FxKqR9J69GxxjeY.roa (hash: +4VLoXs2I/t3CPnVmm9jbZnZFGbEot/glqmRqD+Blr8=)
2: RZsv0AU73X53dTmNsWO-6HckeKU.crl (hash: aHIhhBr71fdMlcI6pgqET/TQsxUeQfwpWAnk6i2lw6I=)
3: WQdZNfyoXAF_mZl28cfENCrtIMs.roa (hash: U3LDO+4WO64Jt5h3Mz2CbjqUHfSHcu4yyw0WNvXOY9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:92:7a:5c:7e:b5:85:49:b8:94:9f:1e:80:f1:9c:82:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459b2fd0053bdd7e7775398db163bee8772478a5
Validity
Not Before: Oct 31 15:00:54 2026 GMT
Not After : Nov 1 15:00:54 2026 GMT
Subject: CN=8d5385cdb1a8c906603a5e464221ef42ef95bbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6d:75:b9:6a:e3:7a:a5:19:ca:3f:ff:26:f9:
43:85:27:4e:f6:34:e5:7e:c3:67:0a:d1:3b:e0:4b:
ed:b5:20:80:f7:b7:62:5f:93:cd:52:73:dd:80:af:
39:68:77:6b:16:8b:20:fc:01:22:f8:5a:a0:94:a4:
3f:61:58:77:ce:0d:cb:b4:4c:08:6a:de:3f:4c:ad:
1e:6e:6c:96:6b:f9:6e:62:b9:25:81:88:79:90:d7:
5f:78:d9:f4:57:45:cc:32:b5:dd:eb:09:ef:51:ba:
73:27:fa:d7:11:54:b4:22:09:84:cb:19:d6:a1:74:
b5:21:19:d9:d0:6c:cb:66:e7:b1:ef:f7:25:97:dc:
1e:42:13:c1:74:ac:6c:e7:e9:41:5f:a5:2f:c8:e2:
0e:0e:4d:35:b2:db:e6:1b:3f:83:4f:5f:5b:46:a1:
b0:a6:30:30:f7:e1:fd:04:8d:3b:a2:0b:78:32:21:
e1:ef:cc:3c:89:6c:24:6a:9f:da:10:83:f3:84:36:
ac:a1:02:4d:66:c0:73:d1:21:19:4c:05:a3:0e:fb:
77:bf:fb:9c:dd:28:90:5f:4b:4b:62:e1:e1:e3:0e:
8e:d0:5b:ec:48:a0:fa:65:03:51:dd:74:af:52:49:
04:97:b0:77:64:98:d3:0b:7c:d6:ab:2c:e9:94:ad:
3a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:53:85:CD:B1:A8:C9:06:60:3A:5E:46:42:21:EF:42:EF:95:BB:D6
X509v3 Authority Key Identifier:
keyid:45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:2d:70:23:62:66:91:90:6e:aa:a9:0d:d3:b8:22:78:bb:98:
de:12:86:5a:ac:2f:38:71:93:9e:6c:14:f7:62:69:b4:d9:9c:
07:0b:de:14:1f:27:2f:5c:bf:60:53:b8:ad:a3:e2:83:d0:7e:
c6:50:44:ff:2c:e0:8d:bc:41:6c:c3:7b:b1:fa:42:ea:28:bf:
9d:0b:a4:41:26:3b:37:18:5e:60:69:77:71:4c:3d:5a:a3:41:
1c:2b:23:3a:ab:d2:d6:06:f5:c8:fb:51:40:8c:13:2c:ea:05:
59:e8:b7:5f:2f:4f:bc:d4:25:2a:cb:f4:dd:d7:c1:9b:e8:ba:
8a:e5:c4:db:1c:fc:74:d5:e2:8b:4b:00:54:d4:7c:06:05:fb:
ae:40:29:e8:26:ef:be:b2:88:db:ff:50:42:11:4d:a6:68:c9:
78:4d:54:78:95:b4:5a:67:1d:6b:4b:44:99:2e:85:53:a4:77:
a4:1c:dd:13:f3:0a:9b:b1:e2:4a:80:dc:23:dd:c6:ad:2d:6b:
11:d8:7d:fd:96:47:34:2c:6a:34:b7:86:14:92:c1:02:65:19:
73:25:09:8e:40:6b:da:42:b5:51:0c:c5:e7:c5:7a:10:09:7b:
df:04:eb:d7:d2:f5:a2:2e:b8:c2:e8:1f:e0:64:4e:f8:96:a3:
f6:32:fc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:49:08 2026 by rpki-client