Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
File: RZsv0AU73X53dTmNsWO-6HckeKU.mft (raw, json)
Hash identifier: YQH8xQT9UqUdy4X/sjOjRkv38RBMHDi3fDKMqFXe2U0=
Subject key identifier: 0B:47:CC:FD:0A:DA:3F:48:3B:3D:54:20:F0:DC:64:D5:A0:83:01:D4
Authority key identifier: 45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
Certificate issuer: /CN=459b2fd0053bdd7e7775398db163bee8772478a5
Certificate serial: 01A08BD6243B2ABC37A07209E668A7F10240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
Manifest number: 1A4C
Signing time: Thu 10 Sep 2026 15:01:01 +0000
Manifest this update: Thu 10 Sep 2026 15:01:01 +0000
Manifest next update: Fri 11 Sep 2026 15:01:01 +0000
Files and hashes: 1: 1HXGb5-BWji6FxKqR9J69GxxjeY.roa (hash: +4VLoXs2I/t3CPnVmm9jbZnZFGbEot/glqmRqD+Blr8=)
2: RZsv0AU73X53dTmNsWO-6HckeKU.crl (hash: DiaA/HaDAAXjKgWA908WhycXgF0NI2JTOKpzMiVHEXA=)
3: WQdZNfyoXAF_mZl28cfENCrtIMs.roa (hash: U3LDO+4WO64Jt5h3Mz2CbjqUHfSHcu4yyw0WNvXOY9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:24:3b:2a:bc:37:a0:72:09:e6:68:a7:f1:02:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459b2fd0053bdd7e7775398db163bee8772478a5
Validity
Not Before: Sep 10 15:01:01 2026 GMT
Not After : Sep 11 15:01:01 2026 GMT
Subject: CN=0b47ccfd0ada3f483b3d5420f0dc64d5a08301d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a1:cb:87:9d:83:c8:52:de:2a:fc:05:f1:7f:
f3:e9:b8:bd:66:bf:88:4c:b3:38:ea:91:e2:1c:95:
6d:8e:2e:a6:4d:c7:7e:d0:50:41:f2:84:9a:f6:69:
af:04:04:da:93:60:dc:b8:57:8e:03:34:df:4d:51:
f6:a0:57:e6:2e:45:47:7e:55:ba:6f:e2:61:04:f4:
68:54:2e:1b:ac:32:4d:b1:f2:45:85:82:bd:cd:66:
ce:05:64:9d:11:3d:21:fb:5e:49:b4:63:ac:ef:a1:
ed:ea:ef:a9:18:84:e8:df:f3:6d:2b:3d:e0:cf:3d:
35:55:70:2c:97:7a:85:33:40:26:a9:e9:bd:1c:ba:
f6:21:55:e8:c3:4f:04:94:e2:5b:20:b4:9f:f1:c6:
1b:b6:d6:b3:16:7e:b2:7a:39:1d:59:fc:a7:d4:40:
32:58:a1:40:f2:65:2d:a1:53:10:d6:a6:3c:14:86:
27:08:ea:12:22:3b:8f:37:17:ae:95:b6:bd:68:95:
74:2f:7f:04:fe:78:13:9c:32:d5:d8:fa:1f:4e:61:
3c:63:ff:ca:ef:9e:07:d4:64:84:7c:aa:84:80:74:
91:f0:b5:fe:73:6e:1a:15:96:74:aa:88:9f:de:ba:
b3:84:fd:2c:19:57:49:fd:db:bd:cb:3b:ac:eb:37:
e6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:47:CC:FD:0A:DA:3F:48:3B:3D:54:20:F0:DC:64:D5:A0:83:01:D4
X509v3 Authority Key Identifier:
keyid:45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:7c:2f:21:9f:0e:f6:98:13:88:36:20:ce:80:3e:79:07:cd:
12:6a:d9:86:7d:4f:49:2a:d1:6c:41:64:d0:5a:a1:3e:75:c8:
50:3e:7f:b6:e4:60:e2:ed:8f:3b:e7:6c:7a:ad:28:2f:c8:ce:
c5:88:f1:ea:68:84:f8:f5:7d:84:a5:22:15:99:ce:9d:24:fd:
35:cf:45:52:07:59:0e:1b:d1:c3:a1:13:45:9d:7b:9e:7a:be:
8d:48:18:48:04:29:9a:fe:34:b3:3a:ae:84:87:0a:fe:59:20:
5a:84:e3:af:b4:21:f8:47:1f:0c:fc:db:52:93:bb:db:84:cc:
09:2e:5e:ab:ad:53:5c:aa:4a:df:2c:8c:0b:9a:3e:8b:df:fe:
be:c6:c5:b0:fa:bf:b7:a2:12:c8:8c:57:0a:54:e3:4b:ed:45:
bf:64:83:f3:ea:74:0c:ba:c1:f5:db:99:c9:bc:9f:2c:95:2e:
a4:3d:d2:a8:e8:a7:13:c0:a8:e5:92:40:c3:6e:6e:94:32:23:
c7:f2:e7:ef:d3:d0:84:d0:79:57:e3:c3:01:0c:24:c2:f9:eb:
a5:bb:20:b2:1e:80:2e:b5:5c:10:0f:4d:15:72:ae:42:18:59:
60:4c:b4:63:4b:c4:c0:42:f5:f3:ef:5b:68:61:6c:9c:4c:93:
db:09:ee:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:36:34 2026 by rpki-client