Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
File: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft (raw, json)
Hash identifier: pDsC1u8jbtWPUu31LDd2I7ArUQPgCZ/GIhESVObGS0Y=
Subject key identifier: AB:D7:49:2C:F1:11:A9:EE:3C:05:47:2D:87:31:E8:33:CF:C4:67:7A
Authority key identifier: 47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
Certificate issuer: /CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Certificate serial: 01A04273A2314811ED2E80D17FD60F03CE02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
Manifest number: 0D44
Signing time: Thu 27 Aug 2026 09:01:09 +0000
Manifest this update: Thu 27 Aug 2026 09:01:09 +0000
Manifest next update: Fri 28 Aug 2026 09:01:09 +0000
Files and hashes: 1: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl (hash: Bj8HSvnlfvnA4YJ1inERwyfPGgS14GyeXm9sWAHw630=)
2: XHT_nValr2j6SKOfGPicLhiXyO4.roa (hash: H5XqJ+imumLxCFtabqMwr2EYqfcFyzubhax0NWhApw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 08:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:73:a2:31:48:11:ed:2e:80:d1:7f:d6:0f:03:ce:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Validity
Not Before: Aug 27 09:01:09 2026 GMT
Not After : Aug 28 09:01:09 2026 GMT
Subject: CN=abd7492cf111a9ee3c05472d8731e833cfc4677a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:53:7e:7c:98:ce:29:99:0d:7c:f1:8b:24:15:
c1:e8:89:1d:8c:87:db:0a:3f:0c:86:45:95:ce:df:
db:d3:2b:25:19:bd:6b:df:35:06:e1:13:50:da:3d:
de:43:a7:b1:a9:83:3f:e9:e9:1e:8a:7e:59:43:e2:
43:75:a6:84:a5:cf:07:d3:07:29:77:78:c1:6c:b6:
99:9d:a6:0d:95:fd:d9:6e:70:cf:1a:71:39:89:98:
04:a7:2d:3a:67:61:26:ad:8e:f8:db:61:3f:b2:5c:
8c:76:6e:b0:0b:2c:b0:3a:b9:ab:29:12:ca:2c:16:
91:de:d5:d5:67:8f:69:01:2d:9f:06:5b:c9:ae:e4:
42:a1:4a:25:48:eb:97:70:1a:98:bd:e0:4b:2a:10:
b4:c1:e4:06:62:df:50:14:a3:ab:44:07:c8:f1:d9:
c9:eb:73:6d:7f:8b:2a:51:47:93:6b:1c:7b:12:2a:
ca:50:3a:77:d5:fd:99:e9:18:be:8d:3e:d7:5f:33:
9e:12:84:9d:d6:20:60:76:55:6f:71:29:56:ef:57:
34:93:82:cb:8b:89:68:c0:e0:09:60:5a:ee:ec:da:
20:61:ab:8e:01:ef:2f:45:8b:9a:79:ed:d5:49:63:
53:e4:7c:47:86:9c:8e:64:28:31:41:f6:63:bb:95:
ac:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D7:49:2C:F1:11:A9:EE:3C:05:47:2D:87:31:E8:33:CF:C4:67:7A
X509v3 Authority Key Identifier:
keyid:47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:12:17:04:8f:21:2d:5f:ab:b9:d3:60:d3:cc:32:6a:10:76:
f8:96:79:bc:ba:e0:03:74:bc:58:50:f3:a6:ca:19:2b:85:e0:
83:f5:13:73:28:ea:32:dd:60:71:ae:02:79:42:15:3d:b9:c0:
92:ea:46:62:27:d2:68:a0:ad:d3:e4:a9:1e:67:9f:2b:b3:50:
c4:84:ab:1e:61:e9:5f:32:14:17:09:21:19:23:25:d3:ee:8d:
53:14:24:b5:95:9e:a7:c2:e9:a0:d3:67:62:dd:4a:90:88:62:
e4:65:0a:31:79:35:2d:6d:8d:99:f3:48:8b:aa:2f:c2:b4:2a:
c1:08:20:58:e7:0c:cd:20:d9:b6:9b:cb:20:8a:72:c9:b8:06:
22:4e:73:11:77:a9:91:29:05:58:c7:01:96:5f:4d:f8:79:99:
6f:f3:db:db:ec:7a:7b:00:f3:72:e8:45:0e:4c:a3:66:bd:5a:
b7:d9:f1:b0:6f:47:71:8a:35:30:1e:46:10:1b:a7:3f:12:2a:
17:5d:e5:1f:aa:20:e9:d7:a5:3a:b8:14:65:79:16:8f:06:b6:
ea:e5:7c:b0:af:e8:39:2a:f6:52:a1:39:af:9a:37:fd:25:20:
98:a2:0e:b7:7e:b2:d3:18:4a:81:5c:88:1b:d8:01:94:7e:a1:
9e:aa:38:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 13:16:08 2026 by rpki-client